
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
File: DD3109D66C6C11EB92CE744BC4F9AE02.roa (raw, json)
Hash identifier: nGK8b+Ix8a3dVeSiDlsS9W+CsTSjw+EZJM+0LCkI48I=
Subject key identifier: 3D:CD:99:40:49:A5:0D:28:91:F1:2E:33:3C:F6:BA:E8:57:87:A0:34
Certificate issuer: /CN=A915FBEA/serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Certificate serial: 0722
Authority key identifier: DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
Signing time: Fri 30 Jan 2026 22:18:17 +0000
ROA not before: Fri 30 Jan 2026 22:18:17 +0000
ROA not after: Tue 02 Jun 2026 00:00:00 +0000
asID: 133173
IP address blocks: 103.254.50.0/24 maxlen: 24
2001:df0:c800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 21:14:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FBEA, serialNumber=DF515B5915E833EEDB444D19C30A00F097815A35
Validity
Not Before: Jan 30 22:18:17 2026 GMT
Not After : Jun 2 00:00:00 2026 GMT
Subject: CN=697d2e29-93ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:39:b2:c4:df:b2:2b:12:bd:b6:ab:a2:2d:
48:bb:7d:5e:af:68:36:1e:36:60:e7:85:00:00:75:
ad:f5:b9:ad:a7:11:a4:a1:f9:49:e6:c6:6b:be:8f:
ab:1e:47:61:82:79:e5:10:c7:3d:57:52:a4:e2:80:
da:18:65:0b:2c:7f:c6:d7:a0:c8:39:9f:5b:6f:4e:
39:a7:26:e7:6d:0c:a0:55:fe:b0:fd:8f:02:b3:c4:
34:f4:18:61:79:4d:b5:56:92:08:c1:f3:07:64:eb:
0e:3c:3a:d5:94:01:55:63:0e:67:63:19:59:eb:7c:
45:ba:6a:ce:93:30:04:ef:19:18:43:67:81:4c:75:
89:1a:1c:98:2e:93:fd:2f:b8:db:b4:90:47:81:72:
0b:a3:9b:cd:93:99:ea:87:45:c1:1a:58:3a:5b:d4:
6d:9e:02:30:62:c6:97:64:a0:88:da:4e:2d:a8:b1:
45:25:b0:be:3a:08:d3:dd:96:55:73:f5:8e:09:80:
13:42:e8:e6:4c:4d:60:94:96:a9:32:f3:b6:56:2a:
be:c8:08:82:29:03:d8:da:43:ee:6c:66:45:75:fd:
46:57:38:c8:5d:33:ba:a3:db:6e:84:e5:91:e3:71:
26:55:2e:24:71:50:bc:d1:b7:f9:40:9f:97:a4:dd:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CD:99:40:49:A5:0D:28:91:F1:2E:33:3C:F6:BA:E8:57:87:A0:34
X509v3 Authority Key Identifier:
keyid:DF:51:5B:59:15:E8:33:EE:DB:44:4D:19:C3:0A:00:F0:97:81:5A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/31FbWRXoM-7bRE0ZwwoA8JeBWjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/31FbWRXoM-7bRE0ZwwoA8JeBWjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FBEA/AA7E391A6C6B11EB8FEF194BC4F9AE02/DD3109D66C6C11EB92CE744BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.50.0/24
IPv6:
2001:df0:c800::/48
Signature Algorithm: sha256WithRSAEncryption
2e:9c:91:60:fd:a0:a5:d2:1e:f8:fe:d2:76:08:d5:71:3a:3f:
a9:ac:d3:87:4a:18:ab:16:03:74:ac:c0:39:c4:06:54:51:f7:
63:9b:ef:93:61:78:45:ea:86:9f:2f:81:54:55:70:02:68:8e:
9a:d4:36:9d:9a:83:5e:e5:f9:23:38:74:fc:92:7a:76:3a:7a:
63:6a:db:a8:24:18:76:79:e4:ab:c8:15:90:6f:84:82:78:e5:
9f:59:c7:5f:63:aa:43:54:7d:62:6c:d5:16:cd:67:e4:50:b5:
e7:d9:49:2c:96:c2:61:72:5b:2b:75:47:73:4b:71:a9:c8:76:
55:2a:b7:b3:c9:18:0c:e3:36:5d:a2:fa:12:02:31:db:59:78:
b0:10:69:21:54:2d:66:8f:6e:3f:7c:a9:f4:b5:80:0e:53:47:
45:e8:64:0e:2e:1a:4c:d2:e8:5d:df:cd:0f:2e:56:d0:6a:12:
37:e2:a4:07:37:04:7d:00:8a:78:ce:4c:71:6c:96:07:1f:ee:
d6:98:c6:ea:19:af:5f:cd:0f:cc:ce:3e:f0:87:67:4b:b7:ae:
41:10:5f:51:66:d0:ca:6d:98:5f:14:a9:46:bf:fa:f1:5d:f0:
5c:04:2d:ff:f2:ea:0f:1b:df:82:79:cd:a4:60:8f:b5:85:cc:
97:57:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:07:26 2026 by rpki-client