
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa
File: 4C65E804F68911E98EF88758C4F9AE02.roa (raw, json)
Hash identifier: JQBacF2x5T63HhsHzRmFZSUP6Jo7Ew8Ym1gxKkH+Z6Y=
Subject key identifier: 55:57:37:F9:88:76:4E:A6:F2:20:7C:35:1B:B5:7C:43:A4:4A:86:D2
Certificate issuer: /CN=A915C094/serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Certificate serial: 0D62
Authority key identifier: 4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa
Signing time: Mon 16 Mar 2026 18:23:30 +0000
ROA not before: Mon 16 Mar 2026 18:23:29 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138509
IP address blocks: 103.127.92.0/24 maxlen: 24
103.127.93.0/24 maxlen: 24
2404:1dc0::/32 maxlen: 32
2404:1dc0:300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3426 (0xd62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C094, serialNumber=4CF2DD66DCA42FEAF60C38E7695B03B43E7E7ADB
Validity
Not Before: Mar 16 18:23:29 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69b84aa1-a1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:94:2a:aa:32:19:8f:9e:eb:a0:d8:b8:e1:
d2:5e:b6:b0:f2:10:7b:25:df:29:6c:d3:61:ef:f7:
76:7e:d5:20:db:fa:4f:1c:8d:af:bc:16:73:43:ef:
6e:d4:d0:47:d8:be:7c:af:eb:64:32:10:dc:5f:b9:
09:50:43:d6:82:50:8f:d4:49:10:95:be:95:1c:7f:
7f:5c:5f:af:77:fa:bd:49:2e:e3:65:6b:29:fd:62:
b5:3f:07:d5:9f:85:c3:4d:5e:63:79:ee:a6:c1:8f:
46:3a:2a:89:af:3a:bb:8e:b7:3a:f3:67:5f:35:33:
f5:7e:7d:60:8e:91:43:94:14:e7:45:1c:4f:66:c1:
e5:b0:ff:54:2e:07:0b:97:d2:fc:80:54:a5:30:28:
c3:a8:e8:63:7a:6a:e4:e0:55:fc:a4:12:66:85:02:
65:fe:a1:57:ec:68:a2:a7:1a:c3:16:a1:48:e6:f0:
8d:a2:b1:cf:d1:a5:e5:6a:1f:ca:eb:76:6e:d3:2a:
f3:3e:ca:db:80:00:94:71:86:c9:67:95:78:ce:eb:
34:8d:65:b5:03:bf:f7:6b:35:b8:c5:61:f1:b7:ee:
a4:04:d6:a2:68:cd:59:c6:89:45:89:8a:90:74:4d:
7d:1f:cb:ed:49:81:97:4e:1e:3a:f8:0d:cd:d1:66:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:57:37:F9:88:76:4E:A6:F2:20:7C:35:1B:B5:7C:43:A4:4A:86:D2
X509v3 Authority Key Identifier:
keyid:4C:F2:DD:66:DC:A4:2F:EA:F6:0C:38:E7:69:5B:03:B4:3E:7E:7A:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/TPLdZtykL-r2DDjnaVsDtD5-ets.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPLdZtykL-r2DDjnaVsDtD5-ets.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C094/01F8EB92F68711E9A9FB9C55C4F9AE02/4C65E804F68911E98EF88758C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.127.92.0/23
IPv6:
2404:1dc0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:a5:c3:52:48:23:1f:25:ce:18:e5:2c:c0:16:6e:8f:8c:d5:
c8:81:c1:4f:87:54:e9:31:ac:a5:13:0b:ff:97:a1:73:df:e0:
af:96:31:93:25:8d:da:76:be:9f:19:2e:07:f9:4d:3e:4c:5a:
8d:70:77:9b:6f:e9:31:f4:b9:16:58:49:a9:d4:dc:80:f8:07:
d1:e4:01:a0:94:71:d7:7f:78:4a:f2:c9:02:25:00:d5:7e:9e:
10:04:b9:4e:b7:9a:de:c6:12:b6:55:13:70:80:ca:96:1d:2c:
47:35:43:a4:ec:be:e8:6b:c2:f0:0e:4f:9a:f1:c9:fb:f3:a6:
37:22:ac:3f:4d:42:1a:c4:1e:85:09:59:58:0e:93:da:a5:1c:
b7:23:1f:3b:be:c2:34:c1:d5:ef:c8:df:cd:23:94:77:24:57:
a1:36:44:ff:9c:d5:59:40:ef:20:d5:0d:ce:f5:22:2e:e5:eb:
e7:55:23:69:52:32:fd:7a:9f:bd:e9:58:94:ee:28:00:54:3b:
02:9e:41:8e:dc:be:cd:41:3e:2a:27:20:da:7a:62:3c:42:34:
66:85:91:45:dd:ab:87:77:11:45:5b:19:30:40:46:f7:5d:26:
45:24:1e:2e:7d:00:14:c3:2d:07:49:b6:5c:6c:07:33:05:ad:
ee:d7:59:b3
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUMwOTQxMTAvBgNVBAUTKDRDRjJERDY2RENBNDJGRUFGNjBDMzhFNzY5NUIwM0I0
M0U3RTdBREIwHhcNMjYwMzE2MTgyMzI5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI4NGFhMS1hMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwHuUKqoyGY+e66DYuOHSXraw8hB7Jd8pbNNh7/d2ftUg2/pPHI2vvBZzQ+9u
1NBH2L58r+tkMhDcX7kJUEPWglCP1EkQlb6VHH9/XF+vd/q9SS7jZWsp/WK1PwfV
n4XDTV5jee6mwY9GOiqJrzq7jrc682dfNTP1fn1gjpFDlBTnRRxPZsHlsP9ULgcL
l9L8gFSlMCjDqOhjemrk4FX8pBJmhQJl/qFX7GiipxrDFqFI5vCNorHP0aXlah/K
63Zu0yrzPsrbgACUcYbJZ5V4zus0jWW1A7/3azW4xWHxt+6kBNaiaM1ZxolFiYqQ
dE19H8vtSYGXTh46+A3N0WYK9QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFVXN/mI
dk6m8iB8NRu1fEOkSobSMB8GA1UdIwQYMBaAFEzy3WbcpC/q9gw452lbA7Q+fnrb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA5NC8wMUY4RUI5MkY2
ODcxMUU5QTlGQjlDNTVDNEY5QUUwMi9UUExkWnR5a0wtcjJERGpuYVZzRHRENS1l
dHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RQTGRadHlrTC1yMkREam5hVnNEdEQ1LWV0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUMwOTQvMDFGOEVCOTJGNjg3MTFFOUE5RkI5QzU1QzRGOUFFMDIvNEM2NUU4MDRG
Njg5MTFFOThFRjg4NzU4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ39cMA0EAgACMAcDBQAkBB3AMA0GCSqGSIb3DQEBCwUAA4IBAQAu
pcNSSCMfJc4Y5SzAFm6PjNXIgcFPh1TpMaylEwv/l6Fz3+CvljGTJY3adr6fGS4H
+U0+TFqNcHebb+kx9LkWWEmp1NyA+AfR5AGglHHXf3hK8skCJQDVfp4QBLlOt5re
xhK2VRNwgMqWHSxHNUOk7L7oa8LwDk+a8cn786Y3Iqw/TUIaxB6FCVlYDpPapRy3
Ix87vsI0wdXvyN/NI5R3JFehNkT/nNVZQO8g1Q3O9SIu5evnVSNpUjL9ep+96ViU
7igAVDsCnkGO3L7NQT4qJyDaemI8QjRmhZFF3auHdxFFWxkwQEb3XSZFJB4ufQAU
wy0HSbZcbAczBa3u11mz
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:03:26 2026 by rpki-client