
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/70DB0EF658B311F1B5F45CFF96833773.roa
File: 70DB0EF658B311F1B5F45CFF96833773.roa (raw, json)
Hash identifier: CrIbNbCtAuv6zeYIPYums6fwslq7cd+71vYXXC830Hs=
Subject key identifier: E1:B2:B5:C9:09:62:59:1A:98:21:7D:21:B5:A0:39:2A:CE:F0:4D:7C
Certificate issuer: /CN=A9155374/serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
Certificate serial: 087C
Authority key identifier: 9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/70DB0EF658B311F1B5F45CFF96833773.roa
Signing time: Tue 26 May 2026 22:05:28 +0000
ROA not before: Tue 26 May 2026 22:05:28 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 151956
IP address blocks: 103.137.245.0/24 maxlen: 24
103.157.98.0/24 maxlen: 24
2001:df0:2780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl
rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155374, serialNumber=9BF574DF5E7F99BD436BAA5052F8CA8CFB31A2B9
Validity
Not Before: May 26 22:05:28 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a161928-010b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:16:f9:23:eb:e4:f3:49:fb:3e:2a:ca:90:
d8:4f:c4:ca:40:1f:11:84:e3:06:9e:00:51:85:97:
08:fe:4f:d9:17:eb:00:98:bd:83:86:5c:35:c6:5b:
ce:39:53:30:ce:d1:a2:07:6e:f8:5c:15:75:e7:1a:
bc:e3:27:10:bf:5f:b2:34:b0:1f:4e:6f:c3:3a:ca:
0a:74:fe:d0:2f:eb:5c:5d:5a:8b:f0:1d:d3:fc:14:
ac:70:b6:38:e6:6c:5f:dd:fb:de:e1:1e:a2:27:62:
9d:dd:f4:05:1c:34:4e:6a:25:f2:93:1f:d2:ee:ec:
be:4a:c6:a7:24:6a:4a:b7:00:5e:42:5d:82:58:ca:
09:bd:06:fc:38:4f:2c:fe:d2:16:d3:fc:65:f6:e3:
cb:59:7e:d6:38:99:af:c3:27:b9:45:70:ea:79:47:
13:fe:48:96:35:ff:10:9f:b9:a0:0a:a0:ca:e5:81:
a7:21:52:33:9f:7b:0a:b4:ca:b7:3c:72:07:38:de:
30:7c:35:33:a2:05:3b:d2:28:41:35:c8:bd:a6:d9:
9f:d9:6e:d6:0e:e7:2b:7d:a8:27:18:39:a4:e8:43:
0e:e5:0e:8d:49:22:5a:4d:4f:db:1a:61:d4:9b:41:
50:14:c0:1d:c0:72:16:68:6f:39:20:a5:6a:90:96:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:B5:C9:09:62:59:1A:98:21:7D:21:B5:A0:39:2A:CE:F0:4D:7C
X509v3 Authority Key Identifier:
keyid:9B:F5:74:DF:5E:7F:99:BD:43:6B:AA:50:52:F8:CA:8C:FB:31:A2:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/m_V0315_mb1Da6pQUvjKjPsxork.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_V0315_mb1Da6pQUvjKjPsxork.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155374/336E58EC012B11EBB6C89E1CC4F9AE02/70DB0EF658B311F1B5F45CFF96833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.245.0/24
103.157.98.0/24
IPv6:
2001:df0:2780::/48
Signature Algorithm: sha256WithRSAEncryption
87:dd:57:53:77:8f:87:84:43:d6:50:b9:54:e8:2c:7b:9f:a6:
32:74:1d:f6:c3:2d:64:21:1e:dd:b2:22:d2:1b:ce:65:52:86:
53:eb:eb:0e:18:cf:14:7c:1e:60:1a:9f:9d:d1:73:65:e2:0b:
e4:60:6c:1b:8c:ec:60:9b:29:15:9e:2c:ad:5b:bd:74:ea:32:
36:bd:bf:21:34:81:aa:b4:34:63:23:f3:16:42:98:2f:35:25:
ab:f4:8b:22:db:96:1d:83:2b:f5:b2:d3:7c:59:74:98:ec:64:
64:39:27:f7:96:d8:4e:9a:4c:2a:b5:c0:ff:a0:fe:02:df:87:
87:c7:24:d2:c0:20:a8:fc:03:82:d8:30:be:fb:a4:1c:2b:33:
35:50:07:24:64:a2:b9:ee:de:50:39:fd:bd:20:15:09:78:74:
02:a5:f5:bb:00:f6:aa:77:0b:58:ef:b8:28:d8:75:32:a1:6d:
d5:71:38:1e:e3:cc:60:5f:f6:79:8b:f8:fc:10:94:39:d2:26:
d7:36:2b:a8:80:f1:f0:03:2c:02:3f:31:df:d9:35:14:cb:d3:
6d:20:7f:85:a9:34:06:0f:01:6e:33:85:23:c6:70:cc:2b:9b:
ba:d6:c0:38:93:ee:32:e7:1b:6b:f9:b7:c3:c7:9e:70:d6:1c:
e6:54:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:52 2026 by rpki-client