
$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
File: 8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa (raw, json)
Hash identifier: 3B96UlkLTKNYWeeC54aVnV7PH9CyaSoRvKgcab08m08=
Subject key identifier: 3B:A3:1A:D4:AF:C1:AB:75:83:8F:91:0C:1A:E4:F3:29:50:0A:09:6B
Certificate issuer: /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial: 023B
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:07:28 +0000
ROA not before: Sun 29 Jun 2025 02:51:10 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 5065
IP address blocks: 103.92.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Validity
Not Before: Jun 29 02:51:10 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45630-d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:5c:73:fd:ce:bd:06:88:af:7f:58:d1:a8:
e2:93:2d:24:da:04:63:f8:6c:bd:10:3c:52:59:b8:
29:88:15:78:33:36:a9:85:16:a3:f6:cc:fc:52:85:
48:67:ce:c0:6b:7c:77:c3:d8:ca:52:c8:83:28:1a:
1c:61:49:18:3c:21:5d:1a:e7:96:76:b1:ed:ea:47:
9d:7a:05:5a:b8:d9:06:55:f2:0d:9d:aa:3c:12:6d:
a8:cc:2b:1b:69:3d:b8:ee:ca:dc:e8:f1:8a:74:19:
46:91:1e:82:e3:86:f4:22:c4:e2:42:96:81:d9:5b:
ff:cf:fb:77:29:3a:97:07:be:78:37:b4:14:78:25:
04:9e:45:cb:77:7b:30:12:00:b8:b7:be:b8:3d:f1:
3c:a1:5f:4d:ea:f1:da:9b:d7:b3:f8:07:bb:98:6c:
85:73:f2:7b:40:31:18:a2:7a:1c:3d:80:22:28:72:
d8:e2:ce:bd:d1:8c:1c:9c:af:85:72:77:52:8b:c5:
44:47:ac:77:89:10:c4:fb:13:b7:34:91:4c:92:c3:
4a:de:fe:78:4b:c9:ec:d5:1b:4d:e1:c1:e3:e0:1a:
a8:78:25:2d:32:c0:29:69:38:ec:4f:8e:46:45:f3:
66:70:96:2b:51:75:da:63:aa:5c:a6:34:34:5c:80:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A3:1A:D4:AF:C1:AB:75:83:8F:91:0C:1A:E4:F3:29:50:0A:09:6B
X509v3 Authority Key Identifier:
keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/8EAA5C7E4FBF11EFBA8E5F12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.92.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:be:7a:63:15:ba:9e:84:24:c3:a1:6b:b0:c6:af:f8:c8:05:
05:0e:68:a8:d5:e3:48:47:92:37:53:22:9c:a1:2d:45:46:fc:
8d:a5:4a:d3:b5:15:99:b8:d4:b8:12:8f:7e:28:1c:5e:9d:7c:
da:fb:a5:72:02:b8:cb:8d:52:d8:6b:11:30:99:6a:e3:33:2f:
26:3d:ad:c0:02:20:60:e6:ae:ed:07:cd:00:4e:9f:00:81:b1:
12:64:8a:78:26:e3:59:e9:72:05:81:f8:b6:75:61:d6:b8:7f:
c3:30:a5:b5:58:d6:2c:22:28:a8:c9:a0:2b:ff:18:69:a9:42:
55:31:48:b9:c1:ee:ae:8a:50:d8:b6:2e:e7:d8:f9:02:7c:dd:
04:e3:b8:40:b2:69:67:2e:5d:b1:64:7a:51:b6:e4:28:01:19:
29:77:7d:29:d4:1a:8f:8a:37:0f:d0:d9:3a:2d:e9:5c:a6:b6:
a0:c7:4d:18:85:dc:23:2f:fe:14:1e:ce:18:b1:ac:07:9a:87:
c9:76:bc:03:aa:3a:fa:7a:53:42:1f:bd:3f:a8:0b:f8:99:d2:
4f:86:41:fa:fa:eb:be:12:9d:fb:1f:e4:06:89:d8:83:04:65:
7c:3c:52:6c:3a:43:60:be:99:9d:fd:df:2a:18:a2:6c:7a:45:
bf:80:e0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:00 2026 by rpki-client