
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/C2B9483E5BDC11F0AA574A7AC4F9AE02.roa
File: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (raw, json)
Hash identifier: rn2+8W21dCl6lnIgpMbqK+DXRVpz1iSyuq7a+y1/Ps0=
Subject key identifier: 2D:72:4F:67:71:09:1A:8F:D0:5B:B4:21:13:C7:BA:DD:03:54:38:EB
Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial: 0655
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/C2B9483E5BDC11F0AA574A7AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:58:47 +0000
ROA not before: Tue 08 Jul 2025 09:20:16 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138998
IP address blocks: 103.168.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1621 (0x655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Validity
Not Before: Jul 8 09:20:16 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a429f7-7971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:f8:ea:05:65:64:1c:af:9d:d5:d8:18:2f:
c8:7b:89:6b:85:99:30:06:47:e1:19:7a:b6:74:3e:
31:47:24:5d:13:fb:49:c7:f7:d0:d0:94:ff:05:d1:
60:45:8a:9d:6b:fa:01:02:a7:73:32:79:37:32:e6:
4c:d0:9b:78:33:73:7a:13:4c:23:4f:75:b7:3b:e7:
81:ae:5e:e2:e6:9f:38:82:5c:55:1a:f0:da:ae:8f:
51:9a:07:aa:be:f8:dd:bb:3d:c9:0e:8a:22:d4:ce:
93:44:08:61:18:99:93:cf:e3:b8:23:0b:27:c9:34:
14:c9:1a:16:6f:c6:0e:93:5e:ad:ef:73:87:93:38:
0a:f7:40:6b:ae:fc:70:ce:f9:35:37:96:38:67:70:
70:89:05:c8:9f:8e:fb:03:b1:66:6e:5e:7e:7a:a6:
69:c9:4d:72:41:7c:17:1b:12:76:14:63:a4:dc:82:
ff:5c:29:a2:78:98:f2:b9:f4:13:54:b2:09:d7:26:
3d:e8:2a:3e:05:17:11:43:ed:ca:b1:da:78:9a:b0:
83:20:ce:97:71:94:59:bb:29:dd:79:13:bb:5c:8e:
1a:b5:08:d7:85:a5:3c:e7:d5:7d:7f:54:4b:24:5b:
44:9e:f3:d2:cc:60:41:fa:70:82:aa:42:28:8f:72:
e0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:4F:67:71:09:1A:8F:D0:5B:B4:21:13:C7:BA:DD:03:54:38:EB
X509v3 Authority Key Identifier:
keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/C2B9483E5BDC11F0AA574A7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.91.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:7b:e8:79:cf:cf:e2:14:a3:4f:40:53:9b:ba:ae:28:be:1a:
8d:ab:cf:57:f7:00:f2:f8:ab:01:34:87:d3:69:83:3c:4a:b9:
63:2e:a6:b9:42:62:bc:47:8a:68:78:d7:7b:e3:a5:e1:ef:ed:
ec:7e:05:be:58:10:78:b9:7c:9e:6d:c1:60:85:d2:44:67:74:
d9:c1:6d:55:73:e2:71:94:a1:cb:0e:36:80:0f:c4:49:fd:d7:
69:9b:6e:e2:fc:ac:2d:2a:30:08:a4:3a:d8:9e:fb:66:a1:b6:
d7:22:55:30:79:9e:99:9e:70:9a:9e:aa:60:4c:33:4f:6a:bc:
81:63:22:39:2a:56:04:2b:2b:82:30:ce:8d:9c:85:f9:e7:b5:
a5:a5:8e:2b:f6:b8:62:31:13:d9:49:20:ae:11:b2:d3:4a:66:
69:31:f5:49:2c:d2:82:8f:4e:3b:f5:1c:85:5b:9c:00:ee:6f:
db:9d:cf:a5:bb:e8:bc:77:96:81:29:9e:e4:a6:25:b3:03:9c:
24:dd:a2:30:4f:c6:e9:ff:ce:f8:de:08:bc:87:3e:55:35:e8:
85:5d:1a:e7:48:ca:02:66:c0:1d:d8:bf:9a:d2:23:78:9f:d7:
e2:44:4e:29:2a:52:d4:f5:29:96:14:c8:c0:07:6d:61:a4:d9:
02:16:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:11:17 2026 by rpki-client