
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/215A8FDE4B9E11EEBF766C7FC4F9AE02.roa
File: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (raw, json)
Hash identifier: n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=
Subject key identifier: DC:52:CA:66:28:15:3E:C7:1E:B6:EB:64:59:DA:63:18:1D:C7:95:5F
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 093E
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/215A8FDE4B9E11EEBF766C7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:02:09 +0000
ROA not before: Tue 04 Nov 2025 21:40:36 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4682
IP address blocks: 61.245.0.0/22 maxlen: 22
61.245.0.0/24 maxlen: 24
61.245.1.0/24 maxlen: 24
61.245.2.0/24 maxlen: 24
61.245.3.0/24 maxlen: 24
2001:ded:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2366 (0x93e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Nov 4 21:40:36 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48d31-bcca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:26:14:f0:ac:97:13:e9:e9:74:90:58:19:
a5:12:ad:96:81:c3:c8:6a:34:7d:f4:be:02:a4:89:
84:5b:35:b0:65:b1:b1:7b:7b:c9:3f:5f:9b:d9:7c:
cf:62:04:eb:0e:17:2b:4c:05:cd:d7:5f:9e:ac:df:
63:cc:cf:0b:15:e3:f9:f0:51:da:87:b7:31:47:97:
d2:d5:ea:e9:fc:c7:51:07:a4:74:03:5b:77:81:3f:
d7:44:98:05:bd:48:ff:91:d8:c4:1b:ae:a5:14:bc:
30:81:1c:70:c7:bf:4f:02:b6:43:38:82:03:4a:56:
b2:ce:ef:54:07:40:2d:20:9f:50:c5:e0:9b:ad:fe:
85:a7:1b:2d:52:23:d6:66:c2:b2:eb:3e:ac:6e:23:
b4:55:4b:a8:a0:06:08:ab:a6:15:f9:5a:1c:57:e9:
b8:29:3e:1f:ce:35:2d:66:b5:ad:dc:7f:95:18:03:
1d:fe:f4:f1:5f:89:3e:93:74:b0:a4:ad:23:3c:c9:
90:97:07:5f:c3:a6:50:5f:01:18:e9:7a:89:23:ce:
94:80:a9:63:32:08:6e:6c:4a:24:a9:af:0b:17:6c:
af:77:74:11:53:b8:be:a3:9f:8f:8d:a0:3b:61:1a:
3b:8d:10:3d:7e:31:52:20:98:4c:53:45:fd:b2:76:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:CA:66:28:15:3E:C7:1E:B6:EB:64:59:DA:63:18:1D:C7:95:5F
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/215A8FDE4B9E11EEBF766C7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.245.0.0/22
IPv6:
2001:ded:4000::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e2:d7:6e:2c:9a:74:a7:d3:96:0f:07:3a:b9:4a:c8:37:18:
9b:80:73:89:20:9b:41:7e:1f:75:f7:aa:6c:f0:e6:ed:2c:f8:
ec:c2:54:c0:64:f6:52:3c:88:12:39:fa:b6:bc:ac:93:dc:0a:
72:e6:0c:93:14:50:e9:00:da:8a:42:ff:a8:85:db:f4:42:57:
90:73:c9:bd:cd:11:ca:e8:6e:35:c1:0f:b1:55:c4:70:dd:33:
d1:e1:41:73:ea:1b:7e:ec:13:14:6c:b3:27:b8:89:b3:b6:4a:
27:9b:97:cd:f0:5d:71:bd:d6:42:4a:0a:40:c1:59:49:3e:6d:
8b:be:0e:74:b1:f9:f9:f7:4c:ad:99:62:2b:dd:f4:c3:a0:41:
5d:97:74:ff:a6:ea:04:97:9a:ba:5c:7c:74:f7:90:8c:79:71:
1d:1b:4e:b0:61:5d:6e:c3:91:5d:11:9f:ae:9d:fa:9a:be:de:
7e:15:25:0b:51:5a:2c:28:8c:c8:a1:d2:08:db:05:9e:bb:74:
a3:19:54:a8:d0:2f:ac:10:8f:22:12:a1:66:3b:04:58:83:c4:
bb:ab:dd:1c:e7:9c:85:29:a1:31:8c:df:1c:55:51:b9:1d:8f:
14:80:10:c5:a4:96:16:f1:be:e7:85:87:5a:85:1b:a3:a1:fe:
f9:d6:8a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:49 2026 by rpki-client