
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
File: 1E1A1DB28C6A11EB91832D52C4F9AE02.roa (raw, json)
Hash identifier: yhbJFifkA6qTdyLv2HsT8tIMPtF/KKmNSVFn1brjPAs=
Subject key identifier: 3B:09:E0:77:73:FF:1A:0F:2A:63:01:16:7D:A4:B5:D8:0D:9C:6E:9D
Certificate issuer: /CN=A915A5E7/serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Certificate serial: 0732
Authority key identifier: AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
Signing time: Tue 14 Jul 2026 23:23:21 +0000
ROA not before: Tue 14 Jul 2026 23:23:21 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139213
IP address blocks: 103.139.248.0/24 maxlen: 24
103.186.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:36:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842 (0x732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A5E7, serialNumber=ACC0119433877F0C742857B8EA520F8DA4ED095A
Validity
Not Before: Jul 14 23:23:21 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a56c4e8-3aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cf:9f:4e:c5:32:08:f2:50:ae:31:11:15:19:
40:31:76:11:80:cb:ce:0e:6a:5f:81:cb:95:49:7d:
6d:b6:12:11:27:73:da:6d:c2:96:3c:f1:b7:58:af:
c3:85:75:32:ca:04:ab:73:0b:3c:c9:1f:83:f6:33:
ed:42:9e:0a:36:86:b2:4e:07:01:5b:52:7b:38:61:
ed:5e:8f:81:4f:a4:11:32:76:b3:02:0e:99:7e:32:
59:90:55:4b:83:f6:c4:20:d8:ff:33:eb:91:7c:56:
7e:2f:d8:61:f0:6e:28:ed:89:fc:c3:3c:e4:b2:0f:
22:c7:00:33:d0:a3:53:4f:da:b5:c6:6a:df:4d:b8:
df:a4:80:67:55:57:70:2a:b5:0b:5a:25:a8:91:4d:
2a:ef:a2:54:fa:da:0a:65:9f:0a:e5:cc:1f:d6:c5:
8a:c7:4f:af:7b:89:34:0d:e4:2d:b2:21:9b:e3:32:
1f:f9:85:67:93:01:e1:4c:a9:e0:f7:76:57:a5:ce:
97:08:e7:92:82:93:19:77:65:25:1e:95:62:1b:be:
dd:67:bb:3f:69:e0:97:d2:4c:df:9a:a7:8b:d2:a5:
e7:a2:25:35:96:57:6a:28:54:7e:75:a5:41:53:55:
8b:62:24:f5:06:89:4b:4c:2a:6f:46:6d:56:a2:e1:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:E0:77:73:FF:1A:0F:2A:63:01:16:7D:A4:B5:D8:0D:9C:6E:9D
X509v3 Authority Key Identifier:
keyid:AC:C0:11:94:33:87:7F:0C:74:28:57:B8:EA:52:0F:8D:A4:ED:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/rMARlDOHfwx0KFe46lIPjaTtCVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMARlDOHfwx0KFe46lIPjaTtCVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A5E7/E959DC768C6811EB87042D51C4F9AE02/1E1A1DB28C6A11EB91832D52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.248.0/24
103.186.235.0/24
Signature Algorithm: sha256WithRSAEncryption
50:96:76:ea:8e:c5:a1:3c:99:76:6e:6b:77:ec:03:8b:23:9f:
ee:f6:67:37:0e:12:89:cf:b5:c1:ca:86:1d:4b:bb:eb:a3:a9:
ec:21:ca:36:88:2a:92:11:db:c7:50:41:02:e3:68:d0:09:46:
f1:b6:70:79:f5:d8:34:4c:05:13:1a:90:2e:2c:39:f3:3b:bb:
a8:47:70:53:89:51:9e:82:d1:d5:22:ea:e6:c6:e0:eb:68:28:
04:b6:0a:61:1d:0c:92:7f:8f:dc:f6:aa:c7:9e:03:9e:54:7f:
bf:b9:2a:28:b0:6d:7f:2e:96:60:a7:ee:36:17:77:1e:c8:a9:
e4:5b:89:dc:42:c7:fb:f3:4a:00:f0:ad:88:99:1b:97:ed:9e:
e3:a6:eb:0a:18:51:ed:72:34:7c:6b:07:ab:ac:30:56:70:29:
46:65:80:2d:c4:a6:0e:67:17:f6:e9:09:1e:5f:df:da:67:4e:
b0:17:2a:2c:f4:4d:33:6a:d4:92:9d:52:24:46:ec:53:bb:74:
5b:21:02:98:97:94:c8:6e:13:52:ff:c9:d9:9c:2b:34:c6:f9:
fc:28:59:f5:1a:b6:2a:87:17:a9:c7:53:e1:21:fe:3c:20:2b:
eb:f3:eb:10:d7:5e:47:67:7a:c9:69:33:b8:f6:a1:b5:75:de:
a1:6b:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:02 2026 by rpki-client