
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/187A04506A4811F196588EF18047A888.roa
File: 187A04506A4811F196588EF18047A888.roa (raw, json)
Hash identifier: 9Vl60CRqTbNKjmwUBuv8hbLXU5x8RNm9UnwDK+OnXww=
Subject key identifier: BF:08:C0:C9:37:66:B8:E7:8F:88:56:5A:FF:5A:0A:A0:7B:81:A1:6B
Certificate issuer: /CN=A915FB7F/serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Certificate serial: 1A49
Authority key identifier: 32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/187A04506A4811F196588EF18047A888.roa
Signing time: Wed 17 Jun 2026 12:28:51 +0000
ROA not before: Wed 17 Jun 2026 12:28:51 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 136479
IP address blocks: 103.89.152.0/24 maxlen: 24
103.89.153.0/24 maxlen: 24
103.126.4.0/24 maxlen: 24
103.126.5.0/24 maxlen: 24
2001:df0:d500::/48 maxlen: 51
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6729 (0x1a49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FB7F, serialNumber=32C42045EA0B516551224D808F0D5550A0473B43
Validity
Not Before: Jun 17 12:28:51 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a329302-c911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:49:e0:82:d5:b1:43:66:b0:68:9e:93:a8:
83:42:82:39:a1:60:e7:ab:64:70:db:66:21:a6:f5:
65:3d:57:55:3a:2c:d3:40:c4:81:f2:cf:30:b2:8e:
0a:60:3e:38:7e:e1:71:50:3b:f6:0b:57:b3:30:a7:
36:b1:d9:69:b9:ae:a8:01:41:23:22:4c:60:54:d7:
c1:95:c9:f7:7e:7d:51:18:80:e5:19:37:94:02:80:
cd:5e:15:c5:9f:cc:ea:a8:a2:d7:63:f7:07:35:dc:
55:85:0f:b8:0d:45:ee:8f:fa:2d:d9:0f:ee:b1:13:
dd:66:c6:9a:73:21:32:b6:c6:1e:df:2f:26:09:8b:
3f:33:d8:8c:53:a6:e6:25:9c:18:c5:e3:e0:66:89:
b2:a8:b3:22:9c:2d:76:31:bb:1b:ee:80:49:55:67:
96:a4:2a:57:3f:ef:07:90:61:8c:80:d3:66:07:39:
80:8a:e8:54:57:cc:b2:d7:91:be:93:a5:ad:7c:75:
cf:f3:d3:12:8f:67:59:b1:f9:7b:60:a3:0a:26:77:
5c:eb:26:f1:b5:96:91:e5:b3:cb:5a:d0:43:ec:ce:
08:96:19:e8:c6:54:91:c6:eb:0e:00:8f:d8:57:fa:
28:34:c3:ce:52:94:48:7d:e3:c4:50:85:8c:15:ac:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:08:C0:C9:37:66:B8:E7:8F:88:56:5A:FF:5A:0A:A0:7B:81:A1:6B
X509v3 Authority Key Identifier:
keyid:32:C4:20:45:EA:0B:51:65:51:22:4D:80:8F:0D:55:50:A0:47:3B:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/MsQgReoLUWVRIk2Ajw1VUKBHO0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MsQgReoLUWVRIk2Ajw1VUKBHO0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB7F/1BAE26547CC911E792CBA944C4F9AE02/187A04506A4811F196588EF18047A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.152.0/23
103.126.4.0/23
IPv6:
2001:df0:d500::/48
Signature Algorithm: sha256WithRSAEncryption
8c:e9:0d:e1:de:73:f7:0f:26:c7:fa:6d:fe:7d:8e:0f:3b:d2:
9e:ee:45:5c:c3:f6:37:0c:6e:d8:78:34:0c:51:38:27:b6:ae:
ab:54:36:6f:2f:b8:6d:7d:64:ec:b6:5b:c5:97:3e:44:79:b4:
26:51:94:f0:60:95:64:a6:32:6b:05:7d:10:d1:e2:81:05:d6:
b6:d5:8f:20:70:00:16:73:45:fd:8f:a1:16:af:ce:2a:49:f7:
9a:ec:8b:75:c5:c5:99:a3:28:2a:53:80:06:b7:d6:59:76:3d:
da:52:95:f4:99:7d:9d:ac:39:62:21:ab:ed:a1:68:57:4c:0d:
d1:bd:36:3d:e0:71:a1:33:e1:74:85:02:20:91:e3:83:82:a9:
9e:de:f9:b3:0c:48:e2:dd:3e:17:78:b2:f3:09:0a:c3:81:99:
a5:61:f2:16:33:42:4d:7f:47:05:5e:78:e7:22:58:36:bc:23:
e2:62:cf:29:90:dd:0b:4d:41:c9:5e:05:3d:2a:05:0b:18:e4:
14:01:d9:05:11:cf:a3:f7:6c:32:af:67:5e:15:c5:7a:23:06:
f2:15:b2:58:5e:e8:38:c1:c1:c4:e9:18:c0:f2:b0:81:51:92:
fa:93:da:6c:2f:83:49:a0:57:b1:ca:3d:55:99:70:97:cc:ba:
40:a2:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:58 2026 by rpki-client