
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
File: 23C2AF26267111F19CC61B4CAD833773.roa (raw, json)
Hash identifier: eoaJU5L5AWETQbh5tzlz1LYyadz6jGwQzQ6i9ICSO+c=
Subject key identifier: 1D:16:B2:DE:24:0A:62:25:9C:E1:60:47:C2:DA:FE:D2:0E:8A:97:69
Certificate issuer: /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
Certificate serial: 06
Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
Signing time: Wed 25 Mar 2026 01:24:55 +0000
ROA not before: Wed 25 Mar 2026 01:24:55 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152848
IP address blocks: 103.155.60.0/24 maxlen: 24
103.155.61.0/24 maxlen: 24
2001:df3:cdc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl
rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
Validity
Not Before: Mar 25 01:24:55 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69c33967-cd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:7f:56:53:96:ce:6c:f0:7c:80:f0:e9:5e:
52:c2:fa:30:e4:b1:b8:b4:0b:27:aa:29:ec:16:1d:
2a:f2:f0:b6:5b:19:ab:7b:71:04:95:e9:2e:d9:8d:
bd:a9:f4:09:b3:19:41:47:56:6e:cb:04:07:f9:1f:
d7:7a:a2:fa:7b:a7:79:d3:76:43:2e:a6:cc:4d:78:
60:0f:54:9e:5b:b2:35:05:6f:99:39:04:5a:6e:f8:
a0:d5:d7:9d:a7:33:cc:08:97:ed:ab:e0:10:52:d4:
67:e6:0c:41:ad:af:ac:83:42:d6:15:f0:32:72:04:
21:33:6f:94:8f:73:65:32:55:00:72:ac:2b:0e:69:
5d:e5:ab:56:e3:5a:ff:c5:a3:00:0c:a4:f2:5c:5b:
e9:80:6d:38:3f:4d:0f:a9:1e:b7:b6:a9:c3:41:52:
e9:25:45:0c:d2:39:f8:ff:a1:c2:bd:6b:b6:1a:ea:
0f:73:df:76:6b:2c:3c:16:8a:2e:9f:92:fa:82:a8:
3c:9b:7c:d8:8c:da:7e:e2:e7:38:68:b0:10:6b:ff:
07:6e:5f:3f:16:1c:f6:02:bc:b9:b4:fc:84:48:31:
b2:64:f0:2f:8a:e1:34:23:7b:c9:3c:b2:bc:d3:ec:
7f:1f:7e:48:3e:1b:34:20:65:34:02:39:d2:fe:a6:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:B2:DE:24:0A:62:25:9C:E1:60:47:C2:DA:FE:D2:0E:8A:97:69
X509v3 Authority Key Identifier:
keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/23C2AF26267111F19CC61B4CAD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.60.0/23
IPv6:
2001:df3:cdc0::/48
Signature Algorithm: sha256WithRSAEncryption
e0:52:20:93:40:c1:2c:f7:47:91:00:74:3b:f9:6e:f9:04:af:
90:72:e6:90:86:92:8f:9d:33:08:4a:96:3b:d7:ff:7b:d2:c8:
c9:8d:6c:d2:b5:12:75:5e:0c:a3:ac:f3:8d:0d:bd:cf:0a:76:
b6:8e:f8:43:50:78:c5:d0:94:d8:5a:85:a2:5f:93:b8:cc:b9:
ca:bc:bf:31:f9:aa:c3:87:96:af:83:8f:4d:c0:4a:7b:14:15:
94:35:3c:ae:43:65:c7:71:a6:ab:31:51:8c:eb:7d:bb:12:ec:
52:f0:70:47:2f:57:69:01:f0:b2:17:00:89:c2:38:f7:8f:a8:
a9:a1:a1:85:1b:6b:2a:c4:2c:85:00:7f:1e:38:79:88:36:10:
e2:c2:65:ee:05:30:97:bb:b1:ed:75:e0:4a:77:dd:89:b7:61:
e9:6c:ed:8f:64:1d:a8:56:6e:fa:65:ab:f1:6e:56:c5:1c:6a:
a0:3d:6c:c3:5c:56:93:16:55:7e:96:6a:4c:b3:c5:3d:29:62:
30:e4:21:a1:5e:22:3e:84:19:ae:29:7f:46:d9:1d:3e:8c:93:
bf:44:a5:82:7f:48:1e:64:8f:75:5b:5d:1f:f9:1a:93:9d:4d:
bc:7e:e3:dc:26:8b:c4:a5:0c:db:12:41:ab:a0:76:2c:26:97:
21:9d:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:35 2026 by rpki-client