
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
File: 2F5D72E695EC11F0BF295042C4F9AE02.roa (raw, json)
Hash identifier: IquZlt5lfhcsaKAcex7emT9MmUtyhWwyhAr1ZZXgoW8=
Subject key identifier: 51:48:EF:34:30:1E:36:29:41:BF:89:99:F6:D6:B8:3B:8E:CC:DD:40
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 0270
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
Signing time: Sat 29 Aug 2026 02:54:20 +0000
ROA not before: Sat 29 Aug 2026 02:54:20 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 215607
IP address blocks: 103.135.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Aug 29 02:54:20 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9249dc-88c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:09:99:b5:1e:4a:e2:1c:93:d9:eb:ec:60:c1:
bc:50:9f:b7:38:50:0f:b1:d6:6e:1d:61:e0:dc:b3:
d5:89:16:cc:28:d4:51:d4:e4:b4:06:f5:78:64:fa:
33:e8:aa:3e:d4:54:5a:cd:c3:bd:23:82:0b:87:85:
29:bd:3c:9c:52:a0:21:09:ac:01:f2:11:f4:b6:24:
24:da:f2:96:0d:3e:12:04:42:0a:72:68:50:5b:01:
26:1b:3c:35:b0:d2:3f:87:3d:66:97:36:59:bd:a4:
04:09:d7:74:8c:4b:93:4b:78:0e:e0:07:33:bd:bf:
35:c1:dd:47:6d:a1:15:52:69:59:22:9a:ad:a1:41:
02:d8:20:33:f2:ae:e2:e4:cf:e7:37:ed:09:ca:f1:
69:98:7b:1d:3a:58:c7:94:57:a5:e7:42:82:3d:53:
8b:9d:ba:d8:41:b5:cb:cd:cf:63:e9:f9:a1:88:02:
d1:2f:be:15:c5:54:15:73:3d:80:45:e1:dc:ea:50:
06:ff:cd:e0:f2:15:20:e8:bc:2f:8a:fb:75:90:d5:
55:6d:f2:b9:ad:42:11:26:0e:37:f0:8e:c3:f6:ed:
21:5a:14:b4:08:e7:68:dc:f9:79:2a:8e:95:3e:5d:
32:c4:23:43:26:16:2f:a0:90:ca:02:80:f8:3b:69:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:EF:34:30:1E:36:29:41:BF:89:99:F6:D6:B8:3B:8E:CC:DD:40
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.45.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0c:7e:7d:d3:e8:45:75:05:21:6e:5f:6f:56:06:25:b4:00:
73:20:4b:db:ae:69:3a:67:3b:0d:24:24:a1:e5:84:d7:8b:c5:
a4:ec:47:95:c7:ed:60:a2:5f:bb:f6:80:ba:29:db:2e:db:64:
93:ab:1e:eb:02:7b:72:f9:ee:13:33:7c:b6:b2:fa:a5:4c:14:
ea:85:de:27:ae:46:c2:aa:bf:d2:d4:d3:28:fe:a6:21:2d:fd:
a5:c4:d6:8d:75:e7:52:ed:cd:c4:a3:9c:26:af:f8:24:1c:52:
02:c6:76:7f:14:d5:bf:a5:87:c8:71:f6:7b:c9:97:d6:34:52:
2d:65:a1:5d:a1:40:49:fa:6d:cd:40:a1:7e:8c:05:0f:a4:b6:
b6:6d:78:b9:28:ea:22:5b:6f:b4:8e:9b:60:7f:c3:b9:85:63:
33:5c:29:c5:3d:72:0f:84:5a:d0:f0:d2:ee:9d:5c:5a:e8:18:
7a:ba:4c:d3:a6:09:45:2f:0b:2b:80:44:e0:27:75:5a:e6:a7:
e3:4d:fb:d6:71:a7:c4:4e:74:d1:c1:d6:db:29:ec:71:ef:13:
01:0b:21:c8:1e:31:b1:de:fd:b9:68:82:d1:27:64:1c:39:d0:
8e:d3:b0:8f:4c:81:12:7b:7c:94:77:b0:d4:3f:4a:7a:1b:09:
61:88:c8:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjYwODI5MDI1NDIwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTkyNDlkYy04OGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8gmZtR5K4hyT2evsYMG8UJ+3OFAPsdZuHWHg3LPViRbMKNRR1OS0BvV4ZPoz
6Ko+1FRazcO9I4ILh4UpvTycUqAhCawB8hH0tiQk2vKWDT4SBEIKcmhQWwEmGzw1
sNI/hz1mlzZZvaQECdd0jEuTS3gO4Aczvb81wd1HbaEVUmlZIpqtoUEC2CAz8q7i
5M/nN+0JyvFpmHsdOljHlFel50KCPVOLnbrYQbXLzc9j6fmhiALRL74VxVQVcz2A
ReHc6lAG/83g8hUg6Lwvivt1kNVVbfK5rUIRJg438I7D9u0hWhS0COdo3Pl5Ko6V
Pl0yxCNDJhYvoJDKAoD4O2liXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFFI7zQw
HjYpQb+JmfbWuDuOzN1AMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvMkY1RDcyRTY5
NUVDMTFGMEJGMjk1MDQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4ctMA0GCSqGSIb3DQEBCwUAA4IBAQAVDH590+hFdQUhbl9vVgYl
tABzIEvbrmk6ZzsNJCSh5YTXi8Wk7EeVx+1gol+79oC6Kdsu22STqx7rAnty+e4T
M3y2svqlTBTqhd4nrkbCqr/S1NMo/qYhLf2lxNaNdedS7c3Eo5wmr/gkHFICxnZ/
FNW/pYfIcfZ7yZfWNFItZaFdoUBJ+m3NQKF+jAUPpLa2bXi5KOoiW2+0jptgf8O5
hWMzXCnFPXIPhFrQ8NLunVxa6Bh6ukzTpglFLwsrgETgJ3Va5qfjTfvWcafETnTR
wdbbKexx7xMBCyHIHjGx3v25aILRJ2QcOdCO07CPTIESe3yUd7DUP0p6GwlhiMjs
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:34:06 2026 by rpki-client