
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/7A5654CE358A11F0A6A3E84EC4F9AE02.roa
File: 7A5654CE358A11F0A6A3E84EC4F9AE02.roa (raw, json)
Hash identifier: VYWEaRIXiR8qMtQLt1vLH6vscj0LW+C9m3n4iYjk9EI=
Subject key identifier: BC:D3:3A:5F:C2:2E:7B:F8:2F:1F:E0:9C:94:BF:C0:30:3C:BF:E8:71
Certificate issuer: /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial: 0849
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/7A5654CE358A11F0A6A3E84EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:51:48 +0000
ROA not before: Thu 26 Jun 2025 21:29:10 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.9.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Validity
Not Before: Jun 26 21:29:10 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45284-faa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:80:c2:df:46:52:14:d3:ea:e0:6a:8e:5b:c9:
cd:a6:c9:13:51:8e:f0:83:74:b9:37:99:c1:56:c8:
b9:e5:af:02:2f:f2:cc:64:71:ec:9d:f9:48:fc:a3:
21:11:b8:df:d4:02:4a:51:d9:12:0a:02:69:83:f4:
26:0c:ba:f4:38:93:e8:b0:2c:d8:4a:1c:65:c1:8e:
fd:52:3a:4e:81:e3:27:8d:80:8a:44:15:d6:c9:c1:
fb:2f:b1:c6:67:76:63:5b:7f:c1:c0:c1:ad:0d:8f:
dc:5e:bf:e5:b0:62:24:00:76:92:e6:61:59:a6:7e:
84:42:ca:9b:4c:85:e7:e1:ec:f7:d7:b2:93:41:97:
71:54:b7:05:90:b9:a9:7a:dd:2c:9b:2e:9d:e9:7a:
1b:52:ad:0a:c7:e9:f6:34:8d:47:cd:1b:e3:b7:da:
f6:e6:d3:df:ca:f7:a6:d7:3f:17:5c:cf:d1:7c:1b:
f4:48:92:00:92:4f:2b:e0:bb:32:61:fd:08:2c:37:
39:ee:38:63:17:51:fa:2c:02:1a:5d:eb:5e:01:93:
7c:72:88:55:17:d0:1f:95:23:b1:b5:cc:7c:b9:62:
20:c1:95:99:b4:bc:7a:48:28:f1:d9:5e:2c:47:2e:
3c:40:f4:a8:08:25:28:70:23:1a:6a:1e:69:67:f3:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:3A:5F:C2:2E:7B:F8:2F:1F:E0:9C:94:BF:C0:30:3C:BF:E8:71
X509v3 Authority Key Identifier:
keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/7A5654CE358A11F0A6A3E84EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.149.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:c8:e0:38:4c:92:6f:9a:9d:29:87:88:ea:92:64:f6:78:d2:
92:2b:7c:9b:e8:43:ce:a4:70:ae:a0:27:72:4c:fa:62:39:6d:
20:45:1d:0a:71:e7:0b:f1:91:b8:39:81:9a:d4:63:49:cf:c8:
91:f2:70:5d:ca:7a:e1:5c:a6:ba:14:22:bb:77:95:a6:fa:7d:
aa:e2:2f:7d:2d:fd:2e:82:71:c1:ef:de:6f:97:ba:74:b8:7c:
7b:e8:45:28:f1:38:eb:ee:cb:67:da:89:7a:6f:d4:8f:ed:c8:
49:dc:03:d7:3c:94:9e:aa:15:3f:bf:d9:0d:24:9c:b0:97:2e:
93:2a:90:0f:45:31:17:41:a6:6c:bd:d7:94:4c:a2:ac:74:02:
29:55:08:47:f6:48:8f:4e:3d:73:c5:2f:34:e1:2f:b2:12:52:
35:bd:02:3e:e2:93:47:5e:78:c8:37:ef:ed:3e:aa:5c:b0:01:
15:b7:e7:82:6b:9d:c4:81:7c:51:92:bb:ba:88:5d:0e:32:75:
36:ca:2b:bf:91:33:ab:f1:0d:f0:d0:03:4f:64:94:ce:05:b8:
30:f6:3b:74:7d:a5:5e:1a:ac:37:83:7f:c4:b6:ad:f3:d5:c5:
9e:35:ec:fa:a9:86:8a:07:a4:2e:78:56:33:26:4e:67:74:12:
1f:9a:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:55:52 2026 by rpki-client