
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
File: 69AF571603F211F09BC45354C4F9AE02.roa (raw, json)
Hash identifier: 53Kyy1kva/SQpoiJO7sMdUqe3HQnREKk18bpEmS8HmQ=
Subject key identifier: 06:09:96:7B:55:33:58:DE:6F:25:50:CE:BE:47:5E:32:C7:70:50:7D
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: C5
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:25:53 +0000
ROA not before: Mon 03 Nov 2025 06:51:39 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 7545
IP address blocks: 203.21.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 06:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Nov 3 06:51:39 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59df1-6661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:2d:ca:43:6d:eb:12:35:a7:d3:fc:1b:e1:
ba:5f:39:fb:33:08:b6:72:a6:e5:93:ce:0b:82:97:
5b:f4:0f:f4:a2:76:69:13:88:35:76:24:79:b8:74:
79:d2:a3:b9:21:5f:81:bd:49:b9:f1:ab:53:3c:9f:
7f:7a:02:9c:11:64:ae:e9:02:4c:c8:69:1f:b6:27:
18:ea:be:82:ca:94:a8:d5:69:8d:f5:6e:4c:fd:49:
f5:f8:a5:16:c6:69:a6:da:27:f7:b1:f9:4b:1a:d9:
a0:28:39:ad:c2:9e:31:cb:d1:34:60:98:b1:f9:41:
71:60:98:de:6b:8e:03:e6:df:cc:b0:47:3d:85:53:
7b:cc:c2:ef:c1:73:ec:f0:a2:47:09:e2:56:01:44:
51:da:b9:2c:50:a0:3e:9c:a7:b3:f0:f3:cf:36:1e:
f1:08:43:90:e8:b0:12:3f:f8:f2:00:b5:d6:e5:24:
dc:f8:93:5e:86:12:ec:78:ff:94:1f:06:57:0d:b4:
a5:65:a2:5a:fd:99:59:0d:06:b1:31:43:ae:32:a4:
6a:74:b4:4b:ae:92:02:2a:3a:8e:e9:ec:d4:6d:e0:
ff:57:70:73:c0:7f:c2:bd:9c:11:62:97:ae:cd:34:
5a:8d:79:4a:d3:51:f1:17:70:cb:1d:13:33:a2:a5:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:96:7B:55:33:58:DE:6F:25:50:CE:BE:47:5E:32:C7:70:50:7D
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.21.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:74:e7:d5:64:c6:61:6f:34:bf:a7:3e:43:96:c7:20:d6:16:
d0:58:0b:3a:62:a5:95:21:c8:8f:f4:9a:45:a2:31:59:c9:9f:
5f:05:6c:2d:e4:54:c9:81:78:54:d1:94:5c:5e:36:c3:8a:e8:
0e:ab:5c:ae:e0:ae:6d:92:1f:ac:cb:ea:d2:4e:5d:52:a3:50:
09:26:f8:99:2e:84:82:df:e0:d4:f3:e8:d3:72:bf:49:2a:01:
6c:0e:77:52:31:66:bf:00:ba:7e:5d:41:e1:2a:58:9b:71:db:
75:60:4d:c1:08:b8:eb:7a:93:e7:21:c8:3b:82:d0:e5:8f:11:
44:c2:ae:1d:cc:a3:64:be:ed:fa:f4:75:e9:ed:41:89:a6:1d:
e7:d1:d5:fa:8b:ea:1b:78:d2:02:e6:58:c1:00:ef:c7:c4:34:
4e:20:b0:d2:47:62:3d:7d:06:c3:7e:2c:2b:24:6f:53:ad:90:
90:3a:b9:81:48:3a:e0:f0:1c:ff:39:1f:9c:ab:61:d6:94:69:
10:83:8b:e5:12:7b:49:de:d8:c8:ab:67:93:53:7c:0e:31:ff:
fc:25:dd:0e:93:fd:7c:ec:5b:b2:f6:36:1d:19:b2:b6:4f:bc:
b1:9f:8b:b9:e4:bd:39:f1:cc:1d:97:ae:03:0e:40:42:8f:25:
07:11:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:06 2026 by rpki-client