
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/2E24C52846AF11EBA761792FC4F9AE02.roa
File: 2E24C52846AF11EBA761792FC4F9AE02.roa (raw, json)
Hash identifier: GbdP365MBEEMO1MSE2BePvZktaes/gnixrVxi9aT14c=
Subject key identifier: FB:14:7A:09:6F:00:57:93:99:FA:21:0F:3B:13:06:28:4D:B1:FE:A1
Certificate issuer: /CN=A9135EE5/serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
Certificate serial: 07B1
Authority key identifier: ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/2E24C52846AF11EBA761792FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:10:40 +0000
ROA not before: Mon 26 Jan 2026 21:17:51 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141460
IP address blocks: 103.159.254.0/24 maxlen: 24
103.159.255.0/24 maxlen: 24
2001:df5:8e80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl
rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1969 (0x7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135EE5, serialNumber=ED6CEA6A6D2B042145FE12D32843EDFE67E8A27A
Validity
Not Before: Jan 26 21:17:51 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a448e0-8a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:af:6b:9c:13:20:e7:39:e5:1f:53:00:91:
41:55:c5:bc:83:22:5a:e3:d3:ca:51:e8:2e:bb:4c:
56:d4:90:46:17:b3:80:34:f5:7c:5a:95:1f:d8:83:
c2:a9:df:43:b7:46:4d:70:ac:33:aa:14:d0:45:d2:
24:03:eb:05:52:9e:60:fa:7a:ad:85:52:0e:cb:b5:
a3:d2:14:a2:37:21:10:4d:48:dc:cb:80:da:25:fe:
19:56:a2:58:91:6b:ac:42:ff:84:6a:92:e8:60:e0:
54:ef:42:25:61:9d:4e:ac:e1:2a:a0:e7:9c:12:27:
6a:70:d0:f4:b9:c6:f5:9f:35:b5:4e:23:9b:e4:29:
e5:6e:b2:a4:67:da:16:e1:bb:53:d8:ec:ed:30:81:
62:77:60:6b:bd:e3:1d:e6:4c:92:17:29:a1:13:93:
0c:b0:40:22:9a:6b:00:64:01:c3:2e:ba:fd:cf:4e:
0b:34:23:7e:fe:08:be:b7:a6:5b:38:3a:8e:0e:d4:
f4:d4:84:79:58:b2:b0:cf:a7:92:db:9a:90:86:45:
c8:6f:33:bd:72:b8:81:d1:c9:58:e9:3a:3e:2b:74:
70:0f:ad:cc:48:0e:92:3d:e4:22:94:87:e0:7e:96:
06:e1:50:3b:65:09:c5:cc:03:e7:4e:eb:3d:41:0b:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:14:7A:09:6F:00:57:93:99:FA:21:0F:3B:13:06:28:4D:B1:FE:A1
X509v3 Authority Key Identifier:
keyid:ED:6C:EA:6A:6D:2B:04:21:45:FE:12:D3:28:43:ED:FE:67:E8:A2:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/7Wzqam0rBCFF_hLTKEPt_mfoono.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wzqam0rBCFF_hLTKEPt_mfoono.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135EE5/87ED5A2E403E11EBAF4A465EC4F9AE02/2E24C52846AF11EBA761792FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.254.0/23
IPv6:
2001:df5:8e80::/48
Signature Algorithm: sha256WithRSAEncryption
b8:28:ef:62:64:17:c9:7e:5b:65:b5:a6:be:3c:00:5d:12:6c:
42:61:31:08:37:ea:9c:c2:1c:e0:bf:b9:d9:e0:ef:ca:b5:fc:
8b:1b:de:80:18:88:1f:76:b7:dd:8c:a8:d1:6e:5e:2f:7a:3e:
7a:18:c3:18:df:1b:27:d1:fb:d6:3d:70:1d:dc:07:79:63:5c:
76:fc:64:96:f3:ae:2b:4b:b5:cf:08:4b:f6:8b:92:7b:53:80:
69:90:c9:af:7c:b2:4f:d1:f9:68:27:43:6d:14:12:3e:f7:50:
a2:96:d2:ee:70:d1:0a:06:cc:08:0a:26:f7:47:f5:a2:da:45:
db:e4:d4:3a:a3:72:38:31:b5:fd:f0:3c:e2:d9:3f:7a:0a:f1:
c4:f6:19:76:ce:04:f0:94:42:41:b0:51:2d:d6:5f:70:94:23:
6d:4e:5e:7d:9c:ec:4f:91:18:88:89:b6:e3:be:22:04:ac:d2:
11:f0:8b:6e:30:71:9b:5b:1f:9a:3a:35:ff:60:e9:22:72:05:
5f:2a:ae:8a:b1:b8:05:c3:61:ee:7c:88:9a:a3:21:6c:f0:d9:
00:31:9a:3e:cd:d5:ff:3a:ac:fd:bb:2b:0b:77:69:d5:59:ba:
83:24:cf:bd:ed:49:f7:0b:b4:a8:b4:b7:b8:75:a8:a3:75:d4:
be:67:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:55 2026 by rpki-client