
$ rpki-client -vvf rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/4FD4AF70C39511ED99703D2AC4F9AE02.roa
File: 4FD4AF70C39511ED99703D2AC4F9AE02.roa (raw, json)
Hash identifier: Lz0Fc8hLdVpUwq0rWWRGfBrBUOO4zvem/eI45NS8d2o=
Subject key identifier: 89:DB:71:9B:D1:35:22:A2:41:0E:66:D3:7A:DB:2A:36:81:70:52:89
Certificate issuer: /CN=A915568B/serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Certificate serial: 0236
Authority key identifier: B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/4FD4AF70C39511ED99703D2AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:28:19 +0000
ROA not before: Wed 03 Sep 2025 03:20:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150287
IP address blocks: 103.41.168.0/24 maxlen: 24
103.74.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915568B, serialNumber=B5E9DDC6BF09F89458556087442D948C44034530
Validity
Not Before: Sep 3 03:20:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3ea93-6d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:86:2f:4d:a8:01:a3:84:fc:7c:e1:20:10:
d0:78:03:ba:28:f5:90:33:84:de:49:4d:b0:3d:21:
f7:3d:15:f1:87:91:ae:08:6e:21:ba:2f:10:c2:11:
12:64:93:8e:30:a8:f0:96:73:f6:54:25:e1:8e:c7:
bf:0d:9f:5e:5a:58:0d:b6:e9:e2:a1:74:f3:8f:d1:
68:c8:a5:12:d9:5f:9b:5f:c2:ca:90:11:09:43:50:
fb:d7:7f:81:15:d9:f1:84:20:1c:fc:8b:04:19:62:
dc:19:d2:ea:09:7a:14:83:36:a5:5f:d6:53:48:e0:
b8:7c:1e:28:d1:fc:63:1c:7e:cd:97:b0:f2:99:7c:
ac:fc:52:a3:c2:e5:65:29:58:cb:78:89:b0:21:a5:
81:33:55:af:42:4b:16:1b:01:24:a2:9a:93:62:f7:
e8:1a:20:d8:60:d5:06:fd:c9:95:0c:7f:d1:61:8c:
20:66:c5:d5:eb:08:c1:c3:bc:f3:cc:06:e6:0e:85:
b2:60:e3:a2:c9:f9:c3:c2:b7:68:eb:da:2b:51:2f:
52:02:59:78:33:2c:45:68:31:3f:45:32:7d:e8:da:
03:3f:af:d7:46:51:be:df:81:db:6f:2e:cf:72:8d:
4b:0f:43:39:15:d8:72:cd:92:a7:b3:b1:ed:0a:9b:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DB:71:9B:D1:35:22:A2:41:0E:66:D3:7A:DB:2A:36:81:70:52:89
X509v3 Authority Key Identifier:
keyid:B5:E9:DD:C6:BF:09:F8:94:58:55:60:87:44:2D:94:8C:44:03:45:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/tendxr8J-JRYVWCHRC2UjEQDRTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tendxr8J-JRYVWCHRC2UjEQDRTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915568B/1F7B1D08C38D11EDA7E1CA64C4F9AE02/4FD4AF70C39511ED99703D2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.41.168.0/24
103.74.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8c:05:5b:2f:9a:a5:2a:d1:f2:20:9c:e5:97:84:ce:15:24:
8b:af:6c:85:dd:36:75:e3:9d:e1:e1:2d:3a:45:3c:47:13:c6:
13:4c:c8:7d:d6:21:0c:3a:bc:69:e6:13:e7:e8:95:09:5b:0b:
6f:2d:dd:64:69:27:ce:2f:e3:37:27:35:0f:de:6f:f3:07:70:
14:88:ee:03:08:8e:30:9a:60:0d:70:3a:dc:65:f7:e5:31:b3:
91:90:b1:cd:36:a0:28:68:0e:f3:e1:4a:4a:53:e2:2f:8b:03:
b7:a9:da:07:12:e0:6c:53:48:f0:8f:18:c8:a5:15:c7:4a:30:
e5:cd:3c:6c:b6:d2:ab:0f:bd:1e:a5:5f:59:5d:39:ff:78:8d:
aa:3d:12:d0:35:47:ef:8b:2e:24:4b:b4:b9:58:5e:12:ab:0b:
a9:36:82:5c:d3:c2:7d:62:d9:4e:8e:83:0a:f5:c2:79:20:54:
fe:33:2f:90:76:96:60:e0:71:a2:53:3a:78:4b:02:5f:fc:9e:
27:0c:a0:6d:24:a3:36:8d:7f:71:92:59:89:cc:c3:a3:31:27:
0d:d9:5f:b5:78:2c:88:fa:f2:00:55:a9:21:b1:a7:dd:58:96:
53:89:99:0d:99:c8:dd:16:f3:27:fa:66:cd:45:38:b8:cf:03:
f9:61:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:20:47 2026 by rpki-client