
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6B7B69D21C6411F1B68A335785EE528E.roa
File: 6B7B69D21C6411F1B68A335785EE528E.roa (raw, json)
Hash identifier: t3WJZ+TqxO9rAjYRJ0g09t3brgTmkG4d6oU027EJ4NU=
Subject key identifier: B1:C0:31:2B:19:F3:AC:97:66:99:53:BC:52:C6:3A:CF:89:68:04:7E
Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial: 02
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6B7B69D21C6411F1B68A335785EE528E.roa
Signing time: Tue 10 Mar 2026 09:35:05 +0000
ROA not before: Tue 10 Mar 2026 09:35:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147293
IP address blocks: 103.172.183.0/24 maxlen: 24
2407:d840:3::/48 maxlen: 48
2407:d840:40::/48 maxlen: 48
2407:d840:41::/48 maxlen: 48
2407:d840:42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Validity
Not Before: Mar 10 09:35:05 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69afe5c9-8857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a3:96:7d:8c:e0:26:28:df:69:22:20:a0:c4:
7b:63:70:3b:60:ad:26:9c:be:4f:26:a8:bf:8d:89:
4d:b6:6d:b4:c5:1b:e9:a2:00:38:21:9f:86:38:23:
53:4b:33:fd:e2:f9:47:2c:e0:26:2a:4b:2d:95:2e:
0b:73:b3:49:a9:48:89:50:55:96:b0:a5:37:1a:d8:
f0:e1:21:d2:05:86:a6:84:a1:99:a0:53:41:b3:b5:
14:77:b4:4a:32:80:6d:28:af:e4:c6:f8:99:0a:b9:
36:fb:d1:59:c5:15:70:ed:73:99:e0:de:05:c6:d5:
54:aa:14:fd:78:a9:3f:ad:6e:66:35:5e:06:27:f8:
65:50:80:57:48:2b:b4:d6:8c:85:de:32:1c:f4:c1:
6e:59:55:5f:c4:c7:71:7e:20:fb:c3:62:b0:3d:ff:
ab:11:71:99:1f:bd:e7:b1:85:bf:b0:f5:9a:73:0b:
b4:2f:40:8e:20:c3:e4:8c:e7:e3:4c:db:51:eb:a8:
a5:b2:42:ae:3d:9e:41:79:bc:5f:d3:21:50:52:7e:
77:ac:10:82:7d:17:83:3f:5f:8f:76:c7:7c:c2:19:
6c:7f:f5:fe:88:8c:5c:5f:f0:08:0e:10:c0:25:50:
19:bf:d9:12:27:69:21:d0:d0:6f:17:d1:38:b3:96:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C0:31:2B:19:F3:AC:97:66:99:53:BC:52:C6:3A:CF:89:68:04:7E
X509v3 Authority Key Identifier:
keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6B7B69D21C6411F1B68A335785EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.183.0/24
IPv6:
2407:d840:3::/48
2407:d840:40::-2407:d840:42:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9e:92:5d:74:43:d1:78:c1:77:6b:df:2c:69:cb:b8:21:e3:ea:
d3:af:a2:a0:84:14:7d:fb:13:18:77:2a:c2:33:34:4f:e7:76:
ee:98:e1:06:5f:80:df:f6:ee:a2:7e:6c:08:71:08:04:46:88:
0b:b6:1a:45:b6:38:43:19:fd:c7:c2:b9:e8:da:24:10:5b:c3:
d5:6c:e1:ba:c9:a4:4f:fa:5a:b6:8e:7f:4f:52:9e:52:1e:56:
53:d4:3e:36:83:56:1f:f0:18:40:02:49:06:03:f4:bf:b6:5e:
51:ab:9a:49:60:bd:14:54:47:bf:f2:d3:45:7c:f0:17:74:dc:
e3:3b:18:f8:e5:a4:4d:b9:53:0d:26:da:46:08:c9:4e:89:3d:
d6:7a:8f:c7:dd:95:b8:66:c2:45:91:65:b5:3d:53:6c:c8:7e:
14:fa:26:8d:66:5d:79:50:55:f1:0a:16:3e:5a:3b:02:d3:03:
84:38:b9:30:f8:a0:8e:4b:14:27:cd:25:56:06:55:7a:67:f6:
ae:35:b5:1e:a2:db:f3:e6:e2:f6:b5:ca:65:99:9b:4d:7b:99:
44:df:92:ed:e5:6c:ce:6f:41:78:ef:c1:f0:6b:c7:4e:ce:e8:
89:30:10:84:fe:e0:ee:c8:26:ed:52:d8:d4:04:6b:a6:ba:4b:
63:7b:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 18:39:10 2026 by rpki-client