
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
File: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (raw, json)
Hash identifier: ajdGzJbwz5TOYdIi82plxkghmo/zXY3H1Me9aI3spR8=
Subject key identifier: 14:10:75:8B:8E:4E:11:0C:F9:B9:62:F7:7A:8E:10:51:76:3A:23:54
Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Certificate serial: F1
Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:00:25 +0000
ROA not before: Tue 03 Jun 2025 07:38:00 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132839
IP address blocks: 45.117.192.0/22 maxlen: 24
103.57.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 241 (0xf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E
Validity
Not Before: Jun 3 07:38:00 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a589e9-711e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:29:de:5e:e3:2a:1a:90:fb:a6:83:fe:0b:85:
7b:c2:89:34:88:19:56:83:35:0e:be:38:e9:7a:89:
b2:92:d9:50:5f:07:0b:85:c2:94:c9:5a:26:48:04:
04:97:f5:47:59:b9:7e:4c:01:38:65:06:75:a4:43:
cc:36:ae:1c:cf:a8:5d:61:41:a2:06:eb:99:97:a8:
42:53:1e:25:77:67:9c:41:40:a8:38:cf:0c:ca:7e:
e5:fb:ed:01:c6:d1:ae:05:b2:f8:ad:c6:b3:fa:81:
51:29:29:89:b4:fe:d8:81:80:39:ce:7c:a9:6d:83:
81:15:93:6e:c0:bb:53:77:86:e9:0d:59:7d:02:d0:
07:da:95:93:73:79:0f:b1:bd:7f:1e:26:fa:73:93:
a3:6d:16:23:c0:46:4c:e8:1d:19:7e:d0:72:83:07:
36:f6:80:f6:ed:4e:86:72:ed:c2:a2:57:a3:1e:a6:
01:74:a0:96:77:c3:42:4a:c5:7a:e0:9f:f2:e6:82:
9b:28:84:45:f4:59:f6:d0:fd:f4:60:d0:5c:27:96:
6e:14:e9:9b:86:a2:9d:e0:ec:ad:5b:ba:02:e5:f5:
41:81:17:e7:6d:b3:e8:da:ba:8d:11:b2:8b:be:49:
9f:6b:fa:76:2f:27:9b:8a:bd:87:83:86:b0:f1:92:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:10:75:8B:8E:4E:11:0C:F9:B9:62:F7:7A:8E:10:51:76:3A:23:54
X509v3 Authority Key Identifier:
keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/50B93FA8B5EE11EF9AC9D812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.192.0/22
103.57.228.0/22
Signature Algorithm: sha256WithRSAEncryption
63:33:fe:f8:ee:43:92:bc:9b:52:33:39:29:1d:09:80:d9:45:
69:89:74:30:f6:41:37:18:9d:86:c2:85:92:a2:9c:4a:69:4b:
8c:ca:11:9a:23:fe:05:39:78:ff:98:90:26:82:dc:f4:27:2d:
6f:e2:ef:f0:f1:06:59:06:2e:90:11:9f:d5:7e:1b:e4:65:80:
2c:5a:50:fa:44:6e:8c:39:4b:34:71:c1:ee:96:4a:c9:2a:74:
78:80:46:4f:5c:4a:17:e4:5a:21:a9:ef:e8:1d:ae:e8:78:41:
ca:b0:53:0c:8c:8f:c4:f1:7b:24:81:fd:1c:90:e2:97:a2:e8:
ad:3d:2f:ce:5d:63:95:71:c0:37:d1:30:a5:35:c6:f0:5b:24:
10:83:d7:3e:75:a8:0a:36:72:b9:62:13:7e:f4:98:a9:6d:20:
55:b2:0b:90:b9:d0:03:bd:be:22:a2:bb:f1:29:4f:69:d5:08:
33:73:a5:3c:94:e5:88:31:7b:29:2d:bf:37:58:86:ed:3f:54:
71:56:36:43:24:be:55:2b:eb:82:98:20:d2:f9:cf:ca:50:35:
56:24:f6:ca:d2:4e:7e:9b:9b:30:a0:3f:5a:2e:0d:22:d8:ab:
15:2c:26:68:a0:35:ff:28:97:06:71:cb:d2:ad:e9:16:9e:27:
81:ee:fa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:26 2026 by rpki-client