
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa
File: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (raw, json)
Hash identifier: fjWgAJnqDT9NesXOUtIXnUStrD3jUP0xK+W90KMvE+0=
Subject key identifier: EE:B5:6F:6E:12:0F:AE:81:5F:18:44:92:C8:A1:E7:22:0A:74:F9:B5
Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial: 0986
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:07:27 +0000
ROA not before: Tue 02 Sep 2025 21:11:34 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17819
IP address blocks: 45.116.132.0/24 maxlen: 24
45.116.135.0/24 maxlen: 24
103.9.92.0/24 maxlen: 24
103.9.93.0/24 maxlen: 24
103.37.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Validity
Not Before: Sep 2 21:11:34 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4805f-2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:1d:c3:77:53:93:40:35:27:69:bd:07:fb:
dc:d4:a3:39:e1:a3:69:bb:b0:b7:5d:6b:11:6c:7a:
58:5d:90:3e:57:40:e8:ae:7f:17:f9:a0:ff:23:5d:
56:54:de:66:0e:39:05:ff:8f:5c:58:a7:e4:a5:bc:
4f:62:31:f6:34:5b:28:d6:97:34:3e:0c:4b:6f:a4:
a4:06:9d:93:50:de:c3:2e:cf:d8:cf:35:01:b7:df:
e8:08:79:20:08:41:4b:01:a8:42:9e:88:53:92:c3:
d7:a6:17:b7:bb:24:a6:c7:d3:7b:ba:10:f6:a6:68:
a7:bb:b9:2c:dd:d8:9a:a6:93:02:81:79:23:ef:8b:
41:db:81:55:dd:98:26:4b:ee:28:40:02:25:53:31:
83:0a:63:a6:90:47:a3:77:ff:63:6d:98:41:59:75:
54:c7:a3:ed:74:45:a6:9d:c2:f7:84:12:ae:ae:f1:
6d:63:7a:d0:26:33:d9:3c:2f:66:55:80:48:7e:46:
b5:63:64:95:b5:1d:ad:60:62:37:06:f6:24:58:c4:
98:8b:22:45:80:90:99:06:e3:ad:df:8c:33:54:66:
92:30:89:6a:93:88:10:06:5a:c3:e4:83:ba:e4:6c:
78:76:84:8a:67:fe:b7:1e:1f:6c:fd:f2:54:a6:d0:
93:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:6F:6E:12:0F:AE:81:5F:18:44:92:C8:A1:E7:22:0A:74:F9:B5
X509v3 Authority Key Identifier:
keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.132.0/24
45.116.135.0/24
103.9.92.0/23
103.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:12:2d:0c:40:69:bf:e8:72:31:99:6e:82:3c:14:75:9b:85:
9f:11:f7:fc:6b:df:87:cc:77:64:ab:99:36:64:2c:ea:7b:95:
f8:d8:cb:b8:a4:62:bc:bb:a8:5e:b2:6b:d2:7b:af:2b:04:e9:
65:f8:7f:db:58:1d:aa:71:17:d1:6b:ff:d2:d7:d8:2a:b2:e1:
b8:c3:ae:c9:b6:a9:8f:24:65:b8:83:d4:f9:59:92:2a:97:da:
8e:c2:6f:12:6e:94:24:eb:b6:b8:55:fe:0a:d7:68:54:6f:06:
83:5d:4c:c4:fe:50:cc:09:6a:4a:43:75:89:c4:7d:fa:a2:30:
66:63:51:fb:66:c1:0d:a9:0c:50:e8:3f:8e:33:9b:e7:fe:80:
8a:a2:38:aa:d5:22:20:c1:ae:38:26:38:f6:5e:4f:26:b7:e7:
26:94:56:c6:1a:76:88:17:cd:c3:f4:62:45:5c:77:60:08:77:
2d:72:c1:6f:e3:44:95:a9:8c:f0:33:b4:36:b0:9a:69:e5:60:
84:6b:39:ce:c8:70:21:c5:07:d6:b9:ac:0b:ba:4a:c9:5c:a4:
a9:97:26:5d:80:e3:1b:41:7b:fa:7c:c8:6b:16:43:ed:d5:39:
3a:6a:1c:e3:11:eb:19:59:b3:dd:0b:3a:16:0b:3f:52:fe:ed:
72:81:c1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:18 2026 by rpki-client