
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/E15C019CB57611F18C0DFE956511F970.roa
File: E15C019CB57611F18C0DFE956511F970.roa (raw, json)
Hash identifier: +pKBDIQSooGppByE00RFzREXO6a9zvDt6SBp/wZq2ww=
Subject key identifier: 06:76:97:D3:4E:E4:57:9F:95:8C:8E:0D:C4:EB:9F:02:CF:51:DB:A3
Certificate issuer: /CN=A91515BC/serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0
Certificate serial: 029F
Authority key identifier: 4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/E15C019CB57611F18C0DFE956511F970.roa
Signing time: Mon 21 Sep 2026 04:42:42 +0000
ROA not before: Mon 21 Sep 2026 04:42:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150162
IP address blocks: 103.39.55.0/24 maxlen: 24
103.39.84.0/23 maxlen: 24
137.59.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl
rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 671 (0x29f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91515BC, serialNumber=4CA890367B1EA49EBCF9402C86200DCD7446B6C0
Validity
Not Before: Sep 21 04:42:42 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6ab0b5c2-ebc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:cd:ad:a9:5f:0d:5f:28:3a:fd:a5:6f:be:
9d:5c:c7:04:71:e4:b3:26:af:ef:87:0d:ff:39:fa:
6e:6b:44:1a:99:c4:9a:9a:e8:3e:e0:f2:c2:c5:07:
ca:6a:7a:b6:7b:70:99:f1:d1:a4:fa:2f:81:36:1c:
17:fa:3f:03:84:d3:d3:db:96:5a:25:d1:ec:15:ef:
c9:33:d6:0f:2e:be:43:a5:ed:2b:86:9e:3d:57:ba:
c5:65:88:e6:6f:20:0e:c3:0f:9d:e6:c8:c5:5d:f6:
11:be:3c:46:17:6b:0f:a6:71:d4:d5:88:50:51:23:
a1:79:3a:33:cf:c1:ad:19:b5:14:b4:65:aa:b3:38:
54:38:ac:f4:63:dc:72:34:88:14:57:34:54:9b:74:
d1:a6:f0:74:32:60:1d:c0:8a:5e:65:e8:ad:ad:89:
44:03:0b:88:fe:f5:64:ce:3e:35:70:4e:b3:71:2e:
25:cd:05:b9:d3:ad:0a:ee:78:e9:74:d4:dc:86:45:
65:e0:c6:3b:d6:9f:49:3c:3c:8f:6d:73:85:13:0c:
ed:8a:12:ea:86:a1:d0:2c:bd:2d:cf:13:53:f4:19:
7a:cb:58:63:66:a9:c6:5c:d3:33:59:f5:1c:d5:21:
25:ba:e2:62:bd:30:f5:40:00:6d:26:d0:0a:ce:86:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:76:97:D3:4E:E4:57:9F:95:8C:8E:0D:C4:EB:9F:02:CF:51:DB:A3
X509v3 Authority Key Identifier:
keyid:4C:A8:90:36:7B:1E:A4:9E:BC:F9:40:2C:86:20:0D:CD:74:46:B6:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/TKiQNnsepJ68-UAshiANzXRGtsA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TKiQNnsepJ68-UAshiANzXRGtsA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91515BC/164D92B2C47111EDA9C5CB60C4F9AE02/E15C019CB57611F18C0DFE956511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.55.0/24
103.39.84.0/23
137.59.199.0/24
Signature Algorithm: sha256WithRSAEncryption
94:01:9d:a9:73:eb:b4:50:33:9e:ac:30:37:ad:4e:f2:9b:03:
0a:a1:e2:e8:1c:56:a7:13:43:3e:4f:97:0d:7e:5a:04:f8:b6:
e4:e7:ff:c2:8a:cc:92:59:50:da:8d:d4:12:7b:ca:5c:a3:a4:
22:a9:e7:1c:64:0b:1a:1b:c8:77:24:ab:37:8b:8b:15:1e:e6:
07:b4:17:1a:76:75:9b:1a:cd:85:ab:51:37:95:1a:d6:31:ac:
82:cb:f5:01:92:95:e8:7e:f7:bb:bf:78:93:7f:04:16:46:73:
2e:8b:ec:55:a0:44:67:8a:5a:7a:54:c0:3c:04:04:96:ab:94:
e2:21:82:04:8b:30:ed:97:36:7d:f2:e5:a2:99:22:a0:7c:43:
7c:e5:37:1e:8b:dc:31:1b:20:92:f2:74:a3:66:05:a7:4c:b2:
ec:bd:c3:8c:a4:b9:5a:0e:2b:b4:4b:0d:2d:fe:34:23:3b:f6:
00:c3:5e:eb:ed:6a:22:03:e5:e4:7b:2f:28:e8:68:45:8d:3c:
e5:5b:dd:ef:0e:a0:08:72:75:7b:3f:ab:f0:3a:cc:62:c7:34:
1f:ec:b5:5d:93:09:7c:e7:99:d5:38:cc:3f:67:fb:b5:f1:ba:
54:00:c4:b4:3b:85:96:04:88:ce:d1:ec:c6:54:12:b7:0c:aa:
7f:bd:52:3a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE1QkMxMTAvBgNVBAUTKDRDQTg5MDM2N0IxRUE0OUVCQ0Y5NDAyQzg2MjAwRENE
NzQ0NkI2QzAwHhcNMjYwOTIxMDQ0MjQyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwYjVjMi1lYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcHNralfDV8oOv2lb76dXMcEceSzJq/vhw3/Ofpua0QamcSamug+4PLCxQfK
anq2e3CZ8dGk+i+BNhwX+j8DhNPT25ZaJdHsFe/JM9YPLr5Dpe0rhp49V7rFZYjm
byAOww+d5sjFXfYRvjxGF2sPpnHU1YhQUSOheTozz8GtGbUUtGWqszhUOKz0Y9xy
NIgUVzRUm3TRpvB0MmAdwIpeZeitrYlEAwuI/vVkzj41cE6zcS4lzQW5060K7njp
dNTchkVl4MY71p9JPDyPbXOFEwztihLqhqHQLL0tzxNT9Bl6y1hjZqnGXNMzWfUc
1SEluuJivTD1QABtJtAKzoaeoQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAZ2l9NO
5FeflYyODcTrnwLPUdujMB8GA1UdIwQYMBaAFEyokDZ7HqSevPlALIYgDc10RrbA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTVCQy8xNjREOTJCMkM0
NzExMUVEQTlDNUNCNjBDNEY5QUUwMi9US2lRTm5zZXBKNjgtVUFzaGlBTnpYUkd0
c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLaVFObnNlcEo2OC1VQXNoaUFOelhSR3RzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTE1QkMvMTY0RDkyQjJDNDcxMTFFREE5QzVDQjYwQzRGOUFFMDIvRTE1QzAxOUNC
NTc2MTFGMThDMERGRTk1NjUxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAZyc3AwQBZydUAwQAiTvHMA0GCSqGSIb3DQEBCwUAA4IBAQCUAZ2p
c+u0UDOerDA3rU7ymwMKoeLoHFanE0M+T5cNfloE+Lbk5//CisySWVDajdQSe8pc
o6QiqeccZAsaG8h3JKs3i4sVHuYHtBcadnWbGs2Fq1E3lRrWMayCy/UBkpXofve7
v3iTfwQWRnMui+xVoERnilp6VMA8BASWq5TiIYIEizDtlzZ98uWimSKgfEN85Tce
i9wxGyCS8nSjZgWnTLLsvcOMpLlaDiu0Sw0t/jQjO/YAw17r7WoiA+Xkey8o6GhF
jTzlW93vDqAIcnV7P6vwOsxixzQf7LVdkwl855nVOMw/Z/u18bpUAMS0O4WWBIjO
0ezGVBK3DKp/vVI6
-----END CERTIFICATE-----
Generated at Sun Oct 4 23:17:36 2026 by rpki-client