
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D98D7C21C6411F1B68A335785EE528E.roa
File: 6D98D7C21C6411F1B68A335785EE528E.roa (raw, json)
Hash identifier: p7GvvvhnBiIlq2AFY9FalMi/aIDVDUbfZqCsTS3w2ms=
Subject key identifier: FB:A8:F4:EF:8F:99:ED:76:BA:C2:D1:6B:6C:2F:1F:C3:B7:A6:55:BD
Certificate issuer: /CN=A915B2EC/serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Certificate serial: 06
Authority key identifier: C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D98D7C21C6411F1B68A335785EE528E.roa
Signing time: Tue 10 Mar 2026 09:35:09 +0000
ROA not before: Tue 10 Mar 2026 09:35:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 51847
IP address blocks: 103.172.182.0/24 maxlen: 24
103.172.183.0/24 maxlen: 24
2407:d840:1::/48 maxlen: 48
2407:d840:2::/48 maxlen: 48
2407:d840:3:1::/64 maxlen: 64
2407:d840:50::/44 maxlen: 44
2407:d840:50::/48 maxlen: 48
2407:d840:51::/48 maxlen: 48
2407:d840:52::/48 maxlen: 48
2407:d840:53::/48 maxlen: 48
2407:d840:60::/44 maxlen: 44
2407:d840:60::/48 maxlen: 48
2407:d840:61::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 17 Mar 2026 22:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B2EC, serialNumber=C93438F7DCE1ADB3FFE0E588536FAAB9EFFFEFD7
Validity
Not Before: Mar 10 09:35:09 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69afe5cc-291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3b:3b:f9:91:9b:11:95:7d:d2:51:99:02:f2:
b4:f1:8f:49:ae:54:d2:de:38:c8:92:cf:4e:2e:02:
a0:5a:ad:f9:d4:cd:06:b5:a1:68:f6:7c:cd:1e:80:
54:aa:46:a8:eb:f8:9f:ca:bf:6d:a0:71:d1:21:73:
9e:38:6a:76:db:59:76:ad:7f:8a:3c:b7:0f:b9:8e:
c9:be:34:7d:6b:1b:78:fc:1e:6a:31:b7:88:d5:32:
ce:bf:7b:5a:c0:af:1e:da:3c:b6:a1:36:db:c2:26:
14:e9:78:52:4f:ab:58:74:16:0d:7b:ed:c0:bf:b0:
9c:e3:8b:23:f4:69:38:b7:7d:5b:0c:d8:2c:76:d3:
82:98:5a:96:5d:00:92:e8:15:46:7c:7d:45:08:0c:
83:61:b0:34:a6:50:9d:24:b0:c6:9e:0b:3f:d4:92:
cd:34:97:57:63:e7:40:e8:e0:35:58:a6:af:52:13:
b6:ab:f1:a5:c4:c8:f9:78:74:2b:23:90:71:41:0f:
da:3e:a1:68:e0:3d:7a:fb:ca:37:f4:59:25:ed:f5:
e0:6c:cd:5f:90:00:9e:d6:77:3d:6e:4e:59:aa:60:
c0:20:1d:3e:ce:4f:44:bb:96:0f:5b:7b:6b:e8:25:
b8:37:7b:c2:26:f8:42:dd:82:14:44:3f:a6:4a:8e:
cd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A8:F4:EF:8F:99:ED:76:BA:C2:D1:6B:6C:2F:1F:C3:B7:A6:55:BD
X509v3 Authority Key Identifier:
keyid:C9:34:38:F7:DC:E1:AD:B3:FF:E0:E5:88:53:6F:AA:B9:EF:FF:EF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/yTQ499zhrbP_4OWIU2-que__79c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTQ499zhrbP_4OWIU2-que__79c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/6D98D7C21C6411F1B68A335785EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.182.0/23
IPv6:
2407:d840:1::-2407:d840:2:ffff:ffff:ffff:ffff:ffff
2407:d840:3:1::/64
2407:d840:50::-2407:d840:6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:fb:18:c3:53:8f:41:e6:8b:6e:84:09:fe:37:a5:3f:9b:cb:
78:f1:22:69:b8:27:ce:ac:d1:bf:3a:4a:02:d0:93:38:25:4e:
b8:c0:84:5a:fb:08:2e:32:93:58:45:65:fe:2e:9e:ad:b4:9e:
1c:e1:1b:96:8a:88:89:2b:f6:b2:f4:23:c7:6c:ce:64:ce:42:
cc:1f:d5:e6:07:14:95:7d:19:1e:d2:7f:9c:79:e8:f5:d1:5f:
dc:f3:82:ec:d9:10:1b:01:d6:29:7b:03:07:6f:7a:b8:af:53:
ba:d9:f3:3f:5e:51:f4:44:5f:ed:59:85:bf:a1:e1:45:81:06:
54:69:e3:ff:a8:c9:7e:c1:8f:98:de:c0:09:07:15:8e:f2:c2:
ac:f1:39:49:ba:81:f7:9a:5e:c2:e8:21:75:3c:f2:be:a9:4f:
a9:7b:33:27:07:fb:17:1b:04:92:ba:95:90:74:59:c8:1f:54:
eb:ce:cf:37:24:68:2d:60:56:fd:5f:11:cd:5f:76:2a:68:b1:
0d:34:cd:9a:3f:6d:84:71:cb:06:32:0a:ea:f3:47:c3:81:85:
6e:77:50:8d:06:bf:22:96:5c:bf:ce:9e:bb:6c:6a:e8:cc:cf:
31:a8:0c:e7:58:94:93:8e:ba:1c:4d:3d:4a:f5:cc:be:e1:b4:
b2:6e:38:23
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QjJFQzExMC8GA1UEBRMoQzkzNDM4RjdEQ0UxQURCM0ZGRTBFNTg4NTM2RkFBQjlF
RkZGRUZENzAeFw0yNjAzMTAwOTM1MDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YWZlNWNjLTI5MWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZOzv5kZsRlX3SUZkC8rTxj0muVNLeOMiSz04uAqBarfnUzQa1oWj2fM0egFSq
Rqjr+J/Kv22gcdEhc544anbbWXatf4o8tw+5jsm+NH1rG3j8Hmoxt4jVMs6/e1rA
rx7aPLahNtvCJhTpeFJPq1h0Fg177cC/sJzjiyP0aTi3fVsM2Cx204KYWpZdAJLo
FUZ8fUUIDINhsDSmUJ0ksMaeCz/Uks00l1dj50Do4DVYpq9SE7ar8aXEyPl4dCsj
kHFBD9o+oWjgPXr7yjf0WSXt9eBszV+QAJ7Wdz1uTlmqYMAgHT7OT0S7lg9be2vo
Jbg3e8Im+ELdghREP6ZKjs0bAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQU+6j074+Z
7Xa6wtFrbC8fw7emVb0wHwYDVR0jBBgwFoAUyTQ499zhrbP/4OWIU2+que//79cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMkVDLzg0Mjc1OTU2MkIw
OTExRUM4NTFCOTgwRUM0RjlBRTAyL3lUUTQ5OXpocmJQXzRPV0lVMi1xdWVfXzc5
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVRRNDk5emhyYlBfNE9XSVUyLXF1ZV9fNzljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi82RDk4RDdDMjFD
NjQxMUYxQjY4QTMzNTc4NUVFNTI4RS5yb2EwWgYIKwYBBQUHAQcBAf8ESzBJMAwE
AgABMAYDBAFnrLYwOQQCAAIwMzASAwcAJAfYQAABAwcAJAfYQAACAwkAJAfYQAAD
AAEwEgMHBCQH2EAAUAMHBCQH2EAAYDANBgkqhkiG9w0BAQsFAAOCAQEAnPsYw1OP
QeaLboQJ/jelP5vLePEiabgnzqzRvzpKAtCTOCVOuMCEWvsILjKTWEVl/i6erbSe
HOEbloqIiSv2svQjx2zOZM5CzB/V5gcUlX0ZHtJ/nHno9dFf3POC7NkQGwHWKXsD
B296uK9TutnzP15R9ERf7VmFv6HhRYEGVGnj/6jJfsGPmN7ACQcVjvLCrPE5SbqB
95pewughdTzyvqlPqXszJwf7FxsEkrqVkHRZyB9U687PNyRoLWBW/V8RzV92Kmix
DTTNmj9thHHLBjIK6vNHw4GFbndQjQa/IpZcv86eu2xq6MzPMagM51iUk466HE09
SvXMvuG0sm44Iw==
-----END CERTIFICATE-----
Generated at Wed Mar 11 18:37:50 2026 by rpki-client