
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa
File: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (raw, json)
Hash identifier: oZVj2IRQ0g25jkjfw9yqdEyGLFvpHEVoEcKCtB0wjZs=
Subject key identifier: 2F:6D:F8:7C:D9:DB:B4:46:FE:A0:9E:09:04:F5:42:E1:AF:9B:C0:97
Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial: 09EE
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa
Signing time: Wed 02 Sep 2026 20:40:26 +0000
ROA not before: Wed 02 Sep 2026 20:40:26 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 17819
IP address blocks: 45.116.132.0/24 maxlen: 24
45.116.135.0/24 maxlen: 24
103.9.92.0/24 maxlen: 24
103.9.93.0/24 maxlen: 24
103.37.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2542 (0x9ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Validity
Not Before: Sep 2 20:40:26 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a9889b9-ffed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:89:f7:a4:4d:d9:5b:42:29:b1:7c:9d:c4:
8b:fd:b3:c9:83:94:0f:8c:76:24:79:ff:f1:82:7d:
e4:63:04:84:c5:e0:e3:ba:09:c5:1b:25:bf:83:4b:
75:68:e0:26:9c:35:a5:00:72:fb:53:e7:61:93:87:
ac:1d:bd:f1:55:86:90:e9:f0:25:04:3c:b7:b3:97:
26:32:30:53:4f:0f:ad:72:6d:c8:a3:31:fd:d6:6c:
ab:a4:14:64:4d:b0:d1:e7:1a:cc:c2:77:ae:12:ec:
12:da:ee:c9:d2:45:26:c2:46:a1:b7:ea:cb:78:76:
13:4a:e2:e3:2e:52:9a:fe:79:fd:93:96:01:0d:a6:
af:71:6e:5c:c0:5c:58:3e:21:67:dd:28:7c:c2:ec:
8e:47:c5:eb:0c:46:cc:ef:38:ff:42:fa:16:13:5d:
44:54:09:3a:72:78:40:56:7e:23:2f:33:01:af:1d:
4a:d4:1e:b6:c0:e9:ff:5a:44:f8:ed:29:c5:b5:7c:
fd:89:db:fc:80:62:fd:55:3f:3c:05:74:91:22:c9:
c5:a1:29:5c:7c:48:93:04:92:fb:b7:41:64:64:89:
d6:ca:d3:63:7d:f7:74:a1:b5:8e:63:a8:f9:5b:64:
06:88:5b:45:62:51:99:87:8e:e0:eb:33:f2:1c:9c:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:F8:7C:D9:DB:B4:46:FE:A0:9E:09:04:F5:42:E1:AF:9B:C0:97
X509v3 Authority Key Identifier:
keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.132.0/24
45.116.135.0/24
103.9.92.0/23
103.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
44:fe:35:8f:5e:7c:7c:09:28:3a:89:d0:21:75:e8:2b:75:8e:
78:e4:49:42:a1:b9:d1:91:8a:91:df:36:15:02:2f:99:db:39:
4d:db:a9:3d:ed:b2:12:3e:36:1b:e9:43:70:de:3a:b3:51:c5:
f4:94:dd:48:e4:51:dc:50:4f:7a:fe:7a:17:ed:78:ab:d8:a1:
91:35:14:df:3d:37:51:b1:0e:de:32:4f:f1:53:d0:8f:17:ff:
b6:cf:da:9d:15:94:52:39:ab:bf:54:ba:cb:3e:5b:d6:1f:7b:
0f:3e:09:9d:37:a1:a8:07:c1:82:d7:a9:8e:3a:4c:04:c6:53:
a9:9b:44:f1:4a:4b:a2:9a:18:19:7e:8e:85:76:dd:30:63:33:
ee:21:a6:1d:57:54:2c:94:ca:2e:3d:d8:e2:22:9b:6f:d4:88:
27:9c:17:ae:f5:d4:94:d9:4b:11:de:58:ee:ce:cd:f6:f8:c5:
c3:33:02:8a:9c:37:62:dd:5c:94:5a:f5:83:5f:32:a4:89:27:
a9:48:52:9c:d0:d3:ef:8e:8f:e4:b8:ed:81:04:17:a3:52:8d:
09:58:72:e2:7b:51:c7:c9:c6:10:23:4e:34:56:59:92:ad:39:
94:7d:59:31:81:f8:3d:25:4b:4c:4e:51:55:88:dc:74:f0:96:
08:11:6e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:26 2026 by rpki-client