
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/ABD61D2E06D611EA8EBBEA50C4F9AE02.roa
File: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (raw, json)
Hash identifier: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=
Subject key identifier: CF:52:11:23:25:5A:CC:AA:5D:CD:A7:17:F9:3D:50:87:50:76:E0:4E
Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Certificate serial: 0CD8
Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/ABD61D2E06D611EA8EBBEA50C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:53:27 +0000
ROA not before: Mon 10 Nov 2025 18:07:22 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139786
IP address blocks: 103.145.57.0/24 maxlen: 24
103.157.35.0/24 maxlen: 24
2001:df1:fe80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261
Validity
Not Before: Nov 10 18:07:22 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a444d7-e670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:65:91:08:2d:42:df:af:50:7c:ef:95:74:
24:69:d7:eb:94:d4:d8:41:b6:33:58:40:f6:88:a1:
81:14:f5:b1:a9:e6:1d:6a:82:1f:39:4b:02:d3:1b:
7e:5e:07:99:be:30:36:33:ba:d3:ce:43:4e:e4:a9:
a4:ff:4a:19:e5:ba:56:be:10:1f:7b:d3:84:61:6f:
19:9c:4f:d1:74:2d:df:de:18:a6:f6:c7:49:4c:4c:
07:39:e3:eb:0b:c8:f0:3a:8c:bc:7a:74:14:66:59:
d4:e0:51:87:bf:05:83:f7:ad:fc:f8:fe:52:b4:64:
ee:24:b5:b9:c9:a3:cf:e1:e2:c1:2b:e4:55:f2:c4:
19:f5:11:c5:ac:b7:ae:7e:9f:e2:92:8c:94:81:d0:
c2:06:d1:9f:c1:c3:1f:64:5b:da:c4:3c:b6:95:15:
36:e1:c4:e1:1f:36:5a:40:7c:32:0b:6e:a6:a5:ff:
1d:35:ec:b7:e0:7a:3d:06:74:bc:c4:84:65:a9:05:
f6:33:f5:ec:8d:39:a6:a2:56:f8:a0:48:b2:7a:fb:
8b:82:b7:0a:7a:18:2b:e3:d2:1d:86:26:c1:7c:f3:
22:79:da:76:12:81:9b:a8:8e:c7:f0:73:3b:c6:18:
05:f7:87:ef:eb:5c:c1:de:a9:79:6b:2f:02:08:20:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:11:23:25:5A:CC:AA:5D:CD:A7:17:F9:3D:50:87:50:76:E0:4E
X509v3 Authority Key Identifier:
keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/ABD61D2E06D611EA8EBBEA50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.57.0/24
103.157.35.0/24
IPv6:
2001:df1:fe80::/48
Signature Algorithm: sha256WithRSAEncryption
ae:bd:7b:a8:ef:da:65:db:3d:c2:80:28:3e:0d:66:a2:08:73:
5a:6b:78:46:b9:23:13:50:d1:7c:6a:48:1e:30:96:6c:86:fb:
af:f7:5f:e0:1e:da:93:30:cf:14:79:57:2f:53:5e:5b:04:63:
0d:8e:26:f2:c5:88:35:e9:a0:7d:31:a5:96:cd:45:b3:ff:fe:
ec:7c:a7:a5:b0:3f:27:ba:06:20:b5:8e:2b:a7:60:78:b9:7b:
c4:f9:f2:2d:8f:88:72:b0:fa:a6:b1:eb:54:2b:4d:f8:d2:74:
dd:b0:5b:60:0d:8c:5c:cb:17:8b:e9:e6:e9:ab:3c:6e:25:5f:
75:61:37:4d:fc:07:20:c8:28:63:d3:e3:b3:a9:c3:1b:48:dd:
c9:4b:73:25:2f:e5:89:7b:18:ad:5d:24:b8:60:34:2a:6b:ad:
af:d2:ae:05:79:2a:2b:9e:15:ea:af:69:d6:3d:2a:32:fe:61:
c3:05:7d:90:d4:92:e7:c0:b8:5a:c7:a4:79:56:07:d3:78:0b:
f9:50:84:e4:c7:9f:e4:55:23:51:67:14:85:59:e3:20:2f:72:
26:94:49:c2:b9:82:c9:3f:60:47:a1:4c:b4:02:16:ec:31:6a:
9c:2b:bd:68:69:7f:19:af:e6:93:b4:7b:ce:69:f2:c1:25:bf:
35:49:8d:66
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE
NDZBNjIyNjEwHhcNMjUxMTEwMTgwNzIyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDRkNy1lNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA17tlkQgtQt+vUHzvlXQkadfrlNTYQbYzWED2iKGBFPWxqeYdaoIfOUsC0xt+
XgeZvjA2M7rTzkNO5Kmk/0oZ5bpWvhAfe9OEYW8ZnE/RdC3f3him9sdJTEwHOePr
C8jwOoy8enQUZlnU4FGHvwWD9638+P5StGTuJLW5yaPP4eLBK+RV8sQZ9RHFrLeu
fp/ikoyUgdDCBtGfwcMfZFvaxDy2lRU24cThHzZaQHwyC26mpf8dNey34Ho9BnS8
xIRlqQX2M/XsjTmmolb4oEiyevuLgrcKehgr49IdhibBfPMiedp2EoGbqI7H8HM7
xhgF94fv61zB3ql5ay8CCCBvaQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFM9SESMl
WsyqXc2nF/k9UIdQduBOMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2
RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J
bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTZFNkYvQjFCNUIzRDYwNkQ1MTFFQUE4QkEzRTRGQzRGOUFFMDIvQUJENjFEMkUw
NkQ2MTFFQThFQkJFQTUwQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQAZ5E5AwQAZ50jMA8EAgACMAkDBwAgAQ3x/oAwDQYJKoZIhvcNAQEL
BQADggEBAK69e6jv2mXbPcKAKD4NZqIIc1preEa5IxNQ0XxqSB4wlmyG+6/3X+Ae
2pMwzxR5Vy9TXlsEYw2OJvLFiDXpoH0xpZbNRbP//ux8p6WwPye6BiC1jiunYHi5
e8T58i2PiHKw+qax61QrTfjSdN2wW2ANjFzLF4vp5umrPG4lX3VhN038ByDIKGPT
47OpwxtI3clLcyUv5Yl7GK1dJLhgNCprra/SrgV5KiueFeqvadY9KjL+YcMFfZDU
kufAuFrHpHlWB9N4C/lQhOTHn+RVI1FnFIVZ4yAvciaUScK5gsk/YEehTLQCFuwx
apwrvWhpfxmv5pO0e85p8sElvzVJjWY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:08 2026 by rpki-client