
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa
File: 1CD82986C36111E9A37AC46EC4F9AE02.roa (raw, json)
Hash identifier: 79PmiP9NpDAtWC6dqYWk56B1VkuYlkflhPnSmUa7hdQ=
Subject key identifier: D1:B2:E8:F2:7D:ED:41:EA:4F:23:7E:FE:73:67:2D:C0:AB:56:0F:AF
Certificate issuer: /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial: 0E86
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa
Signing time: Wed 22 Jul 2026 18:18:38 +0000
ROA not before: Wed 22 Jul 2026 18:18:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 2
IP address blocks: 103.29.28.0/24 maxlen: 24
103.250.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:18:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3718 (0xe86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Validity
Not Before: Jul 22 18:18:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a61097e-a13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:7c:df:78:1d:c5:39:c1:9a:81:fc:7d:89:
46:60:e6:62:65:8c:b1:1f:bf:fb:b0:66:5b:52:73:
a5:b6:5d:d4:84:31:26:d4:5e:4b:02:b3:54:32:7d:
cf:68:22:82:15:10:5a:90:84:13:2b:66:3b:c1:9c:
5c:ba:f6:ea:6c:6f:03:6a:9d:bf:3d:67:66:4b:d3:
84:19:ef:76:01:6c:61:68:34:17:36:22:c8:4d:49:
5e:b8:7d:f2:84:b7:9d:8c:27:0d:e6:59:f6:fc:bd:
06:47:7b:01:9e:c4:57:25:6d:1a:37:4e:00:3e:61:
e0:8e:36:65:64:e0:52:77:3b:24:c6:59:41:c9:dd:
aa:b3:83:b9:df:84:71:ca:a0:44:5b:90:ca:bd:93:
ca:02:fb:05:9d:3a:dd:94:e0:7d:b4:72:c0:8e:2c:
92:44:f7:71:5c:21:77:99:ba:96:8b:4d:b3:54:c6:
e8:3b:43:cf:d6:b0:be:98:e3:e7:fe:ab:75:9b:38:
15:31:ec:b2:b2:36:53:b5:cc:83:1c:f9:d6:5f:ce:
36:e4:1e:e0:31:b8:5e:eb:b7:f6:f0:76:09:eb:75:
82:71:ff:77:b4:aa:ee:67:1d:39:fd:b8:62:94:22:
c6:7a:97:f3:9a:51:04:1c:51:90:d9:55:37:ec:20:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B2:E8:F2:7D:ED:41:EA:4F:23:7E:FE:73:67:2D:C0:AB:56:0F:AF
X509v3 Authority Key Identifier:
keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1CD82986C36111E9A37AC46EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.29.28.0/24
103.250.31.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d2:2f:58:62:4b:d2:ad:57:4e:bf:6c:5f:53:79:37:66:14:
4d:59:2e:49:11:0f:c7:45:7f:04:72:b9:78:f3:02:25:0d:0a:
86:22:1a:f9:09:a7:82:f7:0c:b9:25:b6:cd:05:60:0c:da:c1:
d0:09:86:5e:12:33:86:38:d0:5a:71:fb:de:11:66:a0:13:c5:
56:5d:c0:58:b0:f5:e0:ee:15:c1:f8:76:54:f2:f6:ee:26:27:
75:2e:01:d4:65:f2:63:26:a7:c9:0a:ff:ca:6f:88:ae:f1:55:
b4:01:3b:6f:40:ac:19:0f:91:3a:89:f7:0d:d4:df:56:13:68:
e9:92:ef:8e:a3:3a:e0:46:f7:95:c6:79:33:12:7a:92:12:70:
3a:be:e6:e0:3d:52:9c:d7:f1:31:01:26:13:25:bd:14:2f:99:
49:95:a6:64:33:5a:6d:d8:de:4e:a5:8e:14:26:08:0f:6a:68:
2a:50:6b:62:13:71:77:fa:e2:c4:a8:23:e7:fb:8c:36:23:99:
77:24:54:96:b2:ee:a9:de:c5:91:5b:09:4b:29:de:50:87:3e:
06:35:29:16:e2:97:aa:dd:2c:d2:e7:89:e1:84:f2:8c:f9:ee:
e0:2b:4f:98:10:71:9b:dd:b4:f0:37:4a:f0:04:a0:f2:3b:c5:
83:99:d2:b6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ1MjkxMTAvBgNVBAUTKEM5OEFGQkI0QkI5QUU5QjFBMjdBM0REM0FENTk1NkIz
NEVEQTlDNjMwHhcNMjYwNzIyMTgxODM4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYxMDk3ZS1hMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrh833gdxTnBmoH8fYlGYOZiZYyxH7/7sGZbUnOltl3UhDEm1F5LArNUMn3P
aCKCFRBakIQTK2Y7wZxcuvbqbG8Dap2/PWdmS9OEGe92AWxhaDQXNiLITUleuH3y
hLedjCcN5ln2/L0GR3sBnsRXJW0aN04APmHgjjZlZOBSdzskxllByd2qs4O534Rx
yqBEW5DKvZPKAvsFnTrdlOB9tHLAjiySRPdxXCF3mbqWi02zVMboO0PP1rC+mOPn
/qt1mzgVMeyysjZTtcyDHPnWX8425B7gMbhe67f28HYJ63WCcf93tKruZx05/bhi
lCLGepfzmlEEHFGQ2VU37CD4eQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNGy6PJ9
7UHqTyN+/nNnLcCrVg+vMB8GA1UdIwQYMBaAFMmK+7S7mumxono9061ZVrNO2pxj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDUyOS8yMENGMkUxNEMz
NjAxMUU5OEE1QzAyNkRDNEY5QUUwMi95WXI3dEx1YTZiR2llajNUclZsV3MwN2Fu
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lZcjd0THVhNmJHaWVqM1RyVmxXczA3YW5HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ1MjkvMjBDRjJFMTRDMzYwMTFFOThBNUMwMjZEQzRGOUFFMDIvMUNEODI5ODZD
MzYxMTFFOUEzN0FDNDZFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZx0cAwQAZ/ofMA0GCSqGSIb3DQEBCwUAA4IBAQAE0i9YYkvSrVdO
v2xfU3k3ZhRNWS5JEQ/HRX8Ecrl48wIlDQqGIhr5CaeC9wy5JbbNBWAM2sHQCYZe
EjOGONBacfveEWagE8VWXcBYsPXg7hXB+HZU8vbuJid1LgHUZfJjJqfJCv/Kb4iu
8VW0ATtvQKwZD5E6ifcN1N9WE2jpku+OozrgRveVxnkzEnqSEnA6vubgPVKc1/Ex
ASYTJb0UL5lJlaZkM1pt2N5OpY4UJggPamgqUGtiE3F3+uLEqCPn+4w2I5l3JFSW
su6p3sWRWwlLKd5Qhz4GNSkW4peq3SzS54nhhPKM+e7gK0+YEHGb3bTwN0rwBKDy
O8WDmdK2
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:28:06 2026 by rpki-client