
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
File: AA5485827F3611ECBED94963C4F9AE02.roa (raw, json)
Hash identifier: em6Z1UTwpQ/pN7PoRNgk8av9GKamLVs8Phun3EsGZYw=
Subject key identifier: F0:CD:7B:34:4D:05:73:23:B8:A0:3D:88:14:DB:66:54:A0:CD:17:96
Certificate issuer: /CN=A9154D26/serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Certificate serial: 0522
Authority key identifier: CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:52:32 +0000
ROA not before: Tue 25 Mar 2025 00:07:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141752
IP address blocks: 103.163.61.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154D26, serialNumber=CDA03F65F4D33A339969973F6A9BD07DAF9E3724
Validity
Not Before: Mar 25 00:07:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fe50-b1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:69:24:52:65:f1:ba:2f:79:79:2d:38:5a:
6f:5b:bf:a9:92:fb:1e:fe:17:f2:53:7a:b2:bc:fa:
57:73:ee:9d:5d:bc:fa:8c:dd:f3:11:1e:4b:91:cb:
78:e7:13:44:fe:6e:e8:91:4f:bc:92:44:00:a8:85:
dd:24:8f:cc:c1:fb:68:85:b2:34:6e:c8:71:61:71:
14:50:6b:90:e4:d6:70:ac:e9:a0:f5:07:9d:51:17:
5f:ce:ea:61:bf:ad:f5:0a:14:e1:ba:36:36:ea:8f:
41:d6:36:72:a5:9e:bb:25:d8:c9:50:76:86:fe:fc:
83:ad:e8:22:9b:40:f6:5e:f2:21:ae:f6:6a:6f:d7:
5b:31:18:36:be:91:aa:dd:4d:e0:dd:23:b5:a2:47:
d0:89:20:a8:a8:99:57:ee:c5:01:c1:9c:c4:bd:a1:
15:00:18:f7:fa:99:bc:82:07:82:30:f9:10:51:e6:
91:11:e6:ed:44:58:b5:17:87:a5:0b:1b:cc:51:17:
ac:8d:3a:4b:b1:8e:56:73:1c:ed:ca:e5:1a:0e:46:
13:09:0c:0d:eb:e6:38:41:30:a9:3b:bd:da:50:67:
c7:0b:25:0f:22:31:1e:cf:25:8a:89:a2:56:3f:34:
87:e0:97:87:14:ef:4d:06:83:ee:a4:6e:f6:a4:5e:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CD:7B:34:4D:05:73:23:B8:A0:3D:88:14:DB:66:54:A0:CD:17:96
X509v3 Authority Key Identifier:
keyid:CD:A0:3F:65:F4:D3:3A:33:99:69:97:3F:6A:9B:D0:7D:AF:9E:37:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaA_ZfTTOjOZaZc_apvQfa-eNyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154D26/C00D9726413B11ECB06AE030C4F9AE02/AA5485827F3611ECBED94963C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:aa:c8:2d:7e:d6:ce:e0:22:e1:d6:41:24:0b:84:a9:7c:75:
12:6b:70:64:f8:17:be:47:59:8e:ec:63:20:64:b0:45:cb:43:
77:04:c6:43:28:50:76:ba:1c:31:16:e4:63:2b:90:fb:b1:2d:
af:68:1e:62:84:16:58:68:31:14:14:10:3c:ab:1a:c1:07:8a:
47:5f:14:69:c4:1e:f4:8e:5c:99:e0:ea:e1:f3:f7:b6:24:1f:
85:10:5a:6d:76:d9:26:81:56:e2:db:26:c8:1f:e4:8b:99:83:
3b:43:52:eb:87:c4:56:81:55:f1:a4:93:a4:61:da:7c:7b:fe:
fc:2e:a8:80:33:ec:67:52:39:2c:5f:71:c3:4f:c4:f7:bf:9f:
e5:45:b8:8a:ba:3d:a7:b2:6e:c0:ec:41:81:5d:63:ba:a7:a4:
2f:15:c7:c7:a2:09:b5:6b:5b:3f:ce:75:c7:ee:8a:4c:53:73:
47:4d:64:96:89:bf:0b:d1:8b:34:c9:98:95:25:3b:31:2b:a6:
8a:a5:9d:08:d5:12:3a:78:53:df:44:5d:16:86:8a:2e:68:63:
60:56:48:83:ad:89:c7:5b:0d:2e:e3:4b:7d:b5:06:d5:29:91:
26:bc:b9:3a:ba:16:0c:33:18:fc:19:01:00:b7:bc:1f:31:5b:
64:71:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:34 2026 by rpki-client