
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/90DF5EC4B4E711F18624952E3911F970.roa
File: 90DF5EC4B4E711F18624952E3911F970.roa (raw, json)
Hash identifier: X0rwSD+HZbPZY8h7R2w+ZV104yI5jo7fwpbe6qSeuYY=
Subject key identifier: AF:97:8D:73:3B:79:D1:66:8A:31:8A:1E:8F:C9:94:4E:B8:F5:1B:55
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 1153
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/90DF5EC4B4E711F18624952E3911F970.roa
Signing time: Sun 20 Sep 2026 20:31:19 +0000
ROA not before: Sun 20 Sep 2026 20:31:19 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134489
IP address blocks: 111.92.146.0/24 maxlen: 24
111.92.147.0/24 maxlen: 24
111.92.148.0/24 maxlen: 24
111.92.155.0/24 maxlen: 24
111.92.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 14:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4435 (0x1153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Sep 20 20:31:19 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ab04296-57fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:0b:96:4c:1b:18:4f:02:c1:9e:46:d5:1a:
b8:fb:f6:e8:a6:31:6e:37:77:74:f0:4c:b6:0e:b2:
83:35:15:83:36:05:7f:1a:f3:99:99:b8:a9:ac:67:
11:29:a3:8f:17:8b:8c:97:6a:d0:81:c6:a1:1a:f7:
45:c7:09:0e:1e:c0:1f:11:b5:9d:cf:83:3a:e5:c3:
b0:55:58:a3:e3:da:0c:d8:4f:e9:f5:58:b3:11:cb:
99:42:d6:f6:c9:a9:00:bd:54:1c:b3:8c:cd:a1:de:
cf:d6:24:f7:72:6a:d1:30:bc:43:87:52:a0:19:aa:
4f:3e:6c:87:9d:f6:7e:89:87:b5:17:3a:d5:d8:35:
d6:a3:b6:d0:c8:19:03:bd:3a:c8:79:cd:72:71:0a:
71:05:94:47:b8:98:ba:84:80:f5:4a:78:5b:d5:0f:
03:6a:ab:36:90:e1:82:d6:ec:fa:06:80:a9:52:6b:
da:69:de:92:c1:09:54:4d:74:89:ff:d8:bf:53:94:
ff:c6:89:d6:8c:b7:c7:29:9f:9e:ea:22:cb:41:75:
74:21:27:5f:aa:05:90:0e:b4:c9:62:98:63:ad:42:
19:d2:49:5b:ca:3b:82:75:f0:63:e4:e5:eb:94:1f:
ed:c8:d1:dd:76:b6:14:f9:fc:45:6e:26:c4:94:68:
cc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:97:8D:73:3B:79:D1:66:8A:31:8A:1E:8F:C9:94:4E:B8:F5:1B:55
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/90DF5EC4B4E711F18624952E3911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
111.92.146.0-111.92.148.255
111.92.155.0-111.92.156.255
Signature Algorithm: sha256WithRSAEncryption
a2:24:4e:20:b4:db:e4:35:cb:bb:82:55:a7:8a:de:ce:4f:2e:
d8:33:ac:88:50:f6:a3:6e:17:36:d2:36:ac:61:d1:fc:33:70:
59:ef:04:62:ea:fa:68:20:bf:14:c9:d5:3b:7d:51:88:bb:a2:
d2:b4:65:2c:7f:92:e5:0d:8b:5e:c8:58:1c:03:63:73:19:fb:
a3:22:6f:35:ea:bf:f2:8c:88:f8:ad:fc:78:98:85:a2:25:8a:
36:18:2c:26:29:13:a7:ce:5e:ae:62:18:54:ca:a6:93:33:5a:
b4:e8:25:63:9c:b4:de:7c:10:24:5d:d4:fd:ce:d8:29:3d:67:
5f:41:04:37:8e:5d:4b:85:14:62:e4:a8:a8:75:07:51:df:82:
1a:71:33:6b:c9:48:5f:dc:06:52:70:1c:48:20:82:ab:f3:93:
72:85:a5:0d:11:04:01:65:56:12:a6:1f:75:d8:5d:e1:44:18:
52:bc:fb:da:26:aa:45:75:db:8f:40:f0:d0:c4:b2:16:5c:d5:
a5:60:4d:63:84:e2:74:52:30:09:cd:47:c1:fb:f4:1b:ad:6c:
3a:91:1f:c7:28:d7:68:f3:a5:0e:d8:2c:46:15:99:ac:6c:57:
81:83:d5:05:20:6f:d1:a3:a2:f8:86:63:96:7f:33:c6:41:e5:
4c:5e:21:fb
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICEVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwOTIwMjAzMTE5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwNDI5Ni01N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8oLlkwbGE8CwZ5G1Rq4+/bopjFuN3d08Ey2DrKDNRWDNgV/GvOZmbiprGcR
KaOPF4uMl2rQgcahGvdFxwkOHsAfEbWdz4M65cOwVVij49oM2E/p9VizEcuZQtb2
yakAvVQcs4zNod7P1iT3cmrRMLxDh1KgGapPPmyHnfZ+iYe1FzrV2DXWo7bQyBkD
vTrIec1ycQpxBZRHuJi6hID1Snhb1Q8Daqs2kOGC1uz6BoCpUmvaad6SwQlUTXSJ
/9i/U5T/xonWjLfHKZ+e6iLLQXV0ISdfqgWQDrTJYphjrUIZ0klbyjuCdfBj5OXr
lB/tyNHddrYU+fxFbibElGjMhwIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFK+XjXM7
edFmijGKHo/JlE649RtVMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvOTBERjVFQzRC
NEU3MTFGMTg2MjQ5NTJFMzkxMUY5NzAucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAATAcMAwDBAFvXJIDBABvXJQwDAMEAG9cmwMEAG9cnDANBgkqhkiG9w0BAQsF
AAOCAQEAoiROILTb5DXLu4JVp4rezk8u2DOsiFD2o24XNtI2rGHR/DNwWe8EYur6
aCC/FMnVO31RiLui0rRlLH+S5Q2LXshYHANjcxn7oyJvNeq/8oyI+K38eJiFoiWK
NhgsJikTp85ermIYVMqmkzNatOglY5y03nwQJF3U/c7YKT1nX0EEN45dS4UUYuSo
qHUHUd+CGnEza8lIX9wGUnAcSCCCq/OTcoWlDREEAWVWEqYfddhd4UQYUrz72iaq
RXXbj0Dw0MSyFlzVpWBNY4TidFIwCc1Hwfv0G61sOpEfxyjXaPOlDtgsRhWZrGxX
gYPVBSBv0aOi+IZjln8zxkHlTF4h+w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:32 2026 by rpki-client