
$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/A999E39EC36C11EFAF838D35C4F9AE02.roa
File: A999E39EC36C11EFAF838D35C4F9AE02.roa (raw, json)
Hash identifier: mKbtbi7CyvQ7vNnUaQAnEhNHFglwkIH4p11lfHr8khY=
Subject key identifier: 28:F6:4D:7B:B5:C0:17:DE:22:F6:89:C9:81:E0:3D:46:BF:57:90:78
Certificate issuer: /CN=A913854D/serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
Certificate serial: E7
Authority key identifier: D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/A999E39EC36C11EFAF838D35C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:55:43 +0000
ROA not before: Fri 27 Jun 2025 07:21:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140661
IP address blocks: 103.151.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl
rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:36:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913854D, serialNumber=D95629DE62439BB01EA478AC15CA26E995A97864
Validity
Not Before: Jun 27 07:21:11 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a596df-e744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:10:4e:09:d7:2e:34:94:1d:8c:fe:06:67:
b9:8a:d6:99:5e:eb:0c:24:d6:3a:bb:a2:c1:b3:56:
9c:27:dd:e1:fe:43:df:c1:12:49:d2:11:f1:61:37:
0e:d9:16:ac:00:b3:b4:c6:dc:f6:09:a8:96:dc:5c:
c5:a8:b8:41:a1:bb:c9:49:e6:0a:2b:45:96:f2:bc:
8a:47:62:9b:74:19:33:84:21:38:c6:44:a0:e3:09:
e6:78:9d:89:51:94:ad:55:2e:75:f0:ed:8d:6d:93:
c3:c9:b3:db:f3:79:ac:09:4f:8b:0f:4b:6f:a9:fd:
8e:bb:39:e5:a6:6f:83:3a:dc:36:5c:59:29:bb:62:
3a:2e:c4:80:10:68:1a:23:67:c3:19:70:58:c3:d3:
a0:ba:ea:9b:e4:10:57:71:7f:e0:a3:6f:1c:38:0c:
e1:50:97:36:14:72:ee:1d:35:e5:98:b0:c9:87:e1:
0d:e6:01:cb:a9:e2:8b:36:19:a9:02:2d:d3:5d:55:
20:ab:db:fd:e3:9d:6d:cf:cd:ae:18:e5:e3:2c:13:
c1:24:d1:2e:c4:2d:95:23:ad:ea:16:5c:00:bc:7d:
a5:b8:bb:60:ba:aa:9d:e0:f5:ec:12:ee:51:9a:17:
3f:1a:d2:3d:a0:5b:c4:cb:86:fe:a5:ea:43:e4:97:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F6:4D:7B:B5:C0:17:DE:22:F6:89:C9:81:E0:3D:46:BF:57:90:78
X509v3 Authority Key Identifier:
keyid:D9:56:29:DE:62:43:9B:B0:1E:A4:78:AC:15:CA:26:E9:95:A9:78:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/2VYp3mJDm7AepHisFcom6ZWpeGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VYp3mJDm7AepHisFcom6ZWpeGQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/E7C8DD2EC36B11EFBCBC5B16C4F9AE02/A999E39EC36C11EFAF838D35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.115.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c4:1f:0e:f2:50:b8:7f:01:69:4c:85:df:00:12:e7:da:8a:
24:a2:b5:9e:91:56:3c:0f:76:3f:a7:2c:3b:0a:76:3f:b9:0f:
2d:cf:ba:7d:f9:5b:f3:ed:96:13:47:21:e3:f8:d5:40:3e:61:
5e:04:1b:05:62:3a:0e:42:2e:10:75:39:49:17:8a:c2:a8:d0:
23:c8:f4:75:02:a8:28:b8:ea:fd:0e:25:14:da:03:db:c8:95:
65:02:89:8c:31:32:53:bc:04:2a:27:b5:56:5b:5d:e1:70:74:
d5:da:e8:cb:0e:a1:b7:52:62:30:be:83:63:63:db:22:73:52:
45:13:1d:9e:92:78:3e:f4:71:c2:fe:d6:a5:5e:6f:4a:ae:7d:
07:2f:f3:db:b0:eb:22:05:82:4b:68:c2:a1:53:5b:2d:0a:18:
d3:ba:a5:62:6a:1b:7d:5b:3b:f0:37:ca:d6:8d:87:f7:c0:5f:
c1:f9:ee:fc:ed:90:7a:9b:dd:b5:b8:ea:60:df:f5:68:3a:33:
0f:d5:0b:60:59:a3:31:1a:d1:02:64:8c:d3:21:a8:c3:de:41:
a8:91:07:c0:4b:ec:45:a5:31:14:8a:15:0d:6d:c1:8f:e5:0d:
62:99:bc:9b:91:1b:aa:18:0f:82:59:df:ea:0b:48:79:2e:a8:
1b:21:17:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:52 2026 by rpki-client