
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa
File: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (raw, json)
Hash identifier: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=
Subject key identifier: F7:B0:70:01:D9:8E:05:E1:B0:A0:34:3F:48:56:94:3B:A8:82:ED:1F
Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Certificate serial: 04F8
Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:48:10 +0000
ROA not before: Wed 24 Dec 2025 23:20:26 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63969
IP address blocks: 103.177.124.0/23 maxlen: 24
2001:df0:2240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl
rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454
Validity
Not Before: Dec 24 23:20:26 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45fba-6558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:d0:0f:f8:0e:e7:6d:2e:f8:b1:07:c2:45:
3a:7a:86:a0:67:c0:35:e4:eb:f7:04:a2:9b:86:0a:
f1:ca:d5:4c:61:4b:d2:e7:da:42:62:a5:d7:0a:cf:
1c:c7:fa:08:4d:f7:04:be:fd:82:4b:5d:2d:12:4d:
e2:90:c2:26:18:d4:a7:3f:94:14:fd:7b:f0:f6:83:
d9:29:90:91:56:bb:c7:15:2d:5b:4c:a0:3b:61:d4:
2e:6e:9d:c2:aa:53:60:0b:15:3e:a0:e3:7e:99:dd:
43:f6:e2:c9:a9:b7:53:d6:42:bc:9f:77:18:1a:31:
80:e1:26:05:f6:22:ae:c2:55:e4:d7:4c:57:54:40:
89:b0:f1:50:b8:9b:7a:ab:05:ba:89:84:67:49:c7:
37:c9:6b:5f:46:ba:20:58:08:9d:99:ef:e2:79:5f:
b0:d7:b4:bd:2d:a3:9a:75:39:c8:cd:a3:a3:77:1a:
02:9f:b2:6e:3b:98:e9:36:1a:02:ac:fd:cd:d3:32:
f5:a0:9c:fd:16:60:3b:77:ea:a7:4c:0a:d7:eb:d4:
fe:d1:8f:a8:43:bc:0e:ae:ac:45:be:a7:87:49:a5:
4c:99:46:2a:33:89:fa:17:02:27:39:3b:9a:f4:67:
b7:58:e3:a0:33:c5:87:f2:7f:3a:ca:24:7e:7d:6e:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:70:01:D9:8E:05:E1:B0:A0:34:3F:48:56:94:3B:A8:82:ED:1F
X509v3 Authority Key Identifier:
keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/58A4A3E2B73A11ED8A2A8964C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.124.0/23
IPv6:
2001:df0:2240::/48
Signature Algorithm: sha256WithRSAEncryption
73:86:18:1b:70:38:bd:ec:2a:7d:14:ce:72:fb:24:4f:a0:cc:
bb:2d:e4:9e:7c:43:2c:95:54:1f:62:21:e9:6d:5f:f1:6e:1b:
04:29:8e:1b:62:df:7c:26:85:f6:48:5c:04:b1:2e:85:68:25:
0b:d9:37:ca:4c:e2:2f:f0:e6:83:0a:34:18:57:44:91:5c:03:
6f:90:3f:d6:d1:0b:45:bf:5e:e1:08:27:3b:08:3f:92:1c:c5:
ee:49:70:65:4e:46:14:a6:cb:cf:50:8d:54:75:be:3f:7d:75:
ce:88:ec:26:5c:de:e1:b2:8a:db:ac:52:e6:0b:78:fd:bb:ed:
47:a6:cd:e5:56:ed:79:c5:2d:2a:24:93:2f:57:3a:6e:6a:ec:
2a:9e:14:28:94:3a:80:85:e2:f0:7d:0d:a1:f1:70:b1:0e:99:
1a:a2:25:17:ff:14:e2:b3:1a:1e:e9:2d:fb:a9:4a:2e:78:71:
4a:0a:f2:21:17:45:b2:e8:b2:2a:69:01:65:f1:8c:e7:88:07:
e4:8c:d1:8b:d3:ac:42:fb:e1:0a:6f:25:0e:be:07:14:0a:6f:
fd:b0:0e:60:b6:44:7d:86:80:47:09:f9:ec:f1:ce:3a:d9:fe:
6e:7a:bd:83:9a:4d:02:e5:6a:3f:f3:b9:c4:76:86:4d:6b:91:
ab:47:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:52 2026 by rpki-client