
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9A859F8A480611EDBC63AD52C4F9AE02.roa
File: 9A859F8A480611EDBC63AD52C4F9AE02.roa (raw, json)
Hash identifier: wF4QZyfLj/lu9oPTV1o0DkfBCR57vW77Xsm6jbQbIuY=
Subject key identifier: F1:92:63:A2:91:ED:2A:25:14:AE:01:96:95:7A:6C:7D:27:62:7C:A8
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 0298
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9A859F8A480611EDBC63AD52C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:31:04 +0000
ROA not before: Thu 23 Oct 2025 03:16:08 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 135330
IP address blocks: 103.15.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Oct 23 03:16:08 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59f28-51b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:8a:52:bc:5f:fd:0b:54:8b:d6:c6:e6:b3:
52:e4:82:a0:38:b6:a4:96:71:ca:db:18:a4:93:f1:
2b:46:dc:c5:e1:46:f4:48:7f:81:e1:8e:18:ca:e2:
f0:b5:1f:4e:e2:0d:62:da:2c:b7:50:82:50:7a:d1:
94:09:ab:e8:ac:1c:97:7d:d2:67:f3:4f:fe:6d:7d:
f3:dd:80:41:4c:58:d2:3a:3b:07:cf:9e:cf:44:a7:
c5:07:39:b0:f6:8a:e7:b2:0a:6a:46:58:38:46:94:
e8:be:fe:6b:c7:c7:0b:2f:7f:e1:c1:88:0d:d8:81:
84:4d:82:28:df:75:07:97:94:85:34:ce:1c:09:bd:
d1:32:91:bd:39:9c:7f:67:40:c1:09:81:83:62:14:
9e:2b:db:d8:97:58:3e:75:e3:c0:5b:90:4f:d0:9d:
65:9c:35:e2:19:6c:4b:ea:59:f0:0e:c0:aa:d3:47:
a5:69:2c:44:3f:cd:8f:79:e0:2e:a6:a9:2b:2c:88:
24:d0:5e:e4:a7:00:1b:78:0d:b4:e5:21:52:20:28:
cb:c3:d5:fe:01:41:e0:2a:c1:32:61:ed:c2:5e:38:
32:ad:f2:27:89:d9:5c:ca:f7:38:04:2f:9b:ac:43:
e2:33:ea:96:cc:4a:ac:ef:7a:6a:45:67:ef:d0:c7:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:92:63:A2:91:ED:2A:25:14:AE:01:96:95:7A:6C:7D:27:62:7C:A8
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/9A859F8A480611EDBC63AD52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.220.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:1d:a5:9a:5c:6e:d1:9c:35:d4:6c:0d:10:ff:7d:92:4b:f2:
98:c4:be:b5:2f:0b:67:a1:b0:11:c8:fc:f9:89:02:a5:fb:f3:
6a:5e:d3:ae:52:ec:9c:17:9b:b5:1a:67:fc:7a:5b:e4:7a:97:
87:93:85:f2:5a:e2:43:aa:3b:14:52:33:be:86:f5:46:12:dc:
3c:d6:58:53:13:9d:d7:e7:93:b2:d9:9b:ac:5b:e0:fb:db:93:
9e:a2:1a:f4:f6:b3:11:9f:96:a0:00:36:bb:9a:93:ec:66:61:
6b:8e:1e:55:aa:d9:bc:5b:f1:35:b2:3c:0f:aa:c8:98:34:63:
9a:dc:d9:c1:9b:fd:2f:e3:bd:a1:f4:42:98:b5:40:97:61:31:
e4:6f:a9:9d:ff:63:e4:45:b4:02:d2:e7:2e:03:9a:d5:7a:e0:
c4:c7:85:a9:3c:3d:d0:17:16:c9:46:b6:49:31:3e:68:b7:4a:
e4:a9:ac:59:c4:ed:4e:6a:17:e0:7f:42:25:14:db:13:1b:a9:
71:2e:84:fe:a9:0c:cc:04:43:9d:38:42:f6:1d:c6:76:de:e1:
e7:eb:b5:66:d6:d1:44:89:3d:2b:77:91:4f:25:be:60:ea:3a:
27:4c:62:85:e6:b2:31:4f:12:cb:27:63:0b:53:bb:59:a1:83:
d5:69:b0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:54 2026 by rpki-client