
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/EDE9D100B03B11F09472550DC4F9AE02.roa
File: EDE9D100B03B11F09472550DC4F9AE02.roa (raw, json)
Hash identifier: qZL6z+n651V16Hf3fg2r71nlxb58xv089NXSyA/q/PE=
Subject key identifier: 91:6D:F8:7E:37:85:02:04:1A:94:AF:21:9E:89:BD:43:C5:8C:55:39
Certificate issuer: /CN=A915BCE2/serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Certificate serial: 015B
Authority key identifier: 48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/EDE9D100B03B11F09472550DC4F9AE02.roa
Signing time: Thu 23 Oct 2025 18:13:09 +0000
ROA not before: Thu 23 Oct 2025 18:13:09 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 135634
IP address blocks: 103.86.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCE2, serialNumber=482D48E3B6961F1208C0671524E08E903395F659
Validity
Not Before: Oct 23 18:13:09 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=68fa7035-83f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:cc:55:de:7e:aa:87:a1:49:7c:1b:6f:56:
66:0f:5a:92:80:fa:84:d7:9c:64:2a:5e:ab:3a:a2:
14:e8:f8:aa:71:1d:dc:84:5e:3b:98:f5:bc:6e:0b:
c8:84:37:2b:24:a6:09:59:f1:01:22:c8:90:8a:eb:
27:b0:dc:d6:f0:f2:33:a2:91:e0:80:c2:72:be:bf:
38:53:e4:be:ab:4a:e0:66:14:5f:1a:26:9a:85:84:
07:9c:04:54:44:a0:84:d5:3b:bf:84:b9:36:83:a8:
5e:d6:6b:95:11:02:2d:f6:b8:4d:96:72:27:ae:7e:
00:57:4e:52:b8:fe:20:90:53:3c:e1:8e:69:c0:4b:
ae:c5:90:b7:2d:61:1d:9c:12:57:6f:3b:19:2a:4c:
8c:89:d3:fa:a9:3c:28:11:0c:62:16:fc:06:4f:e3:
14:9f:96:47:a0:71:7d:78:5b:8b:29:6a:83:08:10:
69:b4:dd:20:e5:a7:80:eb:4d:cd:44:f6:98:ec:7d:
1e:53:e6:da:45:bb:a3:d6:f2:00:f6:ac:7b:20:97:
b4:b4:ad:c0:f9:11:14:1e:70:40:89:a6:55:3c:37:
9b:da:28:b7:c0:83:b2:9f:83:4e:a8:90:ab:d2:a4:
4b:b9:a8:2f:1f:aa:ee:f0:0b:2c:54:91:7d:3a:f6:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:F8:7E:37:85:02:04:1A:94:AF:21:9E:89:BD:43:C5:8C:55:39
X509v3 Authority Key Identifier:
keyid:48:2D:48:E3:B6:96:1F:12:08:C0:67:15:24:E0:8E:90:33:95:F6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/SC1I47aWHxIIwGcVJOCOkDOV9lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC1I47aWHxIIwGcVJOCOkDOV9lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCE2/24F7E27E97C811EE9102880AC4F9AE02/EDE9D100B03B11F09472550DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.136.0/24
Signature Algorithm: sha256WithRSAEncryption
58:cc:86:5d:82:72:74:cd:d0:f0:5f:d3:7c:a8:5b:21:1b:a6:
f4:3f:85:1a:9a:82:06:03:f8:e6:e9:2a:d8:a0:b1:2d:20:4d:
10:a2:4c:26:a4:51:ea:ed:a5:ae:06:11:33:e0:9e:ea:34:b6:
54:65:0c:dc:d5:12:82:42:6e:b7:77:0d:a2:0e:f9:dd:f4:b2:
ae:06:6c:ba:8b:b9:44:bc:91:25:d1:f7:cd:ae:fd:26:48:2d:
ff:ce:93:4c:2f:03:13:7e:31:54:c1:2f:f1:46:cc:47:69:9b:
b6:55:0b:3c:73:fa:8a:d8:b1:17:1f:0f:a8:f2:a4:97:45:8b:
91:9c:e4:8b:08:1d:24:77:92:12:32:76:e0:a0:b6:84:2c:b6:
4b:f6:70:86:42:75:76:44:4e:0b:d0:63:b7:f5:f0:64:fa:df:
cc:5a:ed:3f:4e:be:93:07:66:8c:37:b1:09:1b:45:2f:2b:58:
3c:bf:62:96:4c:28:6a:a8:ed:3c:2a:57:d9:00:cb:c4:cb:8b:
7d:57:94:45:c9:7e:22:a2:53:b2:03:71:53:a3:4d:a4:13:da:
eb:4b:63:a3:dc:15:b4:15:d9:c9:d3:d3:59:b3:8f:54:35:44:
89:ac:af:96:22:1c:c5:e5:50:3e:91:d6:ef:63:6b:b9:46:24:
d9:cc:0e:4e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJDRTIxMTAvBgNVBAUTKDQ4MkQ0OEUzQjY5NjFGMTIwOEMwNjcxNTI0RTA4RTkw
MzM5NUY2NTkwHhcNMjUxMDIzMTgxMzA5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZhNzAzNS04M2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1vbMVd5+qoehSXwbb1ZmD1qSgPqE15xkKl6rOqIU6PiqcR3chF47mPW8bgvI
hDcrJKYJWfEBIsiQiusnsNzW8PIzopHggMJyvr84U+S+q0rgZhRfGiaahYQHnARU
RKCE1Tu/hLk2g6he1muVEQIt9rhNlnInrn4AV05SuP4gkFM84Y5pwEuuxZC3LWEd
nBJXbzsZKkyMidP6qTwoEQxiFvwGT+MUn5ZHoHF9eFuLKWqDCBBptN0g5aeA603N
RPaY7H0eU+baRbuj1vIA9qx7IJe0tK3A+REUHnBAiaZVPDeb2ii3wIOyn4NOqJCr
0qRLuagvH6ru8AssVJF9OvYLBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJFt+H43
hQIEGpSvIZ6JvUPFjFU5MB8GA1UdIwQYMBaAFEgtSOO2lh8SCMBnFSTgjpAzlfZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkNFMi8yNEY3RTI3RTk3
QzgxMUVFOTEwMjg4MEFDNEY5QUUwMi9TQzFJNDdhV0h4SUl3R2NWSk9DT2tET1Y5
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDMUk0N2FXSHhJSXdHY1ZKT0NPa0RPVjlsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJDRTIvMjRGN0UyN0U5N0M4MTFFRTkxMDI4ODBBQzRGOUFFMDIvRURFOUQxMDBC
MDNCMTFGMDk0NzI1NTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnVogwDQYJKoZIhvcNAQELBQADggEBAFjMhl2CcnTN0PBf
03yoWyEbpvQ/hRqaggYD+ObpKtigsS0gTRCiTCakUertpa4GETPgnuo0tlRlDNzV
EoJCbrd3DaIO+d30sq4GbLqLuUS8kSXR982u/SZILf/Ok0wvAxN+MVTBL/FGzEdp
m7ZVCzxz+orYsRcfD6jypJdFi5Gc5IsIHSR3khIyduCgtoQstkv2cIZCdXZETgvQ
Y7f18GT638xa7T9OvpMHZow3sQkbRS8rWDy/YpZMKGqo7TwqV9kAy8TLi31XlEXJ
fiKiU7IDcVOjTaQT2utLY6PcFbQV2cnT01mzj1Q1RImsr5YiHMXlUD6R1u9ja7lG
JNnMDk4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:15 2025 by rpki-client