
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/B15E8BECFF3211EEA8607454C4F9AE02.roa
File: B15E8BECFF3211EEA8607454C4F9AE02.roa (raw, json)
Hash identifier: Y5fEICLeeOhc+g47DjMlbbzmzMJMpxb31hRmWJOjwFo=
Subject key identifier: 5E:A7:33:75:6D:8E:80:09:0F:8C:65:B2:99:2D:44:CF:14:9C:3B:CB
Certificate issuer: /CN=A91C53FD/serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Certificate serial: 0166
Authority key identifier: 21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/B15E8BECFF3211EEA8607454C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:59:34 +0000
ROA not before: Sat 05 Jul 2025 06:11:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137870
IP address blocks: 103.116.16.0/24 maxlen: 24
103.116.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53FD, serialNumber=21934198E8331061D275B8CFC79458D32FABD6C9
Validity
Not Before: Jul 5 06:11:53 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a589b6-3a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:67:c1:13:ab:e5:c9:c7:0d:fe:b5:07:95:66:
07:b9:72:94:d1:94:28:18:01:7e:68:a0:0e:db:6c:
7e:74:29:eb:b9:29:1a:b5:12:b8:53:39:c3:4c:ae:
51:aa:f1:cf:28:58:06:2f:eb:20:5d:1c:4f:bf:ca:
48:30:a7:1f:6e:33:ff:b5:22:c1:1e:63:eb:75:ee:
e8:29:77:f7:17:3e:9a:ad:96:61:3b:51:d2:14:46:
c3:2d:aa:90:2c:48:64:f4:e4:c0:39:79:13:fa:a0:
7f:e8:1e:1b:aa:d5:2e:ae:2d:6b:1c:44:1e:05:bf:
14:be:48:36:2d:c7:3c:6d:46:55:4c:7f:8c:4f:43:
c0:28:d9:c4:13:8e:db:89:1d:be:02:10:38:f6:e8:
f4:cd:1d:7d:f3:8f:b3:a3:fd:be:f3:8b:12:d3:81:
9c:12:47:3b:42:9d:34:46:f1:cf:dd:6b:55:de:e9:
1c:77:87:42:dd:8d:90:f3:81:dd:f8:81:17:b4:31:
93:97:ab:c2:2a:6c:72:1d:b9:ea:ee:b5:f8:9e:ca:
c3:36:bd:1d:fb:bd:f1:cc:0f:dc:de:11:41:d3:04:
af:7e:e4:82:21:ce:aa:f0:1d:5a:eb:61:f3:e3:1f:
70:ba:48:06:4c:45:6e:72:fc:d1:c6:7c:b3:29:8a:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:33:75:6D:8E:80:09:0F:8C:65:B2:99:2D:44:CF:14:9C:3B:CB
X509v3 Authority Key Identifier:
keyid:21:93:41:98:E8:33:10:61:D2:75:B8:CF:C7:94:58:D3:2F:AB:D6:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/IZNBmOgzEGHSdbjPx5RY0y-r1sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZNBmOgzEGHSdbjPx5RY0y-r1sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53FD/688E57EEFF3211EEA55D8E53C4F9AE02/B15E8BECFF3211EEA8607454C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.16.0/23
Signature Algorithm: sha256WithRSAEncryption
02:8f:ff:44:fa:fa:13:d5:41:d5:39:c8:e2:a0:f2:8f:8d:f8:
db:b4:0c:85:58:67:8c:19:6b:75:1c:28:5d:04:fe:98:2b:2c:
a6:4c:45:50:b7:2b:14:b3:35:8c:87:b2:22:87:64:d4:7b:f6:
84:21:81:31:34:3e:86:46:55:a7:35:5d:1c:d6:f7:68:24:05:
00:f4:9e:53:b4:e9:2f:c8:5e:d1:84:1e:f4:7e:57:98:4a:f7:
86:08:e6:8f:71:94:17:69:e1:cd:d7:8d:e0:d5:b0:45:7c:6a:
d2:6d:43:51:ed:06:81:a4:f6:ba:a0:48:d6:9e:98:ab:3f:52:
e4:0c:d9:a5:67:89:34:dd:a0:b9:04:0e:5f:f9:d0:9e:53:be:
dd:ec:40:b0:f1:2b:0c:28:0c:7b:19:52:3d:77:42:9b:6f:25:
ff:a7:2d:77:ce:90:97:03:b9:fb:d5:db:81:20:c7:f8:21:d9:
da:03:b4:47:53:0f:f3:04:08:06:f1:c0:a5:5d:19:e2:ac:f4:
91:b1:87:ed:c4:b3:a2:a4:5f:49:ba:66:ac:b7:f6:b1:2c:e3:
23:e7:be:70:eb:93:8a:c4:f7:5e:8a:50:03:ba:02:a3:a8:33:
96:2a:94:f8:34:57:eb:49:2b:e0:81:20:2c:bf:38:53:51:9d:
91:d3:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:32 2026 by rpki-client