
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/5F9F86C08ED911F0B33B5A6DC4F9AE02.roa
File: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (raw, json)
Hash identifier: QJ8mn8VYu6yJWP7YvnwUy8wxKdhWELvCW8UZdzTVujk=
Subject key identifier: 62:D4:FB:E1:84:9B:10:03:6F:F5:9B:A7:AD:98:29:3D:92:BB:89:A0
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0223
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/5F9F86C08ED911F0B33B5A6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:13:59 +0000
ROA not before: Thu 11 Sep 2025 06:34:31 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 850
IP address blocks: 103.71.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Sep 11 06:34:31 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a481e7-d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:67:aa:4e:8e:04:98:20:f4:16:2a:f3:46:
9d:03:f7:66:9e:53:52:09:24:d2:c3:0e:1e:7e:7c:
d4:ff:96:ce:9f:be:3c:51:5e:85:10:86:ce:ad:dd:
93:cd:d0:ed:67:0a:43:f5:a6:00:27:c3:ff:4b:d5:
8f:6c:0b:c3:87:d8:77:46:58:c7:c5:74:ef:df:40:
b8:24:fc:55:ba:31:ad:8e:9a:1d:f5:cf:75:37:31:
6f:69:62:6b:5e:34:0f:8d:1d:25:db:46:4f:bf:7e:
b1:4d:ec:fb:24:44:1b:d1:db:86:76:d4:cb:23:b8:
cf:a3:46:57:2b:93:90:32:55:e3:a7:bb:34:46:a2:
a2:d6:d0:88:6e:6d:7b:d5:7c:5e:a4:77:b7:d3:7d:
a9:12:d0:06:cd:04:7e:6f:4c:1d:02:a8:95:19:f5:
f8:02:b7:3d:a5:9b:d4:c7:17:c7:95:7e:c7:1c:eb:
a8:da:90:1c:82:de:dd:79:b3:ab:88:08:97:1c:4e:
90:cb:d0:75:5c:01:8e:30:6f:53:60:b4:f5:bb:a7:
76:4e:e5:4c:f0:f7:5e:0d:4e:89:e0:0a:6c:e6:83:
59:ec:04:86:68:bd:e3:49:df:cb:76:d2:bf:72:0e:
af:e6:f9:d9:a3:1e:13:b6:6e:8b:5a:c1:02:dc:d0:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:FB:E1:84:9B:10:03:6F:F5:9B:A7:AD:98:29:3D:92:BB:89:A0
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/5F9F86C08ED911F0B33B5A6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.98.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:4a:4b:05:9b:9f:68:6d:56:4b:74:fc:69:c8:d4:4a:2a:f3:
b5:0c:e9:94:5f:9e:4d:a7:69:1c:30:f6:29:9e:c4:12:a8:8c:
c2:f2:f1:84:62:1e:79:12:3f:4b:8c:67:26:10:ee:8e:bb:9e:
e0:ac:a7:23:e8:de:a7:11:0e:99:3a:86:05:ff:ac:ef:6b:68:
5a:61:cc:73:da:7b:87:85:0e:d8:f7:13:fc:dd:b0:ff:39:57:
1b:7a:72:09:9b:eb:66:76:66:01:65:5f:cc:9a:ef:a4:11:52:
fe:9a:3c:e9:78:55:ac:82:20:b7:29:59:3b:6a:b1:c1:86:1d:
e2:dd:73:43:f7:26:f4:f8:3e:e6:be:b3:91:84:5f:09:91:8d:
61:da:84:8f:11:b9:40:63:79:12:9d:a1:dd:eb:c7:20:0a:b4:
98:83:6b:01:1f:d4:86:31:d8:ac:ed:73:28:41:ea:c3:0c:17:
fe:14:a7:c8:4a:b3:4e:b8:d2:c0:46:4e:19:70:47:34:89:70:
39:12:8e:31:31:1e:8c:6a:a6:5f:51:38:e5:15:6d:ab:8c:db:
ce:73:31:23:85:ce:23:50:59:8b:97:b6:4a:37:08:42:b5:21:
95:f7:af:c3:fa:4f:8d:9b:f6:b3:3b:e4:59:93:f7:bc:c0:00:
ae:b1:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:24 2026 by rpki-client