
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/D13F8D3A3C9811F1A7092461A3833773.roa
File: D13F8D3A3C9811F1A7092461A3833773.roa (raw, json)
Hash identifier: Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=
Subject key identifier: 37:A6:D2:86:78:A0:EC:65:2E:4F:64:D7:24:F5:46:45:1E:71:28:9E
Certificate issuer: /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4
Certificate serial: 03
Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/D13F8D3A3C9811F1A7092461A3833773.roa
Signing time: Mon 20 Apr 2026 09:10:47 +0000
ROA not before: Mon 20 Apr 2026 09:10:47 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137448
IP address blocks: 103.146.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl
rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4
Validity
Not Before: Apr 20 09:10:47 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e5ed97-fa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:d4:12:f0:ae:b5:95:29:73:0f:3d:d7:de:
d5:6f:43:ef:98:e8:38:8b:04:cb:14:dc:0a:c7:4e:
b7:3d:4d:fd:f0:aa:e1:c2:b1:86:f0:88:cd:24:16:
f4:34:bc:c9:f9:b0:d8:04:15:ac:31:db:64:c8:87:
24:6a:9e:da:f4:e4:a0:3f:ca:93:90:75:18:ac:de:
f7:46:90:eb:28:c3:45:47:6c:35:70:2c:d6:64:e7:
0e:82:ea:60:cd:c5:a4:24:25:7c:56:3a:14:f0:51:
9f:ad:4a:26:4b:22:85:aa:5c:24:5d:8c:a0:27:44:
30:c8:9f:f4:3d:33:ec:f9:d1:d8:b8:49:b3:07:e1:
1e:0c:7b:33:e4:bb:35:d0:1c:3c:12:aa:43:9e:5d:
d4:95:ec:0d:96:79:ce:c1:be:93:22:ac:6f:04:a7:
c6:71:03:8c:cc:34:43:e5:be:31:e8:4c:5b:f4:b4:
af:48:b1:ce:4b:95:e0:ae:3f:f0:2a:52:39:5e:36:
ae:99:9d:d6:d3:45:b7:bf:e9:c0:7e:1c:8f:86:a9:
2b:b2:25:66:4d:87:f9:1d:d9:6d:9f:01:f7:d7:3b:
57:c9:02:05:f5:da:32:39:ba:a5:f8:13:3e:00:bc:
e3:5a:2a:1f:e4:58:5c:17:51:8b:51:54:2a:5b:41:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A6:D2:86:78:A0:EC:65:2E:4F:64:D7:24:F5:46:45:1E:71:28:9E
X509v3 Authority Key Identifier:
keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/D13F8D3A3C9811F1A7092461A3833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.88.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:03:60:46:da:0f:65:c0:af:18:d4:9f:21:e2:00:04:c7:93:
80:4e:71:f9:00:8c:65:b9:6e:4b:1e:e1:ed:cc:93:e0:48:1c:
6f:1b:e7:88:ea:89:68:20:46:66:8a:d0:52:16:bb:20:d5:91:
a6:d2:44:6f:fd:9d:a3:42:ff:93:b1:64:98:3d:f6:51:ed:da:
8f:85:40:d0:b2:cf:32:e5:a0:e2:91:e3:d4:d1:99:49:20:d2:
60:f3:e5:d1:6e:4d:41:fe:cd:23:6c:bb:da:23:50:44:27:94:
e1:11:b9:f8:8b:69:13:fb:23:78:9c:30:03:7b:ff:41:6a:84:
0f:2b:13:02:cc:c3:54:7e:a0:0c:53:b5:ed:c6:7d:41:21:93:
2e:12:7b:02:71:0f:ae:7a:39:a7:3b:10:69:67:67:a9:66:65:
b1:79:b2:c0:d5:6a:3d:34:c7:13:24:5b:f3:4d:ab:f9:8b:6a:
25:61:2f:04:3e:fa:15:04:23:eb:e8:d9:f8:b0:af:91:b1:b2:
68:59:be:b7:21:46:1d:59:46:d7:78:2c:02:45:6f:e4:f9:a5:
f4:e2:be:76:1f:75:8c:76:1f:b5:d1:b1:6e:af:24:f5:9e:5c:
bc:80:67:16:0b:0e:b0:c6:f1:c7:87:bb:07:10:57:ad:92:dc:
cb:4e:00:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:58 2026 by rpki-client