
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/C5859C724D7611EFBA188667C4F9AE02.roa
File: C5859C724D7611EFBA188667C4F9AE02.roa (raw, json)
Hash identifier: qOaCf86tsXG3s1QqG+aj2f+gNBRbLzNopBfRAbvAWig=
Subject key identifier: 5C:78:58:B5:9C:65:A4:8E:8D:26:84:CD:60:7A:74:42:22:AE:3E:95
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 35E3
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/C5859C724D7611EFBA188667C4F9AE02.roa
Signing time: Wed 22 Jul 2026 15:14:20 +0000
ROA not before: Wed 22 Jul 2026 15:14:20 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137854
IP address blocks: 103.115.167.0/24 maxlen: 24
103.125.25.0/24 maxlen: 24
103.125.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 14:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13795 (0x35e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Validity
Not Before: Jul 22 15:14:20 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a60de4c-5921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:94:f8:0f:ab:85:83:1d:cb:2b:1c:24:be:
c2:b0:6e:6e:6c:44:68:33:f5:36:ac:d0:2f:e1:0d:
3e:8e:42:14:d7:c3:22:5c:ec:c1:f2:24:6e:30:88:
61:a0:cf:1a:ef:29:b3:41:ee:f8:36:49:98:6c:30:
08:ed:c7:fd:70:1a:9e:61:93:0a:d3:7e:77:a8:c6:
6a:54:47:f3:72:7a:48:ce:3f:78:ff:4d:60:6a:3c:
f0:ff:49:c1:33:1a:21:49:14:cd:4d:75:ac:12:6a:
82:49:b3:30:6a:7d:ef:44:d8:91:e3:dc:20:d7:7e:
52:84:ff:3d:67:e3:71:8f:d5:76:64:99:4b:0b:e8:
e7:4b:e7:b8:18:c0:3f:d3:eb:d0:f7:3d:8d:f9:ea:
f1:72:05:ee:51:08:13:67:49:fb:02:01:19:3f:e2:
33:fc:75:c2:d8:62:75:3d:ae:ac:03:84:cb:62:53:
8a:81:68:e8:1a:23:8c:98:4e:06:d1:3c:b2:65:cc:
e5:9d:7c:da:64:3f:85:69:b8:74:25:d3:43:6c:95:
6f:10:2a:82:14:f8:5a:0e:1c:81:42:e2:76:50:74:
1e:0e:8f:7a:18:3d:64:48:ee:7c:af:c2:55:0f:39:
ec:af:67:81:82:62:c5:3c:30:92:b4:af:e1:7b:1f:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:58:B5:9C:65:A4:8E:8D:26:84:CD:60:7A:74:42:22:AE:3E:95
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/C5859C724D7611EFBA188667C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.167.0/24
103.125.25.0-103.125.27.255
Signature Algorithm: sha256WithRSAEncryption
72:47:74:9d:c7:76:4c:39:4f:d0:95:c7:3b:1e:a6:db:3b:22:
6b:1e:e6:9b:db:3a:c3:aa:4e:16:05:15:26:01:db:cf:23:f0:
21:15:33:60:89:47:5a:e5:6b:87:fc:c7:1d:6f:f9:3d:d3:71:
cb:c5:4e:17:c6:bb:9d:f5:c7:bd:e6:8d:f7:ef:3f:1e:b7:f6:
d5:58:5b:22:86:ef:a7:5e:45:14:43:6e:dd:1a:7e:56:55:1c:
71:cd:be:c9:5f:8d:dc:7c:8f:7f:01:82:6b:56:fe:9c:bf:cd:
53:82:67:23:9a:66:98:48:dd:ab:fb:20:d3:3b:de:af:50:a7:
48:6b:8b:38:34:45:28:d3:21:0a:02:7c:02:ee:91:bc:5c:81:
92:91:61:42:02:58:f7:89:bf:16:bf:ae:c8:0a:e0:0e:1c:03:
00:40:97:f5:dc:bf:3b:ee:47:c2:9f:6c:27:54:61:34:76:3f:
ab:44:29:47:57:c5:c5:15:ef:18:a8:1f:b3:40:62:a9:87:90:
a1:16:10:3a:5f:78:36:ce:10:ce:f5:01:88:b8:3a:e2:15:0e:
c3:7a:a7:5b:20:f3:a6:fd:ca:ef:b8:ad:56:79:2b:8e:4a:22:
c2:5d:5f:da:41:36:91:bf:55:9a:fa:78:e5:63:f1:6a:e7:6d:
f9:22:e4:ba
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICNeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VEMzUxMTAvBgNVBAUTKDdFRTk0NUU5RTVFNTFDNEI0MUQ5OUM0MzMyOTUyRjlD
OTU4NzY2MDgwHhcNMjYwNzIyMTUxNDIwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYwZGU0Yy01OTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJiU+A+rhYMdyyscJL7CsG5ubERoM/U2rNAv4Q0+jkIU18MiXOzB8iRuMIhh
oM8a7ymzQe74NkmYbDAI7cf9cBqeYZMK0353qMZqVEfzcnpIzj94/01gajzw/0nB
MxohSRTNTXWsEmqCSbMwan3vRNiR49wg135ShP89Z+Nxj9V2ZJlLC+jnS+e4GMA/
0+vQ9z2N+erxcgXuUQgTZ0n7AgEZP+Iz/HXC2GJ1Pa6sA4TLYlOKgWjoGiOMmE4G
0TyyZczlnXzaZD+Fabh0JdNDbJVvECqCFPhaDhyBQuJ2UHQeDo96GD1kSO58r8JV
Dznsr2eBgmLFPDCStK/hex8ZZQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFFx4WLWc
ZaSOjSaEzWB6dEIirj6VMB8GA1UdIwQYMBaAFH7pRenl5RxLQdmcQzKVL5yVh2YI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUQzNS9CNjNCQTdFRTFE
OTQxMUUyOUQxQTJFRjkwOEIwMkNEMi9mdWxGNmVYbEhFdEIyWnhETXBVdm5KV0ha
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z1bEY2ZVhsSEV0QjJaeERNcFV2bkpXSFpnZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VEMzUvQjYzQkE3RUUxRDk0MTFFMjlEMUEyRUY5MDhCMDJDRDIvQzU4NTlDNzI0
RDc2MTFFRkJBMTg4NjY3QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAZ3OnMAwDBABnfRkDBAJnfRgwDQYJKoZIhvcNAQELBQADggEBAHJH
dJ3Hdkw5T9CVxzsepts7Imse5pvbOsOqThYFFSYB288j8CEVM2CJR1rla4f8xx1v
+T3TccvFThfGu531x73mjffvPx639tVYWyKG76deRRRDbt0aflZVHHHNvslfjdx8
j38BgmtW/py/zVOCZyOaZphI3av7INM73q9Qp0hrizg0RSjTIQoCfALukbxcgZKR
YUICWPeJvxa/rsgK4A4cAwBAl/XcvzvuR8KfbCdUYTR2P6tEKUdXxcUV7xioH7NA
YqmHkKEWEDpfeDbOEM71AYi4OuIVDsN6p1sg86b9yu+4rVZ5K45KIsJdX9pBNpG/
VZr6eOVj8Wrnbfki5Lo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:30 2026 by rpki-client