
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/EE99A422139111F1BDC8075D3B3D8C67.roa
File: EE99A422139111F1BDC8075D3B3D8C67.roa (raw, json)
Hash identifier: AOkQ/qP4GzBkvmhob3U3hLgvcTeFpKmdHt13HnJmjco=
Subject key identifier: 1C:65:53:08:E5:F3:B9:44:C9:BF:61:6C:57:93:CF:B5:6B:E5:2F:9A
Certificate issuer: /CN=A917E151/serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Certificate serial: 05DF
Authority key identifier: 0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/EE99A422139111F1BDC8075D3B3D8C67.roa
Signing time: Fri 27 Feb 2026 04:08:12 +0000
ROA not before: Fri 27 Feb 2026 04:08:12 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 2914
IP address blocks: 103.115.170.0/24 maxlen: 24
103.115.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E151, serialNumber=0CD64E4BD6FAD397C7471118A2803B87DD2C1D53
Validity
Not Before: Feb 27 04:08:12 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a118ac-bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:2f:8e:75:cb:19:73:dd:af:ca:d6:5e:37:
c9:b3:35:80:45:30:cb:5f:38:18:2c:8a:99:e1:20:
ab:4b:f1:87:ad:5f:25:8b:9b:8c:46:b9:8f:34:7c:
fa:de:79:87:db:27:d8:fb:5c:ea:ce:94:79:bf:0d:
b6:9b:0c:31:91:e4:3f:32:fc:b2:04:b3:27:df:77:
4f:c3:c0:72:ee:a4:e5:54:20:8f:96:34:8a:85:dc:
11:ec:aa:e9:e2:de:f2:6c:01:fb:6c:96:9e:1a:0b:
7a:9d:95:9c:63:9b:f1:85:2b:e6:2e:d4:c3:0b:df:
5e:0d:12:1e:7f:39:75:10:f0:50:bc:d1:85:09:dd:
70:b6:ba:50:f2:96:9e:a0:62:41:e4:03:ab:5c:12:
87:80:81:e6:24:98:f6:e8:0f:bf:86:6c:71:d9:e3:
56:81:11:ad:41:20:3f:88:65:35:f5:d8:17:45:87:
d9:39:c2:35:4c:6b:5b:58:c4:b6:4c:60:2d:fd:f5:
62:62:ba:dc:64:83:10:23:65:9b:68:19:0e:ec:f4:
37:fb:00:37:4b:52:bf:73:1c:e6:b4:cb:0f:2c:70:
37:26:2f:c6:62:f2:33:92:c8:be:77:bc:31:c6:78:
96:19:e6:13:7b:fa:32:c9:0c:8d:c4:1a:23:3c:98:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:65:53:08:E5:F3:B9:44:C9:BF:61:6C:57:93:CF:B5:6B:E5:2F:9A
X509v3 Authority Key Identifier:
keyid:0C:D6:4E:4B:D6:FA:D3:97:C7:47:11:18:A2:80:3B:87:DD:2C:1D:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/DNZOS9b605fHRxEYooA7h90sHVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DNZOS9b605fHRxEYooA7h90sHVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E151/12ACD6BAF4DC11EB8F7DB949C4F9AE02/EE99A422139111F1BDC8075D3B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.170.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:6b:e7:ac:79:cc:0b:b4:78:bd:e1:b7:21:93:c6:cf:1e:c3:
cc:67:1a:9e:04:c5:97:bb:88:34:4b:fc:a6:1d:13:d8:9f:3c:
68:c0:57:3e:42:58:af:7c:86:45:68:4e:3b:fa:22:30:b0:d2:
90:1a:e1:55:3e:c7:9d:57:90:9c:b9:3f:92:9b:29:7f:dc:13:
30:40:89:3a:2a:38:1e:6e:14:c8:2e:66:b5:97:8b:79:be:e8:
a6:38:d9:65:1e:47:a3:4e:cd:37:6f:7b:30:ff:31:c2:a7:b0:
8f:31:fb:0a:1b:7a:f4:20:ad:f4:5c:1b:bc:f5:d6:d4:f8:a6:
cf:3f:66:53:34:93:85:36:f2:8d:2c:9a:a9:f7:b3:29:f4:a8:
a6:47:b3:d6:21:fe:70:e8:f9:6e:45:05:42:68:d1:7e:9e:f3:
43:08:a6:9c:a1:b7:83:3e:d2:73:e2:49:63:08:67:69:92:12:
30:b3:79:4e:3a:9a:1d:ba:e0:9b:73:ab:fd:7d:20:66:37:18:
3b:7a:40:b6:0a:52:ec:ef:6b:8c:74:b2:da:94:78:77:fd:6b:
2c:dd:6a:35:8c:38:b6:b8:71:8d:86:b9:bd:d3:cb:42:3f:a7:
16:8a:8a:fb:26:8b:c8:a5:e9:23:1b:89:e8:d4:35:80:63:c7:
5e:05:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:17 2026 by rpki-client