
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
File: EDB5F114A63711EF89F3B833C4F9AE02.roa (raw, json)
Hash identifier: nrDtqZzOKVXo2gMciyi4gICGgYqAvv6VbbsJk7cKje8=
Subject key identifier: 10:B3:52:37:24:94:36:7E:E0:1F:3F:3C:91:98:16:B1:FE:6B:63:2F
Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial: 2321
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:48:58 +0000
ROA not before: Mon 02 Feb 2026 16:13:27 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.205.76.0/24 maxlen: 24
103.205.77.0/24 maxlen: 24
103.205.78.0/24 maxlen: 24
103.205.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8993 (0x2321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E47C, serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Validity
Not Before: Feb 2 16:13:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47c0a-242c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:fc:87:a1:a1:43:58:1e:6c:b8:8c:7c:12:
ff:b2:69:a5:2b:0a:bc:b8:97:5f:6b:1a:44:89:94:
9b:43:eb:5e:6a:e6:2e:d2:bf:95:41:ed:5a:32:52:
12:3e:1e:8f:7b:73:22:bf:01:90:28:5b:05:79:2d:
d4:64:90:ec:25:f6:de:18:77:c0:f8:18:97:6d:23:
02:42:cd:de:70:fb:54:c6:83:bd:3d:42:94:fc:e9:
8c:d6:b1:80:dc:d9:64:4f:8c:a3:db:70:2d:6f:33:
81:39:0f:2c:48:5f:12:54:b8:4a:50:e7:14:f2:ef:
6d:62:d5:3c:9d:32:d7:2e:91:3a:26:5d:ed:44:3e:
ac:28:3d:0c:9b:a8:a4:6f:b4:91:84:0b:f8:1e:1f:
8f:e3:5e:f0:fe:86:b8:0a:fd:e8:c7:6f:70:f7:5d:
af:1e:03:0f:4f:ba:10:ca:c2:3c:a2:ea:74:6f:7e:
52:bd:97:c4:14:62:81:84:3e:7f:99:18:23:9c:2f:
b5:19:51:1a:7c:e7:ba:2e:ff:9b:9e:82:a8:b4:6b:
3f:74:79:d1:eb:98:4f:b1:e7:98:73:02:f9:c2:ee:
e8:77:ac:d5:c3:58:74:74:05:a5:3d:76:c8:13:d4:
c5:60:68:61:94:e9:9c:65:31:2a:6b:1e:b1:42:0e:
ce:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B3:52:37:24:94:36:7E:E0:1F:3F:3C:91:98:16:B1:FE:6B:63:2F
X509v3 Authority Key Identifier:
keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.205.76.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:c9:4b:73:2c:80:01:fc:a5:ed:0d:e0:b2:3a:fd:f3:49:e7:
5b:b0:70:75:54:d5:67:89:2c:7a:54:86:a3:18:e1:c1:fd:a3:
e5:7c:6f:90:1b:0b:a4:4e:52:7d:39:d8:10:46:d6:7a:f2:27:
42:ff:c1:7f:5e:10:0d:50:88:e6:ba:49:f3:d8:7c:3e:cb:22:
e4:f2:a0:80:5f:12:d0:15:06:6b:31:08:af:f3:cb:2a:28:b4:
82:d5:b0:8e:27:74:c1:25:7c:7d:77:58:a4:ab:0a:6c:60:e5:
e7:49:ec:fb:4b:84:4e:39:4b:21:3f:8e:b0:69:05:c6:fe:c6:
8a:de:5d:ed:4f:e9:df:df:b9:3d:19:42:58:f8:14:87:96:d5:
70:5e:b9:53:be:df:d6:1e:17:e3:26:11:fb:de:b8:83:26:06:
ad:6a:a8:9e:42:25:ae:b3:1f:bf:81:26:28:bc:08:b5:86:04:
db:7a:29:e5:36:c4:62:4a:25:2a:ab:c1:34:a2:e9:2a:8a:ec:
75:60:17:e6:8a:20:4d:4f:b4:17:5b:e2:ad:5f:32:5a:9f:22:
60:d5:d0:36:69:ec:f4:39:79:72:31:a4:42:71:01:6d:eb:35:
00:e3:ed:91:2c:6a:07:2f:cf:a3:d8:b4:80:36:c3:a6:c7:81:
9f:70:b3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:33 2026 by rpki-client