
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
File: 602678F8252A11EEA290E91FC4F9AE02.roa (raw, json)
Hash identifier: X00gSuzOOkYP4DLmpOt/0UBFhvldg0Co5j7FLcwODFY=
Subject key identifier: 82:35:57:D7:8B:28:DE:6F:E5:B9:80:6F:9B:80:A7:34:1B:61:2E:0B
Certificate issuer: /CN=A9116351/serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Certificate serial: 01F2
Authority key identifier: DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:34:59 +0000
ROA not before: Tue 03 Jun 2025 04:02:22 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 136928
IP address blocks: 103.215.186.0/24 maxlen: 24
2001:df2:9140::/48 maxlen: 52
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116351, serialNumber=DC21B9029EAC0790878FACA7CA813B4B3AEDC90E
Validity
Not Before: Jun 3 04:02:22 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3ec23-ae64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:94:3f:c7:75:7c:fb:ae:58:69:5f:6d:b4:94:
11:9c:0d:9b:ec:f8:a3:45:e8:45:7d:cc:07:f2:08:
1f:ae:bd:91:7d:b4:41:e4:04:93:f0:89:da:23:4b:
6c:02:d1:67:71:e5:ce:d4:cb:1a:9c:cb:42:12:5a:
6c:45:f3:f0:63:d5:ae:bf:01:b4:31:5c:12:25:48:
cd:a0:dd:7a:07:7e:6c:2f:99:83:df:9b:6a:34:54:
71:a7:f9:24:88:7c:5d:82:4f:db:b3:c4:b1:a9:71:
9c:59:db:a3:ce:3f:3b:be:7e:fd:9c:9e:a8:a4:26:
c0:ce:cb:e0:6d:0a:c0:b7:f5:35:d7:58:f8:4d:53:
ce:ad:df:b9:6c:10:1f:ff:5e:61:ac:7c:7e:ad:59:
63:03:6d:14:f2:cc:0d:a9:4b:83:69:5c:60:42:64:
f2:e7:60:01:1a:e7:56:c9:ef:f6:c8:07:86:46:35:
d1:d6:bb:e4:5d:fb:ab:e4:08:19:91:b1:e0:41:16:
ae:df:13:5f:3e:ea:dc:35:5b:a9:17:a9:9f:82:17:
c5:1d:80:fc:e2:43:c9:f2:0c:fe:6a:35:77:e3:b7:
57:3b:2b:a0:8a:40:4b:69:30:f3:51:6c:11:27:74:
d8:56:5d:37:ea:4f:2a:43:5e:2a:3f:b1:80:1b:8d:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:57:D7:8B:28:DE:6F:E5:B9:80:6F:9B:80:A7:34:1B:61:2E:0B
X509v3 Authority Key Identifier:
keyid:DC:21:B9:02:9E:AC:07:90:87:8F:AC:A7:CA:81:3B:4B:3A:ED:C9:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3CG5Ap6sB5CHj6ynyoE7SzrtyQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116351/C8A8D976252911EE939FC31EC4F9AE02/602678F8252A11EEA290E91FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.215.186.0/24
IPv6:
2001:df2:9140::/48
Signature Algorithm: sha256WithRSAEncryption
01:a1:bd:97:22:95:eb:cc:02:e9:9d:a1:e5:a6:cb:06:76:fb:
ff:09:42:d7:9a:ae:92:ee:7e:44:95:2e:ff:5a:ad:a0:9e:b2:
f5:60:b0:14:f4:9b:50:f5:35:8d:65:9e:c3:81:e4:7a:80:f6:
72:4f:3a:ef:55:d8:36:7b:2c:bc:12:7a:6a:a5:f3:9d:26:e2:
26:30:40:7b:5a:0a:6c:99:b0:d9:fd:5f:81:09:fc:d0:a2:00:
19:2f:f8:11:8d:83:c8:7a:56:cb:c3:62:58:81:2d:90:f0:61:
42:a8:01:b0:f8:68:76:f2:37:15:c5:51:4f:d0:36:37:fa:87:
5a:7c:39:23:e2:5a:24:1b:ef:76:53:8b:61:47:fd:68:5b:58:
63:80:99:e1:af:9d:11:46:15:ca:2f:35:8e:25:91:ec:f5:d9:
55:a0:59:d8:90:36:f6:9a:a8:2b:f1:79:9d:f6:ec:5a:14:32:
93:3c:7e:de:24:0c:23:a4:ec:ba:48:51:b9:aa:84:68:ba:31:
2b:31:02:e2:9d:2d:2c:a0:7b:66:c9:6c:b1:e8:e7:95:fc:8e:
7d:cb:66:a1:83:e5:02:46:fb:2a:1d:9c:30:b1:41:27:7f:de:
db:c2:a6:3a:e6:27:0b:46:fd:7b:0c:42:ca:c7:9e:90:da:a2:
a0:d1:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:27 2026 by rpki-client