
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/59ADC606EBDA11F0868F86546C6F56BC.roa
File: 59ADC606EBDA11F0868F86546C6F56BC.roa (raw, json)
Hash identifier: 9lrxfUBWBmg3EvWvMM3CqOq7J9rwqvVHXsxONFDg0xI=
Subject key identifier: 7B:0D:C5:79:A8:F3:44:01:6B:21:A0:1D:D4:39:40:72:4A:4F:A7:21
Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Certificate serial: 0223
Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/59ADC606EBDA11F0868F86546C6F56BC.roa
Signing time: Sun 01 Mar 2026 10:59:09 +0000
ROA not before: Wed 07 Jan 2026 15:05:49 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151183
IP address blocks: 103.131.103.0/24 maxlen: 24
2001:df2:43c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4
Validity
Not Before: Jan 7 15:05:49 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a41bfd-c340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:db:0b:43:a8:af:a5:8c:94:2d:65:b6:95:
bd:93:00:44:ba:16:01:f9:14:70:a1:91:e8:ce:06:
50:d5:af:42:ad:3e:73:e2:99:0f:6d:da:48:cd:c4:
31:f5:4d:e2:4e:da:91:74:f6:00:05:1d:15:88:89:
53:9a:2f:88:41:c7:22:93:33:b1:66:61:7a:e5:21:
af:aa:54:19:ab:96:cb:d0:17:e2:fc:b0:a2:c4:ef:
88:b7:ee:e6:25:72:9d:fc:ca:a2:f6:e8:d1:1b:5f:
fb:3e:16:42:90:b3:b6:ed:cb:6f:aa:27:52:f0:2d:
78:37:97:e1:a8:77:de:b5:73:25:7c:2d:23:0d:e1:
b7:85:62:b0:26:16:f4:cc:94:a2:e3:8f:ad:65:de:
b4:0f:1b:a5:90:5e:d6:e3:67:10:c0:01:60:08:50:
6a:27:ee:ce:99:76:8d:2f:32:cf:b7:da:ab:66:22:
2d:7c:bd:a8:db:25:2a:95:28:cd:f6:ca:37:24:aa:
e9:4c:1d:60:cb:db:4f:18:08:cf:da:05:a9:70:83:
8c:11:5f:8e:c8:b4:05:4a:83:44:7a:7a:9a:b3:c4:
39:40:b4:ce:a1:c3:d1:2e:2a:03:c9:c8:74:81:fb:
3f:82:15:e9:f3:b5:35:43:f5:a5:70:e4:62:29:39:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:C5:79:A8:F3:44:01:6B:21:A0:1D:D4:39:40:72:4A:4F:A7:21
X509v3 Authority Key Identifier:
keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/59ADC606EBDA11F0868F86546C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.103.0/24
IPv6:
2001:df2:43c0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:bc:9a:e4:a5:92:60:a8:35:9b:3e:80:4a:1e:17:a8:4e:51:
1d:da:f9:ce:73:f8:8a:06:17:ad:81:ce:6a:53:97:44:6e:40:
de:ba:ab:99:80:08:29:c1:df:0c:66:f3:20:22:15:fd:41:17:
4c:05:e1:19:c4:0d:81:45:d5:0d:44:36:f0:98:2f:33:f7:09:
f3:83:b3:77:6f:34:6d:92:67:3a:9b:68:10:fd:f4:d7:77:1c:
42:b6:99:83:ad:ac:86:16:92:bc:f6:ce:b2:e9:32:df:a8:1d:
b4:21:99:8b:51:31:bc:3a:12:b4:3b:a3:b4:16:28:c3:92:21:
e7:72:4b:4a:a4:f5:a3:70:38:4a:74:c3:e1:38:6f:a9:27:85:
27:e8:25:14:2a:fc:ed:1f:b8:ad:c6:77:74:d3:28:b8:6b:39:
87:5a:f4:07:04:59:41:52:93:9a:78:6c:f7:20:9b:e3:d8:fc:
5c:c6:0a:30:82:86:de:09:16:c0:58:8f:af:b5:db:1a:22:62:
23:77:e3:de:dc:2a:a2:91:30:30:f3:6a:4a:09:a8:7d:bd:1c:
c2:d1:21:18:18:2d:e7:e5:f2:a8:16:70:49:58:5e:c1:a7:5a:
7a:20:d0:93:10:43:f6:a9:a6:3a:55:20:9f:12:a0:ba:b3:54:
96:de:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:22:41 2026 by rpki-client