
$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa
File: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (raw, json)
Hash identifier: LJdsn8M+8WOyn3xfnVOerz5lCaK7ncj5KJBGdZ3Z5os=
Subject key identifier: 37:5C:BB:27:1D:0E:D4:CA:01:B5:90:D8:F1:6F:41:EE:F1:73:5C:41
Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Certificate serial: 0E0E
Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:34:07 +0000
ROA not before: Tue 22 Jul 2025 18:27:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24382
IP address blocks: 103.141.66.0/23 maxlen: 24
2001:df0:f380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3598 (0xe0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804
Validity
Not Before: Jul 22 18:27:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a45c6f-5a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:d8:b7:71:68:18:91:3d:34:55:a6:2e:99:
64:42:74:fa:8a:91:fd:83:f0:95:4a:5f:a6:5f:2c:
f4:78:cf:d4:65:1a:80:31:7c:2f:0a:26:42:a6:e1:
49:5b:24:b7:de:2f:dc:ea:3f:0b:ef:65:03:fc:06:
6f:31:6c:4b:63:7b:d8:71:cd:a1:65:2f:c8:a8:7d:
38:82:46:3c:64:12:48:f1:3f:fa:7d:44:2a:c6:f6:
e2:77:ba:bb:08:fe:bc:1d:1f:27:62:f1:0b:11:a4:
96:e4:61:5d:24:da:14:bf:94:9c:88:d8:8e:b8:b1:
62:ab:09:a6:ef:f6:a0:b5:19:5f:d9:d2:e3:2a:2a:
9b:0a:9b:5c:b4:c1:72:6d:96:75:e9:44:48:be:5c:
25:c4:a9:d4:64:1c:33:08:e6:db:0e:94:2d:b2:cd:
ca:94:45:0b:77:63:dc:ec:d6:f5:7f:21:bf:cb:9b:
c8:3a:4c:a9:64:69:fa:d3:80:00:d3:31:88:e1:0d:
35:7c:26:bf:19:02:5f:56:5e:37:96:85:29:88:df:
89:19:c1:21:cd:88:c3:03:18:73:66:a4:c1:01:e5:
29:19:e7:30:f2:4d:07:24:fa:44:6c:87:75:ee:e0:
8f:a3:99:0f:cc:f7:4a:f2:4e:36:f6:2c:62:4e:c4:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:BB:27:1D:0E:D4:CA:01:B5:90:D8:F1:6F:41:EE:F1:73:5C:41
X509v3 Authority Key Identifier:
keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/DBDAFF6CC99611E9A41BCF75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.66.0/23
IPv6:
2001:df0:f380::/48
Signature Algorithm: sha256WithRSAEncryption
50:a7:4f:52:54:a4:d1:31:97:de:27:4d:89:28:ae:4d:d3:b0:
26:ad:3c:85:15:ae:94:fc:28:69:03:e0:3a:6a:3e:2b:19:42:
40:2e:6c:3d:0d:48:cc:55:9d:2a:b3:f7:40:90:a0:10:d2:5b:
03:be:2e:d3:d9:02:58:32:39:6e:2f:8f:ad:99:6c:7d:96:c2:
e6:45:af:27:b9:42:e1:9f:81:1c:a8:44:da:cc:a9:6b:94:fe:
a9:5e:04:9b:1e:c0:78:f9:dc:40:8d:9b:07:4d:d0:ce:92:33:
93:df:6a:23:54:40:d0:11:40:c1:65:f8:da:6f:a0:5f:44:a9:
25:6e:5b:85:3a:5f:85:b3:9d:40:d4:8c:70:10:7e:65:0e:e6:
09:33:9d:ae:34:4f:b6:97:95:d2:90:e4:29:39:fc:56:2c:a5:
9f:6a:01:80:c5:a3:a9:b7:6d:28:3b:68:75:cd:35:27:c4:42:
72:58:56:7e:56:26:c0:45:12:4d:98:eb:e6:61:e3:1d:90:95:
92:f5:19:59:50:09:3e:0d:78:62:85:dd:ca:68:96:58:5a:ac:
30:fc:47:c1:62:c0:f9:53:75:38:6d:35:00:f6:15:17:89:d8:
7f:42:f3:2a:e5:ec:67:a3:78:89:6d:b6:90:c7:4c:c1:15:12:
0a:12:c6:a2
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND
NDlBMTY4MDQwHhcNMjUwNzIyMTgyNzM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWM2Zi01YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzq7Yt3FoGJE9NFWmLplkQnT6ipH9g/CVSl+mXyz0eM/UZRqAMXwvCiZCpuFJ
WyS33i/c6j8L72UD/AZvMWxLY3vYcc2hZS/IqH04gkY8ZBJI8T/6fUQqxvbid7q7
CP68HR8nYvELEaSW5GFdJNoUv5SciNiOuLFiqwmm7/agtRlf2dLjKiqbCptctMFy
bZZ16URIvlwlxKnUZBwzCObbDpQtss3KlEULd2Pc7Nb1fyG/y5vIOkypZGn604AA
0zGI4Q01fCa/GQJfVl43loUpiN+JGcEhzYjDAxhzZqTBAeUpGecw8k0HJPpEbId1
7uCPo5kPzPdK8k429ixiTsSEKQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDdcuycd
DtTKAbWQ2PFvQe7xc1xBMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5
OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTYxN0UvRTFBREI3NDZDOTk1MTFFOUJBQUFCMTc0QzRGOUFFMDIvREJEQUZGNkND
OTk2MTFFOUE0MUJDRjc1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ41CMA8EAgACMAkDBwAgAQ3w84AwDQYJKoZIhvcNAQELBQADggEB
AFCnT1JUpNExl94nTYkork3TsCatPIUVrpT8KGkD4DpqPisZQkAubD0NSMxVnSqz
90CQoBDSWwO+LtPZAlgyOW4vj62ZbH2WwuZFrye5QuGfgRyoRNrMqWuU/qleBJse
wHj53ECNmwdN0M6SM5PfaiNUQNARQMFl+NpvoF9EqSVuW4U6X4WznUDUjHAQfmUO
5gkzna40T7aXldKQ5Ck5/FYspZ9qAYDFo6m3bSg7aHXNNSfEQnJYVn5WJsBFEk2Y
6+Zh4x2QlZL1GVlQCT4NeGKF3cpollharDD8R8FiwPlTdThtNQD2FReJ2H9C8yrl
7GejeIlttpDHTMEVEgoSxqI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:00 2026 by rpki-client