
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa
File: 9B5A7020522911ED9136DF2AC4F9AE02.roa (raw, json)
Hash identifier: /XDkwKIyB4rNulgFvMOv5/7NFn8IGhU7PA58aFqz6PU=
Subject key identifier: F1:7B:81:35:85:DF:EB:2E:B0:E2:F8:9F:60:0D:78:FF:8B:8A:CD:FC
Certificate issuer: /CN=A915D85E/serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Certificate serial: 0809
Authority key identifier: D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa
Signing time: Thu 11 Jun 2026 15:47:01 +0000
ROA not before: Thu 11 Jun 2026 15:47:01 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141448
IP address blocks: 103.159.170.0/24 maxlen: 24
103.159.170.0/25 maxlen: 25
103.159.170.128/25 maxlen: 25
2406:d5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 21:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D85E, serialNumber=D458051F6DA952297475B484BDDD0FBBE3490E70
Validity
Not Before: Jun 11 15:47:01 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a2ad875-1095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:a2:b4:3f:b2:da:23:1e:36:36:62:49:82:
0e:3d:23:d4:7f:ea:02:40:fe:4f:4d:e9:66:ab:e3:
b5:40:41:1c:7a:da:6c:b7:4c:7c:3c:ce:a8:48:df:
e2:24:9a:1a:ef:43:2d:bf:58:a6:8c:62:58:ac:08:
0e:ab:ed:d7:39:5b:75:14:8a:90:4b:d4:9b:cf:a9:
cd:c5:75:f3:ca:3d:58:5c:f5:d5:28:7a:20:e6:97:
22:f6:2d:84:3d:5e:28:07:51:9d:1a:67:95:51:25:
69:44:33:c2:cf:0a:8b:d6:07:5d:d1:a7:44:b7:ee:
6a:14:16:a3:8b:80:44:73:d8:d0:e7:04:9b:1f:76:
d3:73:c0:b9:0f:f4:1a:ed:91:63:5a:1c:74:43:13:
8a:7c:ce:93:9a:70:1d:4e:9b:08:c1:a8:0e:dd:d7:
d1:41:da:f1:f3:56:36:8c:30:8d:d7:61:f4:e8:98:
d1:7d:01:05:9f:02:df:a7:45:76:62:08:b5:f0:d1:
8d:96:2b:e6:5c:e7:8a:5f:ee:a5:f0:2a:2a:94:6b:
ad:cf:4b:1d:07:45:3d:7e:69:70:13:40:9e:97:37:
2d:41:4c:57:c5:10:6b:e8:87:6c:13:6c:da:c4:45:
e4:ad:2f:67:57:89:a8:a9:a7:88:00:fb:75:20:00:
c8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:81:35:85:DF:EB:2E:B0:E2:F8:9F:60:0D:78:FF:8B:8A:CD:FC
X509v3 Authority Key Identifier:
keyid:D4:58:05:1F:6D:A9:52:29:74:75:B4:84:BD:DD:0F:BB:E3:49:0E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/1FgFH22pUil0dbSEvd0Pu-NJDnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FgFH22pUil0dbSEvd0Pu-NJDnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D85E/73EF909C3BB511EBB4D1377DC4F9AE02/9B5A7020522911ED9136DF2AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.170.0/24
IPv6:
2406:d5c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:f2:f0:c6:88:72:af:9f:5b:f6:7f:e5:2f:68:a3:41:9d:88:
ff:7f:5c:d1:c7:a2:16:a1:45:9b:67:91:5e:33:6a:4c:c5:9f:
31:11:3d:d7:b5:bb:06:b8:ea:96:74:06:3f:be:f3:6f:a0:a9:
f9:66:0e:9c:a4:2e:bf:b7:a1:b2:47:76:ab:01:9b:2b:f5:dc:
5e:bc:15:62:19:6e:2d:14:5d:aa:16:8a:bf:1f:67:ed:47:8a:
99:64:21:c8:9e:b8:81:3f:db:8b:a3:e8:f3:cd:60:3b:90:94:
d1:68:5b:01:c0:c7:54:59:cf:3b:8b:b1:5e:64:b9:24:f5:85:
f1:68:59:e0:1f:40:a8:62:f4:03:c8:d4:98:2f:eb:b4:f9:5f:
2f:e9:3b:d3:15:7d:7b:87:bd:31:63:63:65:0e:51:f8:07:2c:
25:6d:bc:fa:d1:1f:c8:55:9f:b7:ba:89:95:0c:fa:73:a1:7c:
24:06:77:ce:99:40:98:a6:db:38:ff:94:1c:11:46:79:6c:31:
ed:38:38:6e:17:50:ee:35:1e:69:e1:83:9c:36:00:3a:2d:c3:
b5:ab:b8:87:c8:2d:0c:17:72:a9:00:81:41:91:36:02:95:66:
ca:4c:23:fa:e1:2b:bd:f7:d7:da:c3:3b:49:29:7b:5c:ab:79:
fd:ed:a6:cd
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4NUUxMTAvBgNVBAUTKEQ0NTgwNTFGNkRBOTUyMjk3NDc1QjQ4NEJEREQwRkJC
RTM0OTBFNzAwHhcNMjYwNjExMTU0NzAxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJhZDg3NS0xMDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAufaitD+y2iMeNjZiSYIOPSPUf+oCQP5PTelmq+O1QEEcetpst0x8PM6oSN/i
JJoa70Mtv1imjGJYrAgOq+3XOVt1FIqQS9Sbz6nNxXXzyj1YXPXVKHog5pci9i2E
PV4oB1GdGmeVUSVpRDPCzwqL1gdd0adEt+5qFBaji4BEc9jQ5wSbH3bTc8C5D/Qa
7ZFjWhx0QxOKfM6TmnAdTpsIwagO3dfRQdrx81Y2jDCN12H06JjRfQEFnwLfp0V2
Ygi18NGNlivmXOeKX+6l8CoqlGutz0sdB0U9fmlwE0CelzctQUxXxRBr6IdsE2za
xEXkrS9nV4moqaeIAPt1IADIBwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPF7gTWF
3+susOL4n2ANeP+Lis38MB8GA1UdIwQYMBaAFNRYBR9tqVIpdHW0hL3dD7vjSQ5w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDg1RS83M0VGOTA5QzNC
QjUxMUVCQjREMTM3N0RDNEY5QUUwMi8xRmdGSDIycFVpbDBkYlNFdmQwUHUtTkpE
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFGZ0ZIMjJwVWlsMGRiU0V2ZDBQdS1OSkRuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ4NUUvNzNFRjkwOUMzQkI1MTFFQkI0RDEzNzdEQzRGOUFFMDIvOUI1QTcwMjA1
MjI5MTFFRDkxMzZERjJBQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQAZ5+qMA0EAgACMAcDBQAkBtXAMA0GCSqGSIb3DQEBCwUAA4IBAQAx
8vDGiHKvn1v2f+UvaKNBnYj/f1zRx6IWoUWbZ5FeM2pMxZ8xET3XtbsGuOqWdAY/
vvNvoKn5Zg6cpC6/t6GyR3arAZsr9dxevBViGW4tFF2qFoq/H2ftR4qZZCHInriB
P9uLo+jzzWA7kJTRaFsBwMdUWc87i7FeZLkk9YXxaFngH0CoYvQDyNSYL+u0+V8v
6TvTFX17h70xY2NlDlH4Bywlbbz60R/IVZ+3uomVDPpzoXwkBnfOmUCYpts4/5Qc
EUZ5bDHtODhuF1DuNR5p4YOcNgA6LcO1q7iHyC0MF3KpAIFBkTYClWbKTCP64Su9
99fawztJKXtcq3n97abN
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:52 2026 by rpki-client