
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/81FC16A6B46511EF86BEAC6BC4F9AE02.roa
File: 81FC16A6B46511EF86BEAC6BC4F9AE02.roa (raw, json)
Hash identifier: 5VO9AYfUls793WW6aylahYoLQQVtZJJZe9EelPOo2yw=
Subject key identifier: 2E:36:C6:73:87:C0:FF:8F:CF:FB:87:31:FA:AA:70:A4:73:D2:9D:30
Certificate issuer: /CN=A917FACB/serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Certificate serial: F9
Authority key identifier: 35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/81FC16A6B46511EF86BEAC6BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:48:27 +0000
ROA not before: Tue 09 Sep 2025 06:43:18 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139020
IP address blocks: 103.138.152.0/23 maxlen: 23
2404:d0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FACB, serialNumber=35814B15FB834939EEA85CC4A67C4E1A6A85A4F5
Validity
Not Before: Sep 9 06:43:18 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a33b-90d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:8f:88:19:82:fb:94:2b:b3:01:b3:50:62:
de:6a:26:22:24:15:7d:89:a9:b9:f8:b2:cd:3f:7c:
66:b1:0d:33:6f:ce:c3:06:1e:de:61:19:3c:81:fe:
df:52:7f:fb:2b:ec:28:c4:9e:0b:ab:e1:60:ee:cf:
29:c7:19:7e:4a:1b:6f:36:5e:85:d6:7f:42:70:ea:
47:52:c9:5f:d1:c7:bf:9a:b4:c5:d4:aa:98:57:95:
ff:22:a9:ed:f1:d4:ab:ad:8a:48:76:70:64:8f:3a:
31:68:50:d9:a7:96:87:e3:8e:d3:96:89:b4:f1:00:
c1:b0:da:88:ca:dc:93:1b:88:db:a5:5d:c2:d3:d3:
3e:cb:a9:d4:5d:41:91:60:89:ea:8e:46:9e:a4:b7:
8b:d7:e5:05:9f:05:fb:f9:a6:9e:66:78:12:18:a0:
a8:9d:96:df:0c:26:33:b7:4e:55:12:ed:3b:6b:72:
07:74:1c:95:e6:41:5f:38:ff:6f:cc:0c:7c:cd:31:
8d:02:3b:eb:c8:11:5a:09:6d:35:76:95:9c:27:e5:
67:3f:26:86:f8:e1:44:1c:e5:72:b8:23:62:f2:2b:
53:1e:dc:11:7a:60:f8:b8:0a:38:52:cf:ca:55:a2:
c7:00:b1:e6:71:cf:57:f9:af:74:c1:75:e8:3a:f8:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:36:C6:73:87:C0:FF:8F:CF:FB:87:31:FA:AA:70:A4:73:D2:9D:30
X509v3 Authority Key Identifier:
keyid:35:81:4B:15:FB:83:49:39:EE:A8:5C:C4:A6:7C:4E:1A:6A:85:A4:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/NYFLFfuDSTnuqFzEpnxOGmqFpPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NYFLFfuDSTnuqFzEpnxOGmqFpPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/25D11886B46511EF9BFBAA67C4F9AE02/81FC16A6B46511EF86BEAC6BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.152.0/23
IPv6:
2404:d0c0::/32
Signature Algorithm: sha256WithRSAEncryption
21:18:67:54:a0:f0:3d:81:52:b3:47:60:4c:41:93:f7:65:43:
6d:83:e6:d6:cb:a8:56:a3:16:06:2e:59:f5:19:d8:e7:47:ae:
f2:93:6b:fd:fa:ca:bb:bf:19:20:c5:ac:12:a9:53:4c:86:5c:
a0:1c:d7:57:76:c3:b4:24:0f:62:18:cd:52:d0:c9:da:8a:81:
6f:f1:dd:18:29:d1:69:e3:11:0c:ae:29:f7:de:69:e3:8e:0a:
d4:0c:e8:cc:5a:97:7d:29:fa:ab:71:62:43:25:48:8b:b7:2d:
b1:cf:01:2d:c2:1c:d7:8c:07:4b:b7:90:1f:d5:ff:3c:0a:90:
42:53:93:50:ca:4b:b7:06:5b:8f:40:54:65:a8:57:2c:03:00:
bb:db:43:71:f4:65:83:6a:11:c4:b6:2c:00:33:4b:e6:2a:56:
7b:a6:42:48:e4:fb:9e:a2:c7:c1:16:ed:ff:89:8a:fe:12:76:
33:49:25:78:25:0c:35:e7:8b:4f:d6:7c:c6:22:b6:4a:fa:cc:
24:e3:33:5c:cf:7e:40:6c:9a:51:fe:a6:b6:6b:0a:f6:d0:c8:
c2:c8:cf:49:a0:20:91:74:8c:6f:9c:a2:fe:fa:7b:ea:57:12:
b9:2a:c1:e4:1b:22:1d:eb:90:e7:52:b4:09:91:53:9b:32:d8:
78:16:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:15:00 2026 by rpki-client