
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
File: FF4F13D4448711ECA80CFC34C4F9AE02.roa (raw, json)
Hash identifier: Oj89BVTbff35iiUEgDKh/2E91FVnzurxC9Bnk1Qy+WY=
Subject key identifier: 4C:A7:50:91:48:5B:8C:86:25:13:67:D9:D0:A2:29:AB:CA:FE:9A:30
Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial: 0D55
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
Signing time: Mon 24 Aug 2026 18:36:06 +0000
ROA not before: Mon 24 Aug 2026 18:36:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137810
IP address blocks: 103.114.98.0/24 maxlen: 24
103.114.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 18:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3413 (0xd55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Validity
Not Before: Aug 24 18:36:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a8c8f16-7fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:62:22:19:1b:d7:40:d2:88:2c:ec:b3:a1:
c6:12:d3:b9:a4:b5:7e:c5:a2:b2:16:60:10:c0:17:
bc:21:64:65:82:1a:20:05:89:fe:5e:21:ed:4a:fe:
de:ae:62:e8:df:e9:55:c4:15:d2:8e:cc:a9:cd:d4:
ca:c1:70:81:0c:90:02:e5:2c:5e:28:14:e9:df:42:
be:f8:fb:54:b6:21:73:f5:a6:c5:e7:ce:e8:6e:1c:
2c:ca:c0:c5:56:4a:41:a1:3b:cd:ae:83:1d:dd:35:
53:ff:83:ca:45:e8:fc:ea:a2:11:3c:a5:cd:13:2f:
ea:d7:2c:8c:e2:51:54:72:41:7f:3f:45:28:f3:0c:
47:8a:94:7e:6d:f3:2e:ef:b8:71:d6:ea:39:c3:70:
72:fd:9a:f5:48:17:86:35:8b:01:10:7a:97:fa:17:
f2:8d:df:00:2b:c7:15:d0:83:8c:26:f9:19:61:07:
4c:4b:20:2b:96:3d:2d:ea:c5:e5:6d:bf:88:57:d4:
9b:4c:4f:de:58:1b:cd:5d:af:44:0b:e3:65:4d:04:
21:13:7c:6d:0d:3e:1a:eb:b9:55:00:3b:cb:02:dd:
e2:1b:47:30:ee:ef:63:f3:34:ec:da:31:5a:d6:4a:
34:4b:e5:62:ac:37:f7:57:41:d7:d5:a9:6c:bf:62:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:50:91:48:5B:8C:86:25:13:67:D9:D0:A2:29:AB:CA:FE:9A:30
X509v3 Authority Key Identifier:
keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/FF4F13D4448711ECA80CFC34C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.98.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c3:27:90:71:b7:70:be:23:09:1d:2c:9c:c7:c8:ca:01:23:
1a:bd:0c:d3:7e:4a:af:9b:29:3a:fc:cd:b3:33:cb:ec:28:eb:
0c:c8:b4:29:ea:d2:07:e7:9a:d4:fb:08:f2:80:7e:4f:9a:86:
90:41:49:85:7e:3d:8d:95:73:f0:b0:d9:6e:bf:d6:ef:d3:d3:
e0:75:af:ad:83:70:f7:36:27:17:6a:a1:b0:ef:97:83:9d:18:
67:f9:f9:dc:8b:d4:4c:04:3e:25:d0:c0:dc:f9:ff:d8:3c:d2:
26:33:a4:a4:98:d4:b8:9f:d1:90:3b:85:f7:f9:2f:29:50:d3:
56:aa:91:22:66:b7:40:73:7e:af:41:49:3b:56:2b:ac:b3:bc:
b0:5a:17:f4:c6:67:74:f5:7d:88:d3:55:69:ba:3d:59:0a:25:
f9:f9:d9:fc:99:67:a6:18:b3:57:03:88:54:f8:ab:a4:b1:e6:
e2:6a:78:94:d5:1f:39:4c:40:2d:0c:54:04:37:4f:44:bd:0d:
e7:4b:6e:cd:ad:b5:df:20:09:2a:81:26:08:b1:3f:3c:98:78:
8e:a7:fe:e1:23:40:40:53:0d:3d:30:2f:c3:12:4b:dc:1d:74:
c2:b2:b2:a0:86:43:4c:ba:d8:7f:21:91:ce:b7:63:06:5e:32:
c2:38:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:07:54 2026 by rpki-client