
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/5A0CB6A2B4E811F1854CDF493911F970.roa
File: 5A0CB6A2B4E811F1854CDF493911F970.roa (raw, json)
Hash identifier: LcwdNHZ8xt+068DDbraScihxciGm/JNMucUMjF6oTj0=
Subject key identifier: 34:D4:29:83:D7:BD:C4:FB:50:A6:D4:00:A1:C5:B1:0E:6B:D8:F2:80
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1154
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/5A0CB6A2B4E811F1854CDF493911F970.roa
Signing time: Sun 20 Sep 2026 20:31:24 +0000
ROA not before: Sun 20 Sep 2026 20:31:24 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 138349
IP address blocks: 111.92.128.0/24 maxlen: 24
111.92.129.0/24 maxlen: 24
111.92.130.0/24 maxlen: 24
111.92.131.0/24 maxlen: 24
111.92.132.0/24 maxlen: 24
111.92.133.0/24 maxlen: 24
111.92.134.0/24 maxlen: 24
111.92.135.0/24 maxlen: 24
111.92.136.0/24 maxlen: 24
111.92.137.0/24 maxlen: 24
111.92.138.0/24 maxlen: 24
111.92.139.0/24 maxlen: 24
111.92.140.0/24 maxlen: 24
111.92.141.0/24 maxlen: 24
111.92.142.0/24 maxlen: 24
111.92.143.0/24 maxlen: 24
111.92.144.0/24 maxlen: 24
111.92.145.0/24 maxlen: 24
111.92.149.0/24 maxlen: 24
111.92.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4436 (0x1154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 20 20:31:24 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab0429b-daab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:77:02:17:a1:c0:79:14:30:b7:c0:1b:8b:
23:4e:a4:5e:35:34:20:76:9c:62:65:b0:2f:d6:95:
11:f2:b0:84:77:1b:72:d9:52:0a:1f:b0:e8:46:6d:
04:61:db:8b:31:cb:04:8e:f4:c8:bc:ec:8e:e8:4d:
4c:9f:47:f4:ad:c4:36:1e:a9:f6:c5:e6:d5:e1:b5:
d0:ff:20:52:d1:16:cb:d4:8e:87:5b:67:19:d4:4a:
8d:54:93:9f:7c:1e:c2:49:a5:42:51:b9:15:13:41:
c2:04:ba:47:77:f8:09:9b:e3:d6:bb:e6:23:8e:ba:
37:1c:a6:50:f0:1e:05:24:de:ac:10:27:c6:d7:b7:
42:b2:5f:db:ad:08:95:b2:c9:0a:f9:1e:0a:7e:fa:
16:aa:c9:ee:ea:03:98:43:49:5e:c1:44:ee:59:26:
b3:f0:2b:94:36:16:78:23:fa:6e:4f:52:ac:11:57:
40:0e:44:dc:b9:87:c0:5c:c6:bf:ec:13:ed:84:df:
44:db:00:8c:5a:e9:c9:91:d7:97:87:09:ef:de:13:
b6:e5:87:83:29:7e:0a:69:b9:1b:cf:fd:a9:d1:1e:
08:93:d0:cb:75:da:06:29:96:c5:0d:45:1e:de:ca:
5e:60:04:4e:ce:51:43:f3:54:3e:df:b3:07:a1:1a:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:29:83:D7:BD:C4:FB:50:A6:D4:00:A1:C5:B1:0E:6B:D8:F2:80
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/5A0CB6A2B4E811F1854CDF493911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
111.92.128.0-111.92.145.255
111.92.149.0-111.92.150.255
Signature Algorithm: sha256WithRSAEncryption
02:da:66:a0:99:91:b1:af:2d:bd:22:58:ac:76:7d:48:7e:0a:
e7:ff:fb:99:14:d6:8e:e8:0f:62:55:1b:8a:3b:ef:08:39:bb:
b7:5c:93:90:21:29:af:ed:cb:f1:4c:9a:f1:a1:82:3d:ca:3d:
5a:14:b8:32:d4:fb:be:b0:55:d9:dc:2d:e7:68:16:15:ea:51:
f4:1f:d3:e1:ed:d2:be:45:63:c1:09:7c:b3:6b:0b:b9:ba:1e:
43:13:7d:06:80:bf:f6:f2:4f:02:17:8f:e4:97:57:02:14:f1:
57:a6:d1:be:e0:8d:46:1f:ef:66:20:0b:f6:f0:f8:60:c1:21:
fc:3b:94:6e:94:9f:1b:c9:fb:58:e6:01:a0:ac:c2:6b:3e:61:
36:c3:25:67:b7:67:d8:5d:a3:6f:a7:1b:10:cb:7d:d7:56:be:
97:c6:7f:4d:f4:e0:47:cd:f2:0d:15:af:09:11:d3:95:fd:d3:
50:4a:88:01:0e:72:f0:3b:aa:db:d9:c9:13:6b:24:87:fe:8a:
30:0f:18:1c:76:1a:1c:71:2e:cc:74:f0:01:6c:30:45:ee:8f:
da:3d:de:38:e6:c9:ec:7b:f3:0f:1e:06:3a:76:64:e1:01:c4:
de:bf:9c:41:70:8b:49:27:99:a2:64:01:9b:ac:a4:38:b3:2a:
53:d9:4a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:08 2026 by rpki-client