
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/165CEF66E60911EB950D930DC4F9AE02.roa
File: 165CEF66E60911EB950D930DC4F9AE02.roa (raw, json)
Hash identifier: xgnifQ1n0Nod3rsinrbUu48rMPS+NaTOxW2NBn8Hcnc=
Subject key identifier: 93:02:E6:8D:BC:56:7B:14:E4:1C:4B:61:1B:5D:45:03:8D:E8:2C:EB
Certificate issuer: /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial: 3687
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/165CEF66E60911EB950D930DC4F9AE02.roa
Signing time: Wed 06 May 2026 15:10:39 +0000
ROA not before: Wed 06 May 2026 15:10:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 211.29.93.0/24 maxlen: 24
211.29.132.0/24 maxlen: 24
211.29.133.0/24 maxlen: 24
211.29.152.0/24 maxlen: 24
211.31.132.0/24 maxlen: 24
211.31.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13959 (0x3687)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Validity
Not Before: May 6 15:10:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69fb59ef-0ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:a1:e2:8a:1d:3b:54:00:8d:89:31:59:24:
8c:70:dd:42:a9:d2:bd:4b:0d:e6:f7:8f:c6:62:b7:
56:0e:3a:63:c1:d1:91:ef:1b:a8:2c:57:7a:55:57:
da:59:b9:81:4c:60:9f:18:6f:81:48:96:c3:5c:b6:
fc:98:64:8b:ff:02:ec:84:0c:e4:d4:3f:86:9c:a9:
42:af:ee:ad:d1:eb:70:74:32:e8:37:b5:29:3e:d2:
60:1b:af:d0:b3:21:91:a4:fb:b3:41:1d:05:96:6c:
eb:bd:73:c1:0d:6c:5f:de:65:d9:78:4b:dd:22:84:
c1:41:37:8c:14:d2:41:50:d9:93:eb:a9:20:64:43:
ac:85:f7:77:87:6f:35:6a:3d:51:d7:db:59:3c:49:
7e:fc:3a:29:49:ca:ad:65:4f:be:02:f8:43:02:0d:
c5:54:b2:c4:10:ec:bf:76:ed:3c:11:29:fa:1a:eb:
c9:a4:7e:72:cc:16:9c:40:10:5b:eb:21:ec:b2:22:
85:3d:c5:24:42:9d:3a:1d:3b:e9:66:e6:2f:e5:42:
80:fc:41:9a:bd:d7:05:98:a7:2f:15:39:fc:a0:06:
0f:b6:5b:b9:ae:fa:f6:95:a3:7c:2c:8c:43:b5:55:
b8:79:cf:ed:0f:1d:c6:38:c7:4b:a6:d0:e9:ba:30:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:E6:8D:BC:56:7B:14:E4:1C:4B:61:1B:5D:45:03:8D:E8:2C:EB
X509v3 Authority Key Identifier:
keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/165CEF66E60911EB950D930DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
211.29.93.0/24
211.29.132.0/23
211.29.152.0/24
211.31.132.0/24
211.31.138.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:0f:3e:cf:9b:5d:43:d6:6d:58:93:16:e3:c7:9c:bc:f3:6c:
1a:27:b0:05:2f:0f:c5:1f:65:b2:b8:cc:cf:16:c5:31:2c:30:
dc:da:e3:4f:3d:03:9f:e7:1f:7d:99:06:19:7b:36:cc:75:18:
19:5c:f6:11:ee:af:46:d6:52:4b:41:27:3a:80:46:6f:82:bf:
1b:8e:48:4a:dc:98:3a:47:c0:71:c3:54:5b:77:c3:9f:f8:2c:
66:80:9f:72:a7:b6:d8:86:e4:de:b2:3d:03:ec:10:3d:0a:ec:
78:3c:3f:04:c3:61:d1:0f:c9:c2:db:8a:a7:6b:c3:64:11:06:
4f:14:ae:48:0d:e1:2a:31:22:14:71:67:4f:61:2f:87:f7:5a:
f4:96:09:cb:dc:21:a9:b5:74:c3:61:f5:22:1b:55:4e:e0:9c:
9d:7f:c1:eb:ac:5d:19:58:8e:c3:e2:0e:b2:79:ed:20:43:ae:
d8:e5:07:a4:f7:17:22:a1:59:ff:59:2a:f8:50:82:2a:63:ae:
38:de:3e:0e:35:06:13:48:58:65:dc:bc:97:d1:f8:e8:40:9c:
07:00:a9:d2:63:d4:01:8f:e0:b0:70:8b:e6:99:da:95:d8:51:
70:e3:57:3d:05:1e:02:63:00:99:11:6d:f2:36:f5:2f:b1:63:
f9:ff:e8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:26 2026 by rpki-client