
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
File: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (raw, json)
Hash identifier: vhdqqkcNqmMd48JT0EbRdWraEL2WjKdJfgJwZYRmNdc=
Subject key identifier: EB:EB:F5:0B:9A:9E:EB:C2:2E:BD:1D:25:CA:D2:96:CA:3C:8C:15:00
Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial: 09A7
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:32:44 +0000
ROA not before: Wed 04 Jun 2025 20:46:27 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139605
IP address blocks: 103.151.204.0/23 maxlen: 23
103.151.204.0/24 maxlen: 24
103.151.205.0/24 maxlen: 24
2001:df3:d780::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471 (0x9a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Validity
Not Before: Jun 4 20:46:27 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a407bc-81ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:b6:66:eb:0d:5a:e8:12:56:57:ee:7b:52:
25:da:c0:d0:ab:76:1c:3f:00:9d:d3:79:13:04:63:
db:56:fb:2e:90:b7:60:14:f2:d0:1e:8b:d1:af:40:
51:83:fa:64:36:b5:57:0b:cd:fd:7c:a9:f3:0a:78:
e5:6e:2e:08:6e:cc:a8:07:de:ce:d2:2c:bd:e9:90:
7e:38:2a:4c:c6:12:44:7e:18:6a:10:96:8c:ee:e3:
ca:51:80:76:43:db:c4:02:1b:76:36:3d:8a:8b:10:
31:85:5e:7e:83:83:0b:e8:45:24:c9:5a:cb:f5:01:
e0:23:bd:6d:9c:fc:d4:46:b3:ec:f0:bd:c0:b4:86:
91:cc:9c:c9:0a:39:e3:28:c4:39:48:51:0a:e6:7f:
c7:bb:cb:0c:74:1d:a8:70:11:fc:53:42:19:41:22:
5d:9f:1c:44:18:40:90:13:e2:6a:b2:51:6b:2e:07:
f3:43:aa:f6:b3:ea:4e:ee:00:a4:72:03:4d:50:c1:
a1:4f:23:28:d0:4d:06:87:bd:f2:fe:84:b8:5b:a3:
e2:23:21:01:c2:9d:c3:67:f4:c0:cf:0d:76:01:69:
e7:09:ef:8b:03:d9:4f:6f:f7:04:2e:c4:76:aa:75:
67:af:3b:92:13:8f:45:4e:e6:5b:e5:a5:74:43:cd:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EB:F5:0B:9A:9E:EB:C2:2E:BD:1D:25:CA:D2:96:CA:3C:8C:15:00
X509v3 Authority Key Identifier:
keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.204.0/23
IPv6:
2001:df3:d780::/48
Signature Algorithm: sha256WithRSAEncryption
85:bd:e2:f6:f3:6c:79:ed:a1:92:4c:cc:6f:01:20:18:4a:fe:
91:27:e2:e8:92:8b:4e:c5:32:fa:d6:4b:1d:6b:67:54:5b:ed:
21:55:ef:c1:8f:0a:ea:55:b6:c7:73:e9:2a:41:01:9a:c2:72:
25:51:4c:83:11:08:4a:06:c4:82:cd:3a:00:4f:a3:f4:08:86:
d5:aa:d4:40:e8:ab:29:96:d2:98:84:1c:17:bf:60:8b:b3:1e:
36:4a:d2:fe:dc:53:77:5c:dd:5e:f3:c8:00:b3:ca:a9:04:8c:
21:85:14:fc:53:64:7d:07:ef:21:4f:91:bb:4a:ac:90:dd:ae:
52:b0:35:92:7c:c8:6c:b5:39:28:15:44:32:1d:dc:4b:9f:a0:
22:25:79:b3:5d:bf:c7:f1:7b:8e:3e:a0:d0:2d:50:ac:73:6a:
9c:37:c8:ea:d5:94:b5:d5:f5:ec:35:1f:5c:56:b4:a3:ae:65:
01:75:88:f9:20:df:91:d5:5d:76:28:20:cd:ba:08:f0:af:77:
0f:bb:7e:d2:dd:ea:f3:0d:a5:ad:5d:e9:c8:dc:72:01:de:28:
3d:85:43:ec:73:6a:18:8e:d8:56:a7:2b:f9:63:9a:62:8b:77:
88:9e:3f:03:f8:36:a0:4d:90:70:f9:fb:e4:6f:7b:3c:a8:31:
96:6d:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:36:11 2026 by rpki-client