
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
File: 2540A3D24C9F11F0B3E79877C4F9AE02.roa (raw, json)
Hash identifier: qGDdg1i//pxSkkb/V0tDuFd0TZJsem9c+GmeMw73mWI=
Subject key identifier: FA:56:6A:F0:B5:27:D3:C8:29:7D:3B:25:15:EC:A3:A8:86:E5:21:36
Certificate issuer: /CN=A915C15F/serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Certificate serial: 0711
Authority key identifier: E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:45:30 +0000
ROA not before: Sat 02 Aug 2025 23:04:58 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138970
IP address blocks: 103.137.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809 (0x711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C15F, serialNumber=E699DBCDE09C0AA5F8E66AE0A73254DCA05D85D4
Validity
Not Before: Aug 2 23:04:58 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a40aba-06e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a6:55:52:08:71:94:7a:7b:de:5e:5c:a1:a8:
2e:eb:f9:dc:7c:ac:5a:49:5f:86:4b:00:27:5d:8b:
e0:5e:5b:47:25:3a:23:ba:68:6f:45:f0:80:1b:ca:
d5:fc:a6:fb:dd:2b:1d:c0:b7:d9:5f:df:ab:0b:1b:
7d:39:25:60:4e:c2:5d:ae:0c:ed:28:68:c3:d3:a7:
35:32:d2:c1:cf:86:06:0c:97:2f:3c:06:c5:3c:78:
a1:fc:c5:a0:f1:c9:e3:a0:b7:92:fb:32:63:90:5f:
06:47:78:08:16:5a:2c:38:88:fb:4e:60:7d:9a:55:
02:66:da:98:03:75:aa:69:85:f6:82:98:f3:bd:29:
99:96:e1:81:5c:0b:09:d4:32:99:25:f4:3b:c0:c1:
27:7a:a7:db:70:c9:96:7a:cf:c3:d5:fe:02:d6:3c:
50:b6:53:0e:96:25:d6:86:9d:20:b5:52:c0:59:89:
04:a9:6e:89:4f:c2:b4:b0:56:bc:ff:9c:3c:10:8b:
f3:2a:98:47:b6:b6:7f:23:d5:71:5a:ac:6c:05:ad:
cd:77:d4:15:2e:2b:ee:96:6b:31:19:f9:7c:13:9e:
26:f6:f6:39:b7:5a:a4:fa:24:47:85:1c:11:6a:4d:
cf:59:99:70:64:db:f8:5c:14:52:d6:c8:45:59:38:
28:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:6A:F0:B5:27:D3:C8:29:7D:3B:25:15:EC:A3:A8:86:E5:21:36
X509v3 Authority Key Identifier:
keyid:E6:99:DB:CD:E0:9C:0A:A5:F8:E6:6A:E0:A7:32:54:DC:A0:5D:85:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/5pnbzeCcCqX45mrgpzJU3KBdhdQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pnbzeCcCqX45mrgpzJU3KBdhdQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C15F/9329B0B68C6711EBB7EE863EC4F9AE02/2540A3D24C9F11F0B3E79877C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.209.0/24
Signature Algorithm: sha256WithRSAEncryption
31:77:94:5b:9d:c5:c3:4a:14:da:30:08:41:38:cc:62:c5:41:
89:3e:a8:1b:2b:49:23:2b:f1:70:3b:fc:21:98:db:b5:22:8b:
7f:1d:03:3d:5b:33:ff:9f:0d:8c:dc:b9:5f:39:4b:9e:7b:b6:
85:48:96:25:8b:03:46:9f:92:f7:43:cb:76:eb:cb:b8:2b:21:
ea:28:c0:49:5a:d3:bd:38:ad:28:e0:65:8f:03:58:9a:04:53:
44:2d:37:4a:c6:81:0d:e2:d3:1a:6b:6d:44:a7:1e:01:74:ed:
af:45:16:4a:ea:92:64:bf:6e:20:31:f9:c3:82:0b:b5:81:15:
48:8c:79:10:48:f8:bb:92:f7:e2:ce:03:04:ac:ad:3d:8b:4e:
cd:9d:74:06:3d:e1:76:d1:b2:bb:6c:87:cc:62:7e:34:42:62:
fe:df:a5:58:23:73:d8:34:b3:95:8b:f4:98:e2:fa:d8:5b:cc:
8e:0b:51:fe:d4:ac:c1:d2:c7:ef:10:17:de:d1:5c:3e:73:66:
84:40:f0:77:69:0f:b7:ed:7f:1e:bd:d3:66:5b:99:e3:30:07:
90:33:ca:e9:13:88:24:a1:6f:14:ca:25:f1:d8:af:6a:8b:87:
07:f4:02:e0:d2:fc:d8:16:68:6b:03:d3:71:63:fa:5c:d2:37:
0a:28:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:06 2026 by rpki-client