
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
File: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (raw, json)
Hash identifier: U+pjz+gHKxK+CuW7qo7BMs3J3XoJAneOPNb7LhCFDWE=
Subject key identifier: 26:D7:5A:51:85:3A:B5:EA:57:67:29:B0:DD:73:45:91:A1:2B:4C:66
Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial: 0A95
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:48:03 +0000
ROA not before: Mon 12 May 2025 20:25:56 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.150.46.0/24 maxlen: 24
103.150.47.0/24 maxlen: 24
2001:df3:5580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2709 (0xa95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Validity
Not Before: May 12 20:25:56 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a42773-c844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:cb:36:03:4f:5f:66:e2:85:0b:1d:dd:71:
1b:96:59:14:b9:39:d2:9c:75:1f:c9:05:14:89:65:
24:dd:48:b3:e2:d1:dc:a7:1c:c0:8a:f9:9d:12:22:
16:b0:a2:85:da:26:ac:8e:46:d4:61:4d:a8:5f:31:
45:a1:0b:cc:04:86:4a:87:63:45:4a:2a:fe:47:0f:
f4:82:ee:3b:63:f3:83:fd:c4:28:39:71:db:22:aa:
8b:ea:95:34:a7:3f:80:64:b7:a3:2d:84:25:28:3f:
04:68:3a:be:3e:41:b4:43:1a:d3:55:2a:96:16:45:
c7:34:14:a9:42:2a:ea:92:50:6d:7f:32:55:c5:eb:
06:31:20:99:07:01:55:82:f3:74:94:9f:2e:2c:1b:
ca:d4:8c:d2:5c:7a:88:e3:86:7b:a3:6f:dd:ba:41:
40:94:79:3d:81:0a:33:f7:e5:34:7c:a1:25:46:60:
20:86:2b:00:a8:e4:ed:7f:1c:9c:51:ae:00:e1:15:
94:ee:af:7a:4b:18:01:62:b2:0f:52:21:83:23:bd:
b6:8d:16:03:13:89:40:1a:14:5e:7d:19:00:39:c5:
24:32:23:13:ad:86:62:0b:49:a3:96:03:90:51:67:
6a:11:3e:e8:9f:9f:2c:6c:aa:42:af:b3:66:f6:3a:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D7:5A:51:85:3A:B5:EA:57:67:29:B0:DD:73:45:91:A1:2B:4C:66
X509v3 Authority Key Identifier:
keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5C1CF19EA9C011EABAAB4624C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.46.0/23
IPv6:
2001:df3:5580::/48
Signature Algorithm: sha256WithRSAEncryption
17:31:69:b1:aa:e1:de:49:33:97:bb:aa:13:58:c3:e5:b1:eb:
ac:34:ce:a0:fe:af:f4:b2:e5:b5:03:c2:db:dd:ab:5b:8e:fe:
e8:4e:bb:41:e1:72:59:13:af:8a:b6:f2:9c:d2:d4:29:4e:a7:
e3:35:cf:cb:b8:bf:93:ba:92:3a:e2:7c:72:9a:5d:10:8e:cd:
1b:9f:b2:b7:26:93:49:c1:0c:ac:bc:15:ad:86:07:61:51:66:
9c:0a:a6:c9:ae:a3:c4:39:63:f3:d5:c1:0a:ee:a0:4e:0f:b9:
f5:f5:2e:1d:21:51:5c:23:65:50:1d:3b:cd:11:66:3f:71:a2:
e8:c8:19:af:e4:34:59:74:77:b4:1d:65:56:f1:c8:38:b3:f5:
e4:72:0a:6f:3c:81:4b:8e:6f:9c:6a:06:e0:a4:6e:39:02:09:
6b:7c:92:ce:95:c1:7c:3c:fc:49:74:0f:ee:ca:db:7a:e2:b1:
4e:e6:81:6a:d6:1b:2b:b3:8d:9a:36:d3:8b:4f:08:fc:fb:0d:
a7:f3:28:42:e2:ad:2d:c1:f8:a6:71:72:70:70:7f:9c:32:ad:
4f:c8:83:ff:37:32:4f:1b:4c:94:ac:30:96:dd:90:f6:4b:a0:
2b:f7:b8:44:99:cd:58:e9:19:c2:49:e2:de:bf:6d:ef:89:32:
38:77:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:08 2026 by rpki-client