
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/2804A8CE139211F19169847F3B3D8C67.roa
File: 2804A8CE139211F19169847F3B3D8C67.roa (raw, json)
Hash identifier: aglP/dTQkDNIkgDLjH5mtDSvJbGwM9HCogTwQ3nTawA=
Subject key identifier: F6:24:43:F8:B1:14:26:E8:D3:DA:E9:9A:F2:8A:E5:93:2D:C7:CD:B9
Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial: 05EC
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/2804A8CE139211F19169847F3B3D8C67.roa
Signing time: Sun 01 Mar 2026 17:12:59 +0000
ROA not before: Fri 27 Feb 2026 04:09:48 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 15083
IP address blocks: 103.115.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1516 (0x5ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Validity
Not Before: Feb 27 04:09:48 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4739b-a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:67:48:8a:d6:74:83:99:6a:cc:d5:95:f6:
76:80:51:0b:56:38:41:c6:1b:e2:c3:2c:ed:9e:c1:
a5:b0:d6:2e:86:e4:b4:02:5f:87:68:11:d9:d5:ea:
80:f6:57:56:90:aa:93:b5:5d:b0:28:8c:b6:61:32:
47:6c:82:81:43:e5:f2:71:c1:35:f2:4f:da:ce:a0:
75:b6:76:84:75:81:65:b0:aa:3f:12:6e:c3:45:4b:
35:04:68:db:d6:17:5a:6d:16:71:c8:3b:6a:e8:d6:
57:f1:44:a7:94:76:11:f5:6c:97:bb:d5:27:c5:01:
e5:fd:f7:a9:9a:9b:60:2b:4a:9b:1c:3c:99:f6:d5:
50:c1:3d:07:98:3f:4a:ab:42:80:29:be:4e:3d:df:
48:f6:17:83:78:d6:87:87:37:24:ca:5f:e4:c4:16:
09:46:33:72:05:36:b8:52:17:1b:92:cf:a4:41:4d:
f6:bf:29:03:6f:55:15:cc:12:b2:5d:df:b6:93:fc:
0f:1e:4e:be:da:a7:ec:99:4a:75:0a:84:06:01:22:
99:e0:86:48:b2:51:c7:12:26:b3:5d:a1:96:c8:49:
1f:0f:43:8a:41:f3:bc:64:7d:19:f9:59:b0:ed:b1:
2a:38:b0:08:b6:9d:c0:05:db:ef:7e:6f:6d:24:c0:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:43:F8:B1:14:26:E8:D3:DA:E9:9A:F2:8A:E5:93:2D:C7:CD:B9
X509v3 Authority Key Identifier:
keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/2804A8CE139211F19169847F3B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.171.0/24
Signature Algorithm: sha256WithRSAEncryption
39:76:09:b9:73:6f:54:29:c5:38:ca:fd:6a:7e:5f:f1:7b:97:
6e:32:b1:4f:c3:89:c1:b9:99:90:53:38:e1:95:ab:a9:06:83:
23:d9:0e:1c:0c:5e:08:1f:15:04:f0:57:c8:b5:cc:14:fa:5e:
0d:52:d0:5a:63:da:8d:8d:e9:55:c2:31:af:13:65:7b:a9:47:
04:5c:13:df:3a:dd:0a:b1:40:3b:15:ba:28:2e:01:b4:62:a7:
83:57:bf:05:e5:e7:84:33:27:00:a4:cc:b1:71:a2:01:be:89:
33:50:50:7b:a2:03:c8:d2:82:75:15:96:94:6d:5f:c4:79:55:
42:aa:ef:55:38:97:fb:1d:60:80:50:3d:f3:b3:ad:b9:c3:3c:
3e:a7:33:85:f2:5d:93:2a:60:e4:2d:b6:f9:c6:99:9d:69:cd:
03:31:b9:94:ed:62:96:b3:ce:62:3a:1d:d5:1b:32:e7:4b:bd:
d2:11:08:03:97:61:7b:44:8b:fc:1a:b9:be:98:f2:47:2d:8d:
53:f5:b0:e8:ce:2b:8a:59:1c:0b:5e:7b:ac:26:43:7c:a0:8a:
15:39:15:c3:c9:dd:d2:e6:6f:02:33:ac:88:67:d3:1a:36:94:
88:d2:a8:69:e3:41:81:a8:3a:86:7f:f3:44:aa:d0:1c:1b:68:
bc:4b:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:18 2026 by rpki-client