
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/5822028E51F811EAB221F834C4F9AE02.roa
File: 5822028E51F811EAB221F834C4F9AE02.roa (raw, json)
Hash identifier: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=
Subject key identifier: 56:DC:7D:7A:8F:90:52:E3:E1:7E:8D:79:21:BF:BD:F1:29:A2:7A:1D
Certificate issuer: /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial: 0ED5
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/5822028E51F811EAB221F834C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:05:04 +0000
ROA not before: Thu 04 Dec 2025 17:19:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133164
IP address blocks: 103.231.251.0/24 maxlen: 24
103.232.28.0/23 maxlen: 23
103.253.105.0/24 maxlen: 24
2405:d3c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3797 (0xed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Validity
Not Before: Dec 4 17:19:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a58b00-79f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:f9:6e:6e:c1:3e:a1:90:2d:87:08:dd:01:
a9:d3:a8:c9:9f:24:bd:64:df:25:76:00:18:9a:64:
a3:23:52:8f:bc:5a:ca:09:26:f1:f3:b4:11:12:05:
b4:1b:1f:d4:52:85:77:3a:1e:2f:e1:26:e1:1d:79:
f0:03:74:4d:8f:6b:a3:1e:c6:0e:16:45:68:f6:57:
54:1a:cf:3d:c4:7f:d8:d4:57:04:df:a1:e5:d9:0a:
b7:ac:39:3c:6e:9e:2c:94:e1:c1:d7:34:4b:e8:7f:
cc:c7:c5:87:43:42:c8:ad:13:83:00:7c:dc:f6:3a:
21:c3:1e:05:64:22:90:43:3f:0e:fc:de:62:84:d3:
23:f3:80:c0:ed:d7:76:5f:d4:78:d7:9f:b1:99:7b:
60:aa:3a:17:2d:ea:00:2f:5d:a0:76:c5:a8:1b:1b:
a1:3f:96:02:6c:43:09:a8:1c:19:97:4e:62:6b:2a:
00:c4:45:c3:3a:4f:5f:b4:41:b4:83:4a:8a:8e:ef:
25:fb:fe:d4:49:24:c5:e6:95:43:57:24:af:6d:82:
39:6b:d7:10:0e:84:ea:7b:2f:f1:60:80:1f:20:87:
d8:7c:46:d5:14:e2:5a:e6:f2:36:fd:89:43:2a:3e:
ef:fd:a3:82:5d:fb:8b:70:36:6a:d1:7b:da:96:7c:
36:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DC:7D:7A:8F:90:52:E3:E1:7E:8D:79:21:BF:BD:F1:29:A2:7A:1D
X509v3 Authority Key Identifier:
keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/5822028E51F811EAB221F834C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.231.251.0/24
103.232.28.0/23
103.253.105.0/24
IPv6:
2405:d3c0::/32
Signature Algorithm: sha256WithRSAEncryption
d8:3a:ff:59:f3:5d:e6:ea:f6:cd:1a:d2:fe:d4:ef:8f:60:e5:
3f:b2:a6:86:c8:31:78:f1:a8:73:68:e8:d4:3e:0d:80:81:51:
22:aa:be:ea:5a:53:42:57:07:6d:74:0f:21:a2:87:11:e0:a7:
6d:0e:49:07:14:75:74:b1:57:e9:62:ff:f9:05:63:17:df:30:
e1:7d:86:0b:da:8a:de:aa:fb:56:16:a4:b8:33:1e:84:ef:a9:
5a:4b:2c:df:d3:9c:ee:bf:31:5a:dc:af:b1:b5:fc:73:b2:3b:
2d:e8:3a:07:1b:64:4b:bb:a9:8b:47:7c:ee:5a:87:82:d7:79:
4f:ff:18:50:dd:4f:83:be:95:49:80:14:a3:f3:7c:a9:96:10:
fb:12:44:27:59:1a:62:90:44:23:cf:ea:fd:8f:d3:1a:90:b5:
ad:96:32:19:9f:ae:71:af:89:fd:db:63:75:92:1b:ee:ba:43:
50:80:c2:3c:cb:3c:69:a0:9f:03:d9:23:e2:7f:04:b8:97:e4:
0f:c7:93:56:89:08:9c:75:30:a3:81:02:ba:4e:ee:31:c0:a3:
90:b5:e8:fc:a4:3f:fd:92:04:c7:f3:0c:14:ce:73:89:7c:63:
36:33:64:d3:45:76:80:2a:d3:be:9f:f0:3b:94:f1:72:88:61:
87:50:0f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:36:50 2026 by rpki-client