
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/2FA6E74C0E0511F0971F7328C4F9AE02.roa
File: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (raw, json)
Hash identifier: tA6KyYClQuKpmTCG003TYGNS9iE1VeJyAErBmU+o/q0=
Subject key identifier: C3:3D:3B:96:23:A0:07:C8:82:B8:47:F9:4F:AF:FC:98:EF:BE:45:B4
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: 0175
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/2FA6E74C0E0511F0971F7328C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:33:09 +0000
ROA not before: Mon 31 Mar 2025 07:53:08 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 103.14.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 373 (0x175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Validity
Not Before: Mar 31 07:53:08 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a59194-21f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:6c:53:05:5e:56:a7:6d:58:0b:c8:6d:af:
46:97:83:48:8a:b6:fd:bf:d4:8f:62:5c:b0:91:1a:
b8:c7:c0:e3:98:83:23:2a:6e:f6:a0:21:4f:2f:c1:
41:8f:6c:69:8b:91:5e:de:2f:1c:a7:ec:b7:9f:92:
5c:d0:33:db:ef:4f:52:09:af:05:3a:49:94:45:30:
bf:ba:64:a2:62:ab:64:6f:d5:7c:ab:21:ea:d3:09:
b1:ae:e0:4c:98:35:b3:a2:00:e7:02:62:cf:63:9f:
c6:c6:df:b6:ad:a8:bd:9b:78:d8:de:23:01:a4:aa:
03:e1:72:a9:f5:99:23:13:c5:a4:66:68:c0:fc:1f:
9c:05:75:31:ae:ff:e2:f2:e7:76:2e:d8:33:d9:a4:
81:4f:37:78:3a:ba:fc:32:66:c3:63:c3:22:1a:d0:
32:6f:d5:0a:2d:8b:03:b2:dc:7f:1d:19:82:14:da:
88:91:c9:d3:03:dd:8f:b3:3e:c3:06:b0:62:e5:80:
e4:95:4d:8f:be:e2:b4:12:9e:30:b3:14:85:1d:80:
9e:d8:ff:91:47:94:00:38:0a:4a:25:61:4c:60:99:
13:d1:40:08:5c:5c:71:4f:2a:af:0c:f3:5b:a3:e1:
51:87:61:4f:5c:ae:6f:4d:6c:b8:96:ad:13:9a:b5:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:3B:96:23:A0:07:C8:82:B8:47:F9:4F:AF:FC:98:EF:BE:45:B4
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/2FA6E74C0E0511F0971F7328C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.92.0/23
Signature Algorithm: sha256WithRSAEncryption
47:05:65:00:18:41:76:c7:a2:ca:9c:61:85:da:7f:f1:42:78:
d4:35:40:a1:54:57:38:a1:1f:e3:6c:88:4a:60:2f:68:cc:6e:
23:4e:e5:14:b3:7c:09:3a:9a:a7:b7:7a:89:1b:34:1c:f5:ae:
44:b7:0d:b1:a7:9d:54:ae:8e:91:d6:52:0f:f4:65:fa:1d:f6:
0a:c6:e3:2e:92:df:a7:81:43:8d:3e:b2:51:f9:48:96:b3:eb:
9e:45:81:f7:3b:5d:b9:9b:1f:0a:1b:08:12:0a:67:81:af:01:
28:b5:ed:55:f7:ef:14:95:c9:61:74:f9:38:da:f0:f8:9d:db:
fe:9f:47:d7:0b:d7:8a:0d:1d:17:0e:50:62:66:c1:6f:50:ec:
41:61:1d:4c:3f:f8:57:34:39:ae:95:e6:a7:bc:6a:aa:5e:dc:
b6:af:b9:79:5e:05:83:8c:9c:50:36:5f:6c:11:85:85:86:88:
0b:67:3f:09:f9:67:2e:94:58:15:fc:8a:b2:d3:dd:ca:4c:9a:
9f:69:a8:3a:e9:51:8a:21:14:87:2f:c4:8d:36:0a:c6:df:3c:
6e:cf:f9:57:8d:b8:42:d5:d4:e1:e4:c6:36:7d:4a:6d:20:8b:
44:d3:ac:d0:40:ca:03:87:d2:ef:80:41:04:c5:86:af:7f:21:
d9:df:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:35:31 2026 by rpki-client