
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/86998830806F11EF91F9E57CC4F9AE02.roa
File: 86998830806F11EF91F9E57CC4F9AE02.roa (raw, json)
Hash identifier: 1GRip7NQnd6QQ1qm7v8jCcLgM1fnAudwCzVQRzqvkLc=
Subject key identifier: 69:9F:B4:E4:56:5E:ED:8D:3E:15:95:9E:C4:9A:B1:E9:1E:40:EF:01
Certificate issuer: /CN=A915C645/serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Certificate serial: 011C
Authority key identifier: CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/86998830806F11EF91F9E57CC4F9AE02.roa
Signing time: Wed 11 Mar 2026 05:44:54 +0000
ROA not before: Wed 11 Mar 2026 05:44:54 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132722
IP address blocks: 103.19.100.0/24 maxlen: 24
103.19.101.0/24 maxlen: 24
103.19.102.0/24 maxlen: 24
103.19.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C645, serialNumber=CB0C330E3837948FE5DDFA604732775D4B0CF814
Validity
Not Before: Mar 11 05:44:54 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b10155-57b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:73:ec:ce:dc:f2:01:5f:d6:c2:be:91:4c:
bb:a9:90:e8:fa:a5:72:fc:f6:e0:10:35:c6:89:b3:
b2:be:f1:2f:48:9a:90:d4:87:3c:8b:57:11:78:3c:
7c:d0:1f:14:89:0c:09:57:3f:e5:72:79:bc:81:ed:
80:ac:02:0c:b0:c3:4d:ce:5b:d8:ff:33:dd:3e:ad:
83:ee:b3:dc:ed:7b:98:e7:bc:ab:cc:dd:ad:0b:1f:
fa:15:c1:5f:19:95:7e:5d:93:ec:94:84:f9:88:c8:
2e:28:af:b2:e7:4a:4d:a0:33:8a:45:b5:14:cf:d9:
59:2e:0c:6b:ef:ed:9e:86:a0:f2:55:04:a1:e5:0a:
7a:bc:75:cd:05:6c:94:7c:6c:e9:42:2d:53:65:bb:
a9:3c:ec:77:62:4e:ad:9f:ef:81:2a:0a:90:28:81:
39:7c:ed:21:b4:d3:55:c5:8a:b9:a3:75:5d:2f:f8:
8f:c5:29:c6:28:25:a0:eb:4c:2a:94:4d:31:f0:23:
ec:6a:42:2f:74:e8:41:a1:05:31:30:cf:6e:cb:a1:
2c:e7:59:c0:9e:e1:07:86:41:f3:33:37:3f:b1:51:
f0:22:2b:f4:30:38:7e:45:e3:71:88:17:a8:59:1e:
61:94:b2:38:73:a2:44:c1:9e:1d:bc:2b:2f:0c:b7:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9F:B4:E4:56:5E:ED:8D:3E:15:95:9E:C4:9A:B1:E9:1E:40:EF:01
X509v3 Authority Key Identifier:
keyid:CB:0C:33:0E:38:37:94:8F:E5:DD:FA:60:47:32:77:5D:4B:0C:F8:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ywwzDjg3lI_l3fpgRzJ3XUsM-BQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C645/1EEEBD22806F11EF8B45D779C4F9AE02/86998830806F11EF91F9E57CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.19.100.0/22
Signature Algorithm: sha256WithRSAEncryption
69:62:b1:d3:e7:8b:38:37:72:7b:3f:8e:ad:9a:a8:12:da:f9:
59:4e:5a:d4:31:80:10:80:7e:15:1d:4c:76:05:26:26:42:39:
04:ef:97:67:80:28:2f:48:ce:4a:37:6e:ad:95:59:ec:e6:51:
af:9a:44:aa:bf:a7:07:d2:39:3c:11:a7:df:85:e0:1d:f5:14:
03:1c:34:8c:f0:ee:65:3d:81:a8:e0:00:d8:91:70:dd:7e:fe:
66:2e:4f:a9:06:be:76:1e:2b:ad:6d:b0:a0:be:8c:9b:3e:8d:
09:80:95:be:29:d1:81:81:17:f1:a9:23:36:15:03:88:ed:82:
3e:52:f3:e8:e0:62:98:aa:f6:dc:c8:f4:e2:54:28:46:83:54:
36:67:cc:b4:ac:8a:46:3b:fe:68:e2:12:ef:50:68:89:7b:3d:
c3:b2:eb:e0:c6:5f:1b:92:85:7c:c3:75:ee:91:e3:fb:b8:a8:
df:ba:75:f9:a1:58:ab:5c:50:42:bc:05:1d:b0:8e:ea:87:30:
85:7e:78:1e:d1:9e:26:a7:a3:07:e7:fb:a4:34:11:40:05:99:
52:6e:ad:00:dc:65:2c:78:0c:11:d5:a5:02:9c:d4:0d:1a:8c:
ee:b7:35:78:85:5e:ef:e6:0c:5c:39:40:71:16:c3:0d:74:50:
1d:1f:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:38:29 2026 by rpki-client