
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/6154A3B0B2B611EAA5884016C4F9AE02.roa
File: 6154A3B0B2B611EAA5884016C4F9AE02.roa (raw, json)
Hash identifier: mcK4qQYqmr139GB74M+RvHkP1qDPO4dE/sdLHTuRilw=
Subject key identifier: 0F:85:C1:1D:6D:AA:5C:69:18:73:8F:91:29:EF:FD:90:01:5C:DB:35
Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Certificate serial: 095F
Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/6154A3B0B2B611EAA5884016C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:51:44 +0000
ROA not before: Sat 26 Jul 2025 21:00:15 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140668
IP address blocks: 103.151.130.0/23 maxlen: 23
103.151.130.0/24 maxlen: 24
103.151.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl
rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60
Validity
Not Before: Jul 26 21:00:15 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42850-3974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e4:b9:9d:9a:b5:8f:91:47:8e:bb:74:b2:cf:
ae:f5:c7:de:53:10:96:28:4d:53:2b:80:43:cc:e2:
98:af:de:cb:03:55:81:ac:56:bc:45:ce:0a:f7:74:
72:11:bc:42:22:48:65:9d:eb:b3:5d:e0:c1:8a:e5:
ae:33:6d:4c:80:bb:e4:23:93:f8:a9:be:e4:2a:ca:
94:fd:1b:e1:71:fc:89:9b:c1:48:c2:26:57:8c:d0:
3a:50:4b:fc:b9:be:6b:a0:f0:f1:f1:0d:64:ac:13:
00:5a:e3:06:ce:3a:85:bc:91:1e:f7:40:58:c1:99:
49:7f:3c:d4:22:90:cc:1b:fc:c1:7c:71:ed:13:04:
ea:26:09:52:e1:37:73:29:b6:54:9d:89:15:c8:68:
a7:ff:e0:a3:08:a3:21:b7:6d:1a:5f:b9:d8:fb:db:
99:fc:07:39:9f:b8:ae:df:bf:b4:82:e6:31:02:54:
e0:bd:2c:11:93:dd:45:5f:6e:34:2a:9b:f2:f5:1d:
a2:3f:2e:15:ec:28:34:4b:f4:54:80:de:14:32:a4:
9d:6c:30:75:eb:2e:27:f6:0d:56:75:5b:db:fc:01:
1b:c3:3b:7a:31:1a:6a:f2:33:f1:9c:e9:91:88:c9:
c5:d6:52:15:b5:61:e6:9d:23:26:89:d8:3f:d2:41:
5d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:C1:1D:6D:AA:5C:69:18:73:8F:91:29:EF:FD:90:01:5C:DB:35
X509v3 Authority Key Identifier:
keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/6154A3B0B2B611EAA5884016C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.130.0/23
Signature Algorithm: sha256WithRSAEncryption
77:8c:16:35:2c:da:22:dd:25:f6:f2:10:af:b6:39:e3:65:dd:
c2:7d:e0:a9:69:7b:c0:b8:91:12:88:9e:02:22:b7:9a:43:c5:
16:76:0d:00:cc:c9:2a:b5:47:1b:2e:b7:3e:16:2e:da:8d:c0:
47:ec:da:6f:43:71:6d:98:3c:a4:e4:1f:3e:dc:19:2a:b8:6d:
bc:a3:08:00:29:7c:84:68:ed:09:f1:8c:9d:19:02:65:cf:ae:
e6:7b:c8:93:09:9b:a2:a5:64:ef:76:5a:4f:79:4c:0b:4d:1b:
ab:6b:55:f6:d7:41:09:28:7a:fb:18:d9:ee:76:4b:d7:d4:e2:
85:0d:04:82:cf:23:55:cd:fc:b7:0b:b4:e6:4b:0c:fc:8c:b9:
dc:87:24:fc:e8:8d:45:44:df:7e:37:f2:ef:9e:87:66:f5:45:
c7:7f:56:49:c4:76:17:52:be:bf:83:1c:66:70:95:f7:d3:22:
57:30:24:03:20:d3:6f:56:99:5a:ae:fd:c7:7e:74:34:f9:ea:
7a:aa:bd:00:16:17:fe:54:01:be:cf:65:09:18:3b:d2:f1:e4:
28:2d:b1:1e:a2:90:65:c5:5f:6e:06:8f:57:24:4d:72:e7:5d:
5d:01:74:cc:04:ed:d5:6b:3d:ec:18:5e:68:29:99:36:94:f5:
0c:6a:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:15:22 2026 by rpki-client