
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5A1CA5FE001511F1B173DED1406F56BC.roa
File: 5A1CA5FE001511F1B173DED1406F56BC.roa (raw, json)
Hash identifier: Q9xRalMlZSgL2EIEYXzUsDgkkdzjYwQVHna8NWAirhs=
Subject key identifier: 1D:54:EB:FB:CB:4B:B9:28:FE:19:1B:A0:C6:BA:AB:0C:37:72:12:20
Certificate issuer: /CN=A915A6E1/serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Certificate serial: 15
Authority key identifier: E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5A1CA5FE001511F1B173DED1406F56BC.roa
Signing time: Mon 02 Mar 2026 12:33:46 +0000
ROA not before: Mon 02 Feb 2026 08:58:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4686
IP address blocks: 103.243.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A6E1, serialNumber=E6A01F9E7A5FE0BD6DA26DC093DB3031F7EABCF5
Validity
Not Before: Feb 2 08:58:33 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a583aa-78aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:87:5c:10:6a:7c:22:62:ea:50:ce:df:fa:
c3:6c:08:d6:3a:66:53:3c:17:67:f3:cc:54:d4:1e:
90:ba:ed:8a:ad:2d:07:ef:a7:a8:95:d0:af:7a:78:
c8:c0:bf:2d:df:63:86:46:9c:e5:e1:85:e8:f3:97:
11:b7:7f:65:15:1b:19:7e:12:75:87:37:3c:01:93:
3e:8a:29:1b:2f:5b:08:d5:a1:0f:bc:df:ad:29:1c:
e5:de:93:f6:92:86:ed:1c:0d:56:65:2d:94:de:77:
9c:59:73:30:80:ea:f7:17:90:eb:ba:a2:0c:ca:f3:
f1:12:58:99:5c:23:6a:7c:ef:ee:6a:05:97:21:46:
3b:c8:ac:92:0d:1f:e5:e0:b8:db:62:25:fa:57:37:
e7:ca:43:d9:8e:cb:1a:e3:a0:2f:39:68:c9:1c:c2:
78:6c:be:b9:7b:2d:4f:79:cb:bd:a5:79:15:ed:bc:
f6:ea:74:d3:b9:c0:47:96:3d:dc:cc:cd:6b:79:ff:
a1:e8:97:aa:94:e4:84:c1:91:09:c4:62:e9:ef:e0:
8e:4e:86:eb:46:82:48:ba:b5:c3:26:f4:bd:bd:3b:
a6:d5:db:e2:0c:1a:8a:ea:39:ef:f2:1e:f0:a6:ba:
c5:79:bc:a2:6f:c0:80:2f:9a:ba:e6:ab:c6:8b:ce:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:54:EB:FB:CB:4B:B9:28:FE:19:1B:A0:C6:BA:AB:0C:37:72:12:20
X509v3 Authority Key Identifier:
keyid:E6:A0:1F:9E:7A:5F:E0:BD:6D:A2:6D:C0:93:DB:30:31:F7:EA:BC:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5qAfnnpf4L1tom3Ak9swMffqvPU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qAfnnpf4L1tom3Ak9swMffqvPU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A6E1/2D0228E6001511F1A5520AD1406F56BC/5A1CA5FE001511F1B173DED1406F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:bf:68:fc:c2:a3:fc:c4:73:b5:14:07:d9:15:21:1c:19:dd:
4e:70:29:77:8b:ec:72:4c:fe:19:a5:a4:03:fe:e3:09:5e:ab:
8e:11:32:3b:c2:a7:0d:50:c5:ba:1e:a0:28:92:28:67:15:bc:
c7:99:1f:52:14:b8:b0:6c:f5:fb:78:6b:84:04:e9:cc:3e:1d:
c0:e5:0f:de:b1:7d:58:e5:15:f7:9e:35:31:ac:1e:18:94:97:
e6:82:de:6f:be:d7:00:9e:5c:c9:b9:cf:73:61:61:59:de:92:
01:62:74:f0:0e:94:b4:af:02:22:66:93:b5:d0:4f:2a:7b:89:
43:a2:7e:4b:80:cb:f6:3d:2b:63:09:ab:4d:8e:eb:9a:4e:f7:
89:7b:92:92:6e:b1:c4:89:fc:2f:11:64:42:9e:fb:cd:87:1a:
1d:a1:ae:e6:bd:ed:c8:b6:b3:a5:de:3a:0f:86:2a:3b:09:ce:
5f:cd:9f:8c:0b:0b:f9:a5:f0:ff:a9:65:9f:6e:f8:43:a2:a7:
92:c4:25:7a:c3:dc:c4:4f:89:59:3d:02:42:09:a7:84:bb:a1:
3d:83:e3:cb:3e:11:e9:a2:8c:5f:ae:cc:a0:dc:56:6d:8a:25:
a5:12:33:8c:d3:23:a4:f9:d5:f4:40:e0:2d:7a:70:93:73:5a:
b2:72:9a:b8
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QTZFMTExMC8GA1UEBRMoRTZBMDFGOUU3QTVGRTBCRDZEQTI2REMwOTNEQjMwMzFG
N0VBQkNGNTAeFw0yNjAyMDIwODU4MzNaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU4M2FhLTc4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0ModcEGp8ImLqUM7f+sNsCNY6ZlM8F2fzzFTUHpC67YqtLQfvp6iV0K96eMjA
vy3fY4ZGnOXhhejzlxG3f2UVGxl+EnWHNzwBkz6KKRsvWwjVoQ+8360pHOXek/aS
hu0cDVZlLZTed5xZczCA6vcXkOu6ogzK8/ESWJlcI2p87+5qBZchRjvIrJINH+Xg
uNtiJfpXN+fKQ9mOyxrjoC85aMkcwnhsvrl7LU95y72leRXtvPbqdNO5wEeWPdzM
zWt5/6Hol6qU5ITBkQnEYunv4I5OhutGgki6tcMm9L29O6bV2+IMGorqOe/yHvCm
usV5vKJvwIAvmrrmq8aLzhXbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUHVTr+8tL
uSj+GRugxrqrDDdyEiAwHwYDVR0jBBgwFoAU5qAfnnpf4L1tom3Ak9swMffqvPUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBNkUxLzJEMDIyOEU2MDAx
NTExRjFBNTUyMEFEMTQwNkY1NkJDLzVxQWZubnBmNEwxdG9tM0FrOXN3TWZmcXZQ
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNXFBZm5ucGY0TDF0b20zQWs5c3dNZmZxdlBVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTZFMS8yRDAyMjhFNjAwMTUxMUYxQTU1MjBBRDE0MDZGNTZCQy81QTFDQTVGRTAw
MTUxMUYxQjE3M0RFRDE0MDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJn8/AwDQYJKoZIhvcNAQELBQADggEBAHu/aPzCo/zEc7UUB9kVIRwZ
3U5wKXeL7HJM/hmlpAP+4wleq44RMjvCpw1QxboeoCiSKGcVvMeZH1IUuLBs9ft4
a4QE6cw+HcDlD96xfVjlFfeeNTGsHhiUl+aC3m++1wCeXMm5z3NhYVnekgFidPAO
lLSvAiJmk7XQTyp7iUOifkuAy/Y9K2MJq02O65pO94l7kpJuscSJ/C8RZEKe+82H
Gh2hrua97ci2s6XeOg+GKjsJzl/Nn4wLC/ml8P+pZZ9u+EOip5LEJXrD3MRPiVk9
AkIJp4S7oT2D48s+EemijF+uzKDcVm2KJaUSM4zTI6T51fRA4C16cJNzWrJymrg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:10 2026 by rpki-client