
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/6656B366814C11EB913AEC78C4F9AE02.roa
File: 6656B366814C11EB913AEC78C4F9AE02.roa (raw, json)
Hash identifier: hv1K6R23OHguzYK6jFAFYzQEskAA+OZXxw5xTMUnVbY=
Subject key identifier: 69:26:B1:0E:CD:CF:1B:CF:01:D5:7C:5E:46:7A:85:BE:F3:70:8C:4C
Certificate issuer: /CN=A9155688/serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Certificate serial: 06FD
Authority key identifier: 96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/6656B366814C11EB913AEC78C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:44:17 +0000
ROA not before: Wed 16 Apr 2025 22:33:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132245
IP address blocks: 103.19.112.0/24 maxlen: 24
103.19.113.0/24 maxlen: 24
103.19.114.0/24 maxlen: 24
103.19.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1789 (0x6fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155688, serialNumber=96E5AA70824B8D13DDCFE61FCC9A20CAD65E60C1
Validity
Not Before: Apr 16 22:33:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40a71-a4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:09:0b:1a:af:53:1d:16:4c:04:75:95:bd:
c6:32:91:9e:c7:bc:8d:93:e1:37:d3:20:83:3d:66:
80:b4:6b:f9:4e:e7:a1:fa:6e:31:e0:e7:c0:e9:e4:
8e:b2:94:db:5e:3a:be:72:7a:a0:48:e4:c1:ee:58:
21:7d:e0:06:10:2f:a7:21:48:1d:23:9a:40:8d:a4:
24:d8:46:ee:e3:81:ec:82:79:7e:4b:95:2c:52:9c:
ce:84:00:21:d1:cf:8a:ba:db:30:c5:25:14:1b:a3:
db:10:44:7b:b2:8b:d6:c1:c5:89:cb:0e:f4:10:68:
b9:ee:29:17:8b:fb:27:1a:45:ec:d3:03:4a:66:67:
df:77:79:ce:18:e4:f9:37:9e:cb:63:c1:e0:f4:75:
22:35:68:7b:f5:59:b6:3e:4c:6b:71:30:86:c5:50:
66:04:49:63:f8:47:5a:74:e3:b8:58:0a:c0:7d:4b:
a4:f4:ab:df:d4:00:32:63:e1:d2:53:b3:2d:ad:4c:
2a:00:21:eb:15:f6:c2:bb:29:6e:29:be:39:12:c0:
39:91:a0:74:3d:75:99:c4:05:6e:35:ae:f5:9e:06:
c8:02:56:11:4b:70:86:17:6e:68:d3:71:6d:2d:b5:
67:b7:13:55:c9:73:8f:bf:c9:f1:26:92:2e:bb:bb:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:26:B1:0E:CD:CF:1B:CF:01:D5:7C:5E:46:7A:85:BE:F3:70:8C:4C
X509v3 Authority Key Identifier:
keyid:96:E5:AA:70:82:4B:8D:13:DD:CF:E6:1F:CC:9A:20:CA:D6:5E:60:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/luWqcIJLjRPdz-YfzJogytZeYME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/luWqcIJLjRPdz-YfzJogytZeYME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155688/9D5629A0814211EBBD8C4284C4F9AE02/6656B366814C11EB913AEC78C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.112.0/22
Signature Algorithm: sha256WithRSAEncryption
92:80:87:0c:af:48:fb:5e:b2:a5:85:1d:1b:f6:fc:19:7a:1b:
bb:34:f6:ab:24:f0:c4:c3:62:fe:5f:ca:89:df:46:bf:cd:6d:
59:f3:d9:41:80:bb:5d:4a:55:d4:2c:5a:cd:29:db:eb:75:69:
35:61:16:f2:0a:64:8d:df:0a:e7:ea:27:34:12:1a:34:ea:96:
9d:94:20:65:a4:c0:c1:8f:b2:1c:d7:1b:13:79:56:2c:21:7b:
f1:51:2b:44:d4:1d:f3:3f:03:97:af:70:1f:eb:8c:32:0e:90:
0c:8d:6a:aa:74:6a:28:e6:3d:ea:8c:e0:9e:64:db:05:35:4c:
57:91:c5:1a:5d:70:19:85:c5:90:1e:31:f0:3c:89:ef:ba:46:
aa:df:6c:c1:78:da:b3:3f:a4:c9:d7:7d:59:05:18:6e:0f:8c:
ff:48:02:7d:fa:93:c3:6e:53:e8:27:ec:37:de:bd:3b:61:4b:
6c:c5:0d:ec:8d:ad:f8:cd:85:ef:39:dc:2a:4c:a9:c7:dd:82:
a2:cc:48:ad:b2:8a:43:a2:10:76:4a:68:4c:b1:50:71:04:4f:
20:d3:d8:0f:90:33:10:07:22:33:e9:8e:26:f1:8c:94:11:75:
62:c2:dc:32:8f:ba:f6:67:62:0d:b8:49:35:fd:11:ce:5a:d2:
19:58:22:75
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2ODgxMTAvBgNVBAUTKDk2RTVBQTcwODI0QjhEMTNERENGRTYxRkNDOUEyMENB
RDY1RTYwQzEwHhcNMjUwNDE2MjIzMzIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGE3MS1hNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxMJCxqvUx0WTAR1lb3GMpGex7yNk+E30yCDPWaAtGv5Tueh+m4x4OfA6eSO
spTbXjq+cnqgSOTB7lghfeAGEC+nIUgdI5pAjaQk2Ebu44Hsgnl+S5UsUpzOhAAh
0c+KutswxSUUG6PbEER7sovWwcWJyw70EGi57ikXi/snGkXs0wNKZmffd3nOGOT5
N57LY8Hg9HUiNWh79Vm2PkxrcTCGxVBmBElj+EdadOO4WArAfUuk9Kvf1AAyY+HS
U7MtrUwqACHrFfbCuyluKb45EsA5kaB0PXWZxAVuNa71ngbIAlYRS3CGF25o03Ft
LbVntxNVyXOPv8nxJpIuu7uSUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGkmsQ7N
zxvPAdV8XkZ6hb7zcIxMMB8GA1UdIwQYMBaAFJblqnCCS40T3c/mH8yaIMrWXmDB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY4OC85RDU2MjlBMDgx
NDIxMUVCQkQ4QzQyODRDNEY5QUUwMi9sdVdxY0lKTGpSUGR6LVlmekpvZ3l0WmVZ
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x1V3FjSUpMalJQZHotWWZ6Sm9neXRaZVlNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2ODgvOUQ1NjI5QTA4MTQyMTFFQkJEOEM0Mjg0QzRGOUFFMDIvNjY1NkIzNjY4
MTRDMTFFQjkxM0FFQzc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZxNwMA0GCSqGSIb3DQEBCwUAA4IBAQCSgIcMr0j7XrKlhR0b9vwZ
ehu7NParJPDEw2L+X8qJ30a/zW1Z89lBgLtdSlXULFrNKdvrdWk1YRbyCmSN3wrn
6ic0Eho06padlCBlpMDBj7Ic1xsTeVYsIXvxUStE1B3zPwOXr3Af64wyDpAMjWqq
dGoo5j3qjOCeZNsFNUxXkcUaXXAZhcWQHjHwPInvukaq32zBeNqzP6TJ131ZBRhu
D4z/SAJ9+pPDblPoJ+w33r07YUtsxQ3sja34zYXvOdwqTKnH3YKizEitsopDohB2
SmhMsVBxBE8g09gPkDMQByIz6Y4m8YyUEXViwtwyj7r2Z2INuEk1/RHOWtIZWCJ1
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:33 2026 by rpki-client