
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
File: DD3109D66C6C11EB92CE744BC4F9AE02.roa (raw, json)
Hash identifier: up/HQ57bDQrWj/7li1GrIYMwVNN3ymODpDpsodD4ac4=
Subject key identifier: 5A:73:BC:CD:1D:BA:C1:A3:10:66:B3:68:B1:B4:F5:83:3A:0E:C1:9E
Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial: 0734
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
Signing time: Tue 24 Feb 2026 21:18:55 +0000
ROA not before: Tue 24 Feb 2026 21:18:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133173
IP address blocks: 103.254.50.0/24 maxlen: 24
2001:df0:c800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Validity
Not Before: Feb 24 21:18:54 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=699e15be-07de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:48:41:54:5a:65:6d:5a:86:df:1a:94:f2:
ed:43:c5:c8:53:97:29:d5:41:82:06:10:4f:83:39:
5b:9c:80:15:41:39:70:32:b9:9b:7e:08:e2:95:d4:
bc:c5:89:6e:4f:16:23:f9:08:58:dd:ba:d8:bc:d5:
51:51:fb:68:2c:1d:53:e5:25:21:da:7e:60:14:86:
83:fe:e8:1d:b6:2d:0e:f0:1a:4c:1d:74:02:cc:b5:
1c:1e:c7:5d:90:58:5e:4e:6f:aa:65:cf:cd:4a:0f:
73:d5:87:05:3f:6a:9f:ad:07:a9:21:3f:e3:6b:20:
72:dc:9c:f2:09:2d:02:74:80:77:25:24:db:7d:83:
d8:ec:1e:5b:f7:ad:ca:49:92:ad:36:5c:f0:78:b0:
d7:eb:79:75:ef:dd:76:56:87:16:f6:be:9e:63:1a:
6b:bd:4a:c3:de:7e:21:55:dc:32:e2:cd:10:e3:0c:
c2:e5:44:40:47:a1:b0:e5:a8:b8:23:c8:07:67:46:
fc:dc:22:e3:d2:89:57:9b:b0:42:81:fd:9b:49:21:
80:6d:ae:16:93:f2:99:ce:b6:46:df:fc:92:9a:a8:
c8:65:72:f7:a8:36:33:6a:47:08:1e:bc:76:94:6e:
69:bb:7a:7a:6b:c0:7f:c9:3c:b7:90:dc:ae:4e:88:
7e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:73:BC:CD:1D:BA:C1:A3:10:66:B3:68:B1:B4:F5:83:3A:0E:C1:9E
X509v3 Authority Key Identifier:
keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.50.0/24
IPv6:
2001:df0:c800::/48
Signature Algorithm: sha256WithRSAEncryption
83:aa:d7:0f:ad:8f:7f:40:c3:5d:5b:40:40:f9:2c:bd:68:a9:
62:d5:b2:4e:f6:55:bd:43:ff:82:e3:57:41:37:d5:ac:95:47:
87:45:6d:ff:de:01:09:5b:44:c5:9f:14:00:cc:7a:07:c2:ec:
87:74:cb:d3:fb:e6:52:e4:b5:85:fe:0a:8f:c2:c9:b2:bd:22:
2f:94:19:0c:a6:c8:0b:c9:15:15:24:55:e6:bd:31:36:f2:6f:
f7:ae:97:07:55:10:ab:2c:1a:a5:58:a0:81:b9:f7:1c:bc:01:
53:8e:c0:d2:df:9e:bb:3d:3c:99:45:19:da:cf:b6:d6:53:aa:
0a:15:0e:68:16:96:73:1e:5f:14:9a:c0:fe:31:1a:e9:ec:f2:
ec:16:4f:01:f2:50:eb:71:0e:6b:b5:82:15:29:19:2c:a3:dc:
e5:54:07:b4:16:ae:51:6c:28:ee:1b:f1:cd:43:62:86:8e:c9:
77:2d:39:45:15:15:97:ea:7b:b0:37:7e:1f:ee:15:88:db:a7:
8e:2f:b3:39:70:1f:c3:74:7a:68:f4:c6:c4:56:c7:a3:f0:d3:
e7:9a:33:4c:e4:d9:42:65:1a:b7:f4:63:a1:3e:3a:3c:03:16:
bb:84:02:67:10:d7:90:d5:6a:20:b5:98:66:25:83:bb:0e:13:
7b:60:99:2e
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NUZCRUExMTAvBgNVBAUTKERGNTE1QjU5MTVFODMzRUVEQjQ0NEQxOUMzMEEwMEYw
OTc4MTVBMzUwHhcNMjYwMjI0MjExODU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTllMTViZS0wN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjhRIQVRaZW1aht8alPLtQ8XIU5cp1UGCBhBPgzlbnIAVQTlwMrmbfgjildS8
xYluTxYj+QhY3brYvNVRUftoLB1T5SUh2n5gFIaD/ugdti0O8BpMHXQCzLUcHsdd
kFheTm+qZc/NSg9z1YcFP2qfrQepIT/jayBy3JzyCS0CdIB3JSTbfYPY7B5b963K
SZKtNlzweLDX63l17912VocW9r6eYxprvUrD3n4hVdwy4s0Q4wzC5URAR6Gw5ai4
I8gHZ0b83CLj0olXm7BCgf2bSSGAba4Wk/KZzrZG3/ySmqjIZXL3qDYzakcIHrx2
lG5pu3p6a8B/yTy3kNyuToh+nQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFpzvM0d
usGjEGazaLG09YM6DsGeMB8GA1UdIwQYMBaAFN9RW1kV6DPu20RNGcMKAPCXgVo1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkJFQS9BQTdFMzkxQTZD
NkIxMUVCOEZFRjE5NEJDNEY5QUUwMi8zMUZiV1JYb00tN2JSRTBad3dvQThKZUJX
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzMxRmJXUlhvTS03YlJFMFp3d29BOEplQldqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUZCRUEvQUE3RTM5MUE2QzZCMTFFQjhGRUYxOTRCQzRGOUFFMDIvREQzMTA5RDY2
QzZDMTFFQjkyQ0U3NDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABn/jIwDwQCAAIwCQMHACABDfDIADANBgkqhkiG9w0BAQsF
AAOCAQEAg6rXD62Pf0DDXVtAQPksvWipYtWyTvZVvUP/guNXQTfVrJVHh0Vt/94B
CVtExZ8UAMx6B8Lsh3TL0/vmUuS1hf4Kj8LJsr0iL5QZDKbIC8kVFSRV5r0xNvJv
966XB1UQqywapViggbn3HLwBU47A0t+euz08mUUZ2s+21lOqChUOaBaWcx5fFJrA
/jEa6ezy7BZPAfJQ63EOa7WCFSkZLKPc5VQHtBauUWwo7hvxzUNiho7Jdy05RRUV
l+p7sDd+H+4ViNunji+zOXAfw3R6aPTGxFbHo/DT55ozTOTZQmUat/RjoT46PAMW
u4QCZxDXkNVqILWYZiWDuw4Te2CZLg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:32 2026 by rpki-client