
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/F624D4745F1211F19AB29B9E6F47A888.roa
File: F624D4745F1211F19AB29B9E6F47A888.roa (raw, json)
Hash identifier: unN5ZLmtbX3k1UYAkCBYduF4KeOviLmJzDX2SdB7agM=
Subject key identifier: AE:7B:92:B0:39:A1:F6:E7:6C:02:F5:65:C3:61:AB:BD:D5:C1:00:B6
Certificate issuer: /CN=A9154AA5/serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Certificate serial: 0A12
Authority key identifier: 7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/F624D4745F1211F19AB29B9E6F47A888.roa
Signing time: Tue 30 Jun 2026 20:26:01 +0000
ROA not before: Tue 30 Jun 2026 20:26:01 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 139224
IP address blocks: 103.139.254.0/23 maxlen: 23
103.139.254.0/24 maxlen: 24
103.139.255.0/24 maxlen: 24
2402:3ca0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578 (0xa12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154AA5, serialNumber=7AFA9872E8D0FF922995E5893B59C3214767B1FC
Validity
Not Before: Jun 30 20:26:01 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a442659-265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8e:b7:69:cd:80:4b:9f:60:32:c8:91:ec:91:
ba:66:1c:2f:5f:95:9d:0a:af:80:fb:8a:bc:e3:08:
8b:99:82:82:47:f6:3d:d7:72:73:83:db:24:89:bd:
6f:c1:d7:9e:0e:ee:8d:75:a2:de:98:97:37:c5:c8:
98:6d:f9:74:5c:5c:15:05:1e:48:ef:a3:71:98:1a:
06:31:c8:c8:c2:5f:cc:af:96:fe:c1:ce:af:0a:91:
ec:09:22:a1:c9:19:4b:b8:4c:4b:15:84:54:54:ae:
e3:25:88:c6:e7:42:73:b9:20:88:81:af:dc:83:35:
3c:56:fe:d4:5f:31:4b:30:02:0b:23:19:8c:5a:28:
5d:f6:fe:53:0d:22:ad:af:f8:90:a8:b0:02:66:1d:
70:86:86:36:7e:58:17:63:3e:18:ba:fb:a0:a8:a0:
d1:80:05:21:f5:2e:be:b4:14:01:03:82:07:e7:e4:
46:52:9e:28:30:f6:f0:45:7c:26:63:9b:01:a5:e3:
fc:1b:99:00:43:b2:bc:55:50:d4:4b:ee:2e:75:60:
56:5f:76:c8:59:9e:30:7b:93:df:b7:c8:1e:cd:ab:
19:ab:d7:dc:42:98:fb:2b:30:c6:3a:ef:e3:59:da:
df:0e:cf:24:cb:d7:69:be:df:01:4e:48:2c:98:8a:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:92:B0:39:A1:F6:E7:6C:02:F5:65:C3:61:AB:BD:D5:C1:00:B6
X509v3 Authority Key Identifier:
keyid:7A:FA:98:72:E8:D0:FF:92:29:95:E5:89:3B:59:C3:21:47:67:B1:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/evqYcujQ_5IpleWJO1nDIUdnsfw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evqYcujQ_5IpleWJO1nDIUdnsfw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AA5/830E2694A0A911EAAF2EF211C4F9AE02/F624D4745F1211F19AB29B9E6F47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.254.0/23
IPv6:
2402:3ca0::/32
Signature Algorithm: sha256WithRSAEncryption
62:5f:89:04:94:9f:56:50:e9:81:c3:cc:f5:65:41:f7:5c:18:
84:23:aa:ea:3a:67:d1:b8:6f:48:18:30:69:46:3d:c4:75:57:
32:b1:01:6a:04:ea:e3:da:77:0f:f2:80:02:11:09:06:83:17:
cb:07:dd:b2:27:c9:10:ad:71:55:e6:c5:f2:02:97:4f:af:ac:
b9:11:57:7d:08:8f:82:95:9e:aa:a4:9a:d9:90:eb:98:67:a7:
09:6d:ea:60:cc:ef:a2:98:9d:a8:2d:f8:66:6b:88:27:86:96:
e8:df:4c:5d:08:38:c7:1f:b5:39:dd:3f:17:d6:60:2b:05:d4:
f2:14:ba:85:ef:3d:5a:aa:30:4d:78:46:0d:46:e7:46:72:8a:
b2:75:f7:32:c3:ab:ef:a7:57:10:1a:b1:90:2f:ac:69:b1:aa:
a8:2a:2c:db:50:f7:5d:68:25:f4:ba:1c:28:3b:15:1f:2b:1b:
a4:28:a5:9b:2d:4e:fc:4f:57:84:26:41:d3:c7:c6:25:0b:cd:
ce:b7:8d:61:6d:cd:9f:3a:cf:ad:37:3f:dc:84:39:a7:92:6d:
7c:8c:be:f4:08:a4:a8:76:b4:2b:9a:a1:bc:7f:84:ca:8a:9c:
96:a1:6c:21:2a:52:ae:f9:63:3e:14:ba:e9:28:4f:ab:8b:c3:
43:ff:03:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:34 2026 by rpki-client