
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
File: 10C5553891FB11EFB901C22CC4F9AE02.roa (raw, json)
Hash identifier: cCamf8LGF/zwpiuCWDAVZEFXfaSW8OLEYpZoSCto6QI=
Subject key identifier: C9:FC:DB:C6:0D:52:5E:77:A5:5E:7E:96:FC:EF:69:12:05:79:3D:5F
Certificate issuer: /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Certificate serial: 010E
Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:12:27 +0000
ROA not before: Sat 17 May 2025 06:39:03 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 24440
IP address blocks: 103.150.105.0/24 maxlen: 24
202.70.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 05:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 270 (0x10e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE
Validity
Not Before: May 17 06:39:03 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a58cbb-43af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:72:5b:78:82:9c:51:da:8b:b7:13:65:bc:e5:
9a:cd:5c:da:2f:a1:cb:3f:ed:5b:0f:82:a5:b4:1c:
b5:45:e3:46:d5:6f:29:02:ef:01:bf:69:ef:2d:62:
23:dd:95:72:04:f9:2f:ba:b7:0b:d0:7f:f7:b2:92:
98:ff:2a:30:9e:c9:7b:d9:fe:91:28:6b:80:35:8b:
79:f0:dd:40:c1:ac:65:43:76:2f:8d:ba:45:58:82:
2d:8c:36:d5:d9:2b:ef:e2:4f:ae:31:96:2b:d8:e6:
74:e5:48:44:4c:e7:42:43:87:15:e1:af:6d:20:a2:
e8:5f:c0:4b:a9:55:3e:80:0a:df:8d:5b:4c:21:5e:
17:93:15:4a:c7:e3:75:7d:83:f0:6e:1c:62:77:8e:
e9:1d:be:28:05:f4:17:88:ab:ca:87:1d:23:81:01:
79:b9:c1:bc:2a:37:4b:78:02:a8:a0:58:44:6b:24:
26:4d:56:0c:f7:07:85:e5:ea:c5:7e:4d:53:b4:e7:
56:e1:ba:3c:a5:f2:cd:8e:75:78:08:ac:30:8d:9c:
95:58:eb:d9:03:bc:a4:0e:9a:53:79:96:0c:61:de:
ab:c1:4f:9f:39:b3:97:7e:09:ba:eb:25:60:01:a0:
05:28:0b:5c:1b:8c:36:7a:ce:6a:23:c0:2d:6c:31:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:DB:C6:0D:52:5E:77:A5:5E:7E:96:FC:EF:69:12:05:79:3D:5F
X509v3 Authority Key Identifier:
keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/10C5553891FB11EFB901C22CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.105.0/24
202.70.139.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9c:95:0d:4d:70:da:75:d2:7e:35:da:cf:c1:1f:d3:2e:a8:
37:e7:c5:06:76:2f:a3:40:b0:8b:95:f3:87:81:97:03:70:1a:
80:c8:0f:b3:77:e9:c2:c4:b6:c8:2b:aa:a3:bc:c1:de:87:be:
2f:4c:ed:c3:d8:bb:f0:fa:35:78:6d:31:cf:fe:95:d2:d3:96:
30:5d:3c:be:fd:b4:62:fe:da:66:b7:70:66:6d:df:42:16:af:
b0:2f:0a:6b:13:86:30:2b:ec:12:c1:d1:52:05:eb:7d:7e:4b:
a9:fa:e2:cf:fe:df:3a:8f:82:1d:ec:f4:4b:19:07:c8:ab:c2:
45:9c:3e:56:30:c1:fa:6e:00:2f:ae:cf:d2:98:bd:37:82:74:
39:d7:1b:82:1b:d2:93:a9:6e:6a:fa:9c:7a:69:8f:b3:d5:ae:
3f:35:79:4c:6a:ba:64:89:59:54:e4:0e:f8:ab:91:83:68:73:
cf:b2:90:40:22:8f:11:6e:e8:33:b0:84:7f:5f:f3:68:5d:26:
6b:c8:99:af:67:cc:c0:f6:ce:a2:b8:8e:29:fc:a3:58:47:37:
4b:ba:16:04:03:b2:d4:cc:91:b0:7a:75:b2:d5:e5:88:b8:d4:
02:c3:64:07:eb:2a:37:d6:81:d1:c2:a1:2b:ed:c5:4f:31:9a:
39:a4:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:24:48 2026 by rpki-client