
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/15DF0B709C5211EFB58CEA09C4F9AE02.roa
File: 15DF0B709C5211EFB58CEA09C4F9AE02.roa (raw, json)
Hash identifier: UstPSB4qmcMV5Tk9wNjfM45Bg37nQfe8qxzaS6CBRD4=
Subject key identifier: 2F:16:28:C3:EF:48:D6:BF:45:B8:9D:15:E4:98:CA:2E:B3:84:9B:D8
Certificate issuer: /CN=A9139504/serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
Certificate serial: 0133
Authority key identifier: 5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/15DF0B709C5211EFB58CEA09C4F9AE02.roa
Signing time: Fri 05 Jun 2026 06:37:36 +0000
ROA not before: Fri 05 Jun 2026 06:37:36 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132890
IP address blocks: 103.166.206.0/23 maxlen: 23
103.166.206.0/24 maxlen: 24
2407:5bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl
rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139504, serialNumber=5B05825BFBA2B2A5541CF3F09D972113AECC8D75
Validity
Not Before: Jun 5 06:37:36 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a226eb0-f648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:bd:2f:cf:e9:e1:73:2b:c5:ed:a3:08:92:
53:60:6e:fa:08:25:4a:78:7d:1e:d3:06:fd:83:91:
ae:28:87:48:c6:74:b7:12:36:52:40:03:f5:c7:91:
94:68:fb:af:c6:b0:fc:1b:ce:29:5c:3e:ec:be:59:
e0:0e:ba:1d:33:91:53:dc:de:42:a2:f8:93:b6:0c:
3c:88:2a:99:15:8f:c1:ae:97:21:1e:68:b1:ec:13:
e0:a9:10:07:4a:13:fb:07:1c:74:85:9d:0b:a7:7b:
6e:fb:1b:0d:15:ba:78:90:10:e4:e8:3d:3f:55:f1:
b0:d5:b1:1a:80:73:fa:3d:52:e5:c8:ba:99:87:e6:
24:f9:a8:b9:f0:02:30:9a:da:a4:ad:53:57:0a:21:
42:93:25:d3:65:cd:ac:9f:1a:ae:41:d9:25:e2:3a:
15:65:5d:da:a1:ab:76:e8:23:a0:00:4d:03:fb:d9:
1c:a9:c6:9d:5b:3e:6a:63:d5:0e:4d:71:89:8d:ca:
97:d0:ec:37:7f:4b:29:c0:5b:a1:6c:6d:85:78:fd:
bf:f3:ea:4d:2d:cc:7e:6e:a6:7a:1b:1c:b6:01:4b:
9f:f1:75:86:06:f3:54:b2:95:1f:74:c3:19:57:b1:
da:0d:5c:38:24:a8:a6:df:90:98:0a:7a:5c:65:2a:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:28:C3:EF:48:D6:BF:45:B8:9D:15:E4:98:CA:2E:B3:84:9B:D8
X509v3 Authority Key Identifier:
keyid:5B:05:82:5B:FB:A2:B2:A5:54:1C:F3:F0:9D:97:21:13:AE:CC:8D:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/WwWCW_uisqVUHPPwnZchE67MjXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WwWCW_uisqVUHPPwnZchE67MjXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139504/604D9BD49C4F11EFA9835B6AC4F9AE02/15DF0B709C5211EFB58CEA09C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.206.0/23
IPv6:
2407:5bc0::/32
Signature Algorithm: sha256WithRSAEncryption
82:5c:2d:af:86:6b:a0:9a:20:69:ca:ea:e0:a5:7a:2d:96:d6:
96:5f:02:37:bf:51:f2:b8:8d:ef:0f:bb:5d:9d:0d:6a:a1:ea:
57:05:a5:35:b6:e8:de:cc:df:8a:48:d1:85:77:7e:23:5d:1e:
ae:a7:69:ca:e6:00:86:de:6a:98:1e:7f:8a:1a:e0:16:2d:60:
5e:81:bc:b5:cb:82:83:1b:26:ec:ee:cc:f5:75:fc:6a:78:10:
74:a8:8e:99:74:f8:45:e9:bd:90:5f:e5:b4:85:fd:ed:b2:6a:
46:63:29:b7:74:5b:2f:03:a2:f2:2c:a9:de:d2:ba:96:9a:b1:
2e:23:39:46:5a:88:96:29:5b:0d:02:1a:5e:4a:b8:23:28:fe:
50:76:1e:6e:4a:ec:69:38:03:0d:fe:16:3e:d7:f0:40:cc:0f:
13:87:6e:34:4f:cb:78:f0:04:41:1b:08:c1:ae:f9:95:67:a9:
7d:e7:3f:c1:8d:62:f3:44:79:ff:f8:95:00:8d:02:25:4f:3e:
79:62:70:7d:92:e6:1e:c5:76:af:fe:42:00:ea:79:41:4a:3d:
a5:97:1a:0d:f8:5d:e5:47:13:a1:9f:32:dc:59:a6:0b:f6:06:
50:12:b0:82:bc:0c:9f:f9:3b:80:26:14:c4:1a:9a:fe:5e:4b:
6f:3b:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:11 2026 by rpki-client