
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/EF5A16E89F3E11EB852AB17AC4F9AE02.roa
File: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (raw, json)
Hash identifier: yigo59Gar+8S1aiuGB+d0Lm9hAb5K16jebQb9hDYj9o=
Subject key identifier: 15:E1:40:11:8E:0F:57:5F:B2:38:B5:80:8B:BA:C9:FE:69:19:CF:C7
Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial: 07BB
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/EF5A16E89F3E11EB852AB17AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:08:15 +0000
ROA not before: Sat 02 Aug 2025 22:34:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63962
IP address blocks: 103.153.141.0/24 maxlen: 24
103.168.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Validity
Not Before: Aug 2 22:34:12 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a51b3e-3923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:64:01:df:e2:b0:fc:44:51:eb:70:d8:69:
0d:1c:3b:29:fb:8a:6c:8f:44:bc:e4:56:6c:e5:a8:
9e:38:d3:f2:f4:7c:79:ed:d6:18:4d:6e:2c:3a:6c:
33:22:94:97:ed:c1:14:38:9d:d5:2a:a2:7a:6c:c0:
e7:a5:6c:cf:11:25:68:9c:69:3f:30:11:47:f8:6d:
42:36:a4:8d:5e:79:f5:5b:85:e0:40:ba:9a:79:a7:
03:3d:eb:83:eb:9e:e6:94:a3:2e:7c:dc:0f:fc:76:
f3:50:08:be:c8:32:5c:d4:e0:45:31:09:50:52:6c:
57:43:ac:93:3a:c2:6a:15:f3:f3:c2:2d:75:1d:14:
55:07:d1:b4:70:14:17:4e:6e:81:14:35:8c:1d:bc:
d9:f6:de:22:fd:f7:ae:e9:e3:37:9a:a5:56:44:94:
2a:d2:59:86:6c:b5:ed:79:f5:85:89:e8:d3:ca:c1:
66:85:73:3a:d0:8c:4b:60:a1:d2:53:df:33:6d:b3:
8e:ed:3e:70:e3:e6:39:35:ab:4e:fa:9e:4a:ec:77:
4a:82:70:01:fe:aa:5c:6b:32:94:9b:be:48:31:53:
25:f9:85:63:93:2a:78:de:c6:ba:2c:1f:6c:93:45:
dc:ec:12:ba:b0:66:e2:8d:03:28:91:c6:dc:ec:0a:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E1:40:11:8E:0F:57:5F:B2:38:B5:80:8B:BA:C9:FE:69:19:CF:C7
X509v3 Authority Key Identifier:
keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/EF5A16E89F3E11EB852AB17AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.141.0/24
103.168.56.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:84:61:50:97:8d:bc:ef:55:4a:fc:8c:91:d9:07:b1:0d:07:
85:94:97:38:de:91:51:61:9b:97:f8:bb:31:89:9c:62:70:e8:
7c:33:f7:63:b8:f7:63:bb:97:3e:33:3f:95:cf:15:04:f0:b0:
eb:a6:50:22:ca:3b:b3:63:46:ed:92:c5:6d:6d:1f:a0:a8:8b:
9b:89:70:44:ff:fb:c7:59:3a:ce:15:44:de:96:e6:34:82:da:
20:87:a7:29:38:30:97:e8:88:27:b1:b1:94:dc:7b:63:59:e0:
85:a1:d2:d1:22:23:f4:cf:43:2c:9a:77:80:de:a8:f9:87:b7:
c3:0f:27:07:80:dd:f9:b8:08:f2:bd:4d:21:8f:64:fe:b7:09:
fd:a1:93:db:56:c9:64:e4:80:20:e8:b5:f6:ca:89:67:9e:db:
a0:dd:31:60:33:90:3c:ea:d5:a4:20:a6:a6:ab:dd:30:ee:2e:
0f:b7:01:b3:13:46:8a:5f:ce:d8:e6:0c:e9:a8:4e:d3:53:c8:
49:7d:ba:1f:4b:3d:48:0f:db:91:15:f2:5d:c7:38:5a:d4:06:
90:18:46:ce:a6:f2:f9:76:fa:10:f4:ab:00:0b:15:10:e7:79:
2f:3a:14:24:c1:b6:ff:5c:56:5b:14:f7:00:64:f8:d7:e0:c6:
80:97:ad:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:39 2026 by rpki-client