
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/59D3C5822AF711EE8EDEA185C4F9AE02.roa
File: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (raw, json)
Hash identifier: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=
Subject key identifier: 4C:90:F7:16:48:BE:76:37:29:4D:DE:10:45:B4:C3:EA:F4:91:0D:A8
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 154D
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/59D3C5822AF711EE8EDEA185C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:31:13 +0000
ROA not before: Thu 24 Jul 2025 17:25:45 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131464
IP address blocks: 103.115.242.0/23 maxlen: 23
103.115.242.0/24 maxlen: 24
103.115.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5453 (0x154d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: Jul 24 17:25:45 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45bc1-f280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:ff:c8:ac:a5:9c:cd:c6:2a:01:76:d8:b4:
d4:53:a6:db:8c:08:9e:58:17:4a:dd:2a:87:7d:07:
95:82:ab:a9:77:9d:7a:1d:d3:7e:9f:f6:28:02:c9:
21:ba:57:90:df:40:fb:f4:5f:eb:49:91:cb:dd:94:
86:be:41:96:62:06:ac:82:e0:68:ec:4a:63:dd:bd:
e0:3a:38:77:3b:a5:1b:fd:11:8a:34:10:87:54:42:
c3:ea:0b:a9:aa:cb:5f:e9:5e:c1:fe:54:3d:1d:af:
9a:a7:21:16:0c:fb:2c:d4:07:09:2f:3d:8c:28:31:
fc:1d:85:48:7c:41:75:78:0d:15:cc:3b:76:67:a2:
76:4d:35:dd:a2:80:3c:14:cf:66:31:aa:82:14:23:
68:d4:68:59:ce:ed:2f:2d:41:98:39:c4:b8:65:70:
f2:c4:ad:c5:c0:31:60:b4:02:55:1b:b1:82:17:42:
e6:3e:d7:9a:be:5c:7b:c4:91:8a:8a:84:7e:2b:f4:
45:f3:4a:88:fe:e4:14:05:13:46:18:66:c0:4c:44:
51:6f:17:9d:02:21:bd:f6:5a:e3:49:e9:06:aa:43:
89:09:52:81:ee:5f:b5:cc:31:cb:5c:d1:21:59:61:
44:85:2d:b0:fa:a1:9c:2a:48:f6:e7:d5:4e:a4:2a:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:F7:16:48:BE:76:37:29:4D:DE:10:45:B4:C3:EA:F4:91:0D:A8
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/59D3C5822AF711EE8EDEA185C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.242.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d3:ab:c3:11:88:2e:fd:5b:4e:1d:80:ea:1c:0a:c6:4b:3a:
cf:5d:3b:e2:c7:a0:fe:ca:e4:9d:e0:54:8b:f0:1b:b1:07:f8:
c7:8d:6e:06:af:26:9f:62:dc:ed:36:34:51:a5:05:07:f4:6e:
8a:b5:b2:78:6f:df:67:a3:b0:13:18:ce:2a:e4:b9:f8:4a:eb:
2e:a2:c5:61:38:72:0a:ae:c9:59:f9:3e:73:d8:d4:f5:66:9e:
07:17:e5:20:ae:e9:3f:3e:1f:b2:4a:cd:58:83:91:1e:10:c9:
e7:9f:20:03:5e:40:5f:b4:32:68:b2:57:6f:85:dc:0a:29:44:
fd:56:e5:d6:9a:05:48:af:49:88:fc:5c:3c:79:14:47:de:5e:
44:97:41:68:2b:be:09:9c:3c:a2:ca:0e:5a:15:f2:a4:df:79:
50:06:28:5b:fe:c6:b0:f1:77:f1:64:34:fe:ca:37:84:bc:83:
10:49:39:f4:1c:4d:a3:a6:e1:9b:9b:0a:92:e2:98:6f:6b:c6:
c0:30:24:26:d9:66:3e:4d:6a:61:84:44:6a:ae:93:87:c3:b1:
2b:13:6e:57:34:1f:b0:73:b0:48:0c:87:59:11:3a:bb:ec:40:
bf:52:42:f9:78:b3:d4:65:8f:fd:a6:88:63:12:ff:77:25:32:
8f:49:86:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:26 2026 by rpki-client