
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa
File: A20DDFE2725911ED8CB4D763C4F9AE02.roa (raw, json)
Hash identifier: a5rkQCdGd6WLgCsLjH9k9RC6TMcBTGsLeQcwPsfq9Ws=
Subject key identifier: 53:81:BE:7F:95:0A:5E:3B:85:E5:C2:D8:37:D9:ED:BA:1A:E7:09:63
Certificate issuer: /CN=A915E77C/serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Certificate serial: 0267
Authority key identifier: 05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:48:32 +0000
ROA not before: Tue 13 Jan 2026 01:21:25 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 63526
IP address blocks: 103.48.160.0/23 maxlen: 23
103.48.160.0/24 maxlen: 24
103.48.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E77C, serialNumber=05037E4CDE44EC6642C4169FA851372D78FBFCAB
Validity
Not Before: Jan 13 01:21:25 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a59530-70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:f5:bb:be:3c:d3:7f:92:91:e1:a5:fb:31:
23:d3:a8:24:0d:26:6e:25:bd:06:5e:2e:aa:c8:dc:
79:e7:2b:1a:11:39:05:2b:30:f9:b9:b5:ff:c0:c4:
a9:84:f1:90:de:ba:0b:4f:51:2d:53:fc:a8:a3:71:
ce:7f:3a:a0:44:43:68:4d:b3:34:22:01:65:83:67:
28:d8:7c:9e:60:64:e9:fb:4a:af:36:b4:25:ea:35:
66:0c:ec:94:39:7b:db:60:05:ae:e8:85:35:25:45:
b1:d0:a1:23:f5:37:98:0a:15:68:b2:27:b9:dd:93:
79:65:81:66:c8:21:7f:f5:2b:34:1d:cf:5e:ca:fd:
8a:96:a3:a9:ca:f7:a1:a5:a8:1b:c6:74:f9:f1:79:
9a:b0:1c:9f:fc:c2:0f:7c:ba:1a:c4:88:94:e6:77:
4a:cb:a2:99:35:a1:92:8f:b7:f1:e6:9a:49:2d:d6:
96:c6:ce:c7:4c:02:e8:12:bc:74:c9:60:0c:96:76:
fa:70:b7:16:87:66:7e:ae:5e:6b:de:21:76:81:f2:
ec:a3:e3:6e:90:49:bb:3f:c6:36:49:79:2c:f0:34:
00:29:69:0e:e5:1a:3b:2b:d1:80:ea:17:04:48:78:
ae:2f:e9:3e:d6:75:ec:47:3d:e5:76:52:65:5d:b6:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:BE:7F:95:0A:5E:3B:85:E5:C2:D8:37:D9:ED:BA:1A:E7:09:63
X509v3 Authority Key Identifier:
keyid:05:03:7E:4C:DE:44:EC:66:42:C4:16:9F:A8:51:37:2D:78:FB:FC:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/BQN-TN5E7GZCxBafqFE3LXj7_Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQN-TN5E7GZCxBafqFE3LXj7_Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E77C/F700A9EC725611ED90211562C4F9AE02/A20DDFE2725911ED8CB4D763C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.48.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:44:68:12:5f:c5:3e:7d:88:c6:0c:be:32:1e:b1:ed:61:ba:
fe:bc:e3:a9:72:24:5b:d2:2c:13:4d:3b:1f:12:9a:e3:5d:c9:
42:b0:ef:17:e5:9b:84:8f:32:5a:9a:84:37:3a:2b:1e:74:dc:
01:e7:9c:54:73:0a:01:fb:ac:19:db:2b:bb:14:78:25:2b:be:
8a:ad:08:df:04:ea:a7:06:38:c8:16:d5:9b:a8:0b:3d:f1:6a:
82:93:e7:99:77:15:e7:c3:f3:16:0b:a9:94:a0:cd:e4:02:a4:
7e:ac:87:ab:83:97:a7:45:34:8c:a1:f7:52:4e:3e:05:23:7d:
ec:a9:ae:56:1c:38:67:7a:fd:b1:8c:23:f2:e1:c7:09:75:99:
c9:1c:95:19:6d:1c:85:bb:3f:69:0b:cb:dd:5c:a1:08:0f:2a:
d2:02:79:bc:ea:3b:33:8c:e5:bf:59:66:7f:f4:cd:fd:69:9f:
92:72:35:b5:61:42:de:bb:8e:87:f3:ad:fc:8d:88:49:9b:6a:
59:bb:a6:98:b1:60:ac:0c:4c:e2:96:9f:43:45:ec:36:f7:eb:
08:ef:06:b9:af:2f:b5:79:59:59:f2:69:62:8f:0e:e6:27:c5:
91:3e:c6:7b:24:e5:b7:c4:7a:08:db:20:db:16:b3:18:40:72:
48:5b:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:41 2026 by rpki-client