
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
File: 83B6F66C5E4711EDA05F092CC4F9AE02.roa (raw, json)
Hash identifier: kAImmlpJ7hpxSNEY+fje33YtCljiGxmlUux8CnBgP6w=
Subject key identifier: A4:5D:37:AA:A3:D7:96:94:3B:02:FB:CE:77:DE:75:5E:AB:48:A8:21
Certificate issuer: /CN=A915C365/serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Certificate serial: 0278
Authority key identifier: A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:19:07 +0000
ROA not before: Wed 05 Nov 2025 02:16:34 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 133090
IP address blocks: 27.123.20.0/24 maxlen: 24
27.123.21.0/24 maxlen: 24
27.123.22.0/24 maxlen: 24
27.123.23.0/24 maxlen: 24
103.153.144.0/24 maxlen: 24
103.153.145.0/24 maxlen: 24
2401:16c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C365, serialNumber=A628034401C65CF46975DE8C9B4672F85E00FE9B
Validity
Not Before: Nov 5 02:16:34 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43ccb-e1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:36:eb:29:32:5b:53:33:6e:8b:9a:46:8d:7c:
11:81:0b:e6:e3:a8:bb:6e:6e:95:df:de:76:12:97:
86:4b:c0:ad:45:9d:f9:35:cd:e4:d7:a5:8c:2f:1f:
f0:95:1a:ae:37:e9:88:c8:a4:e9:18:55:c1:5f:02:
c3:3b:81:5d:d6:88:29:78:4d:90:ec:d6:9e:0d:66:
6c:89:d9:d5:69:21:e4:3b:9a:25:82:5d:e8:00:06:
8c:19:9e:30:cf:82:7b:94:9f:bb:69:ca:0e:80:d9:
44:bb:f3:8a:db:4a:19:47:1e:75:1a:ef:8b:27:b2:
8c:28:74:f5:d1:c1:3d:33:96:82:be:03:59:36:38:
51:cf:92:77:7a:1b:bd:3a:91:79:12:92:05:92:6a:
52:fd:4d:18:55:5b:d4:8d:46:97:75:dd:69:3c:b0:
c9:34:fe:c4:e1:61:c0:9b:78:b3:99:8f:48:ac:4e:
5d:f3:9c:b8:cc:20:22:59:53:5e:2c:98:d9:d7:22:
ee:97:72:07:3e:cc:52:99:5b:eb:c1:69:56:d9:bd:
fe:d1:a9:ed:4a:5c:cd:8b:e1:25:f4:dd:a1:6c:c5:
e0:05:d3:ed:17:55:16:d6:44:e8:c1:e6:71:e9:40:
da:bd:97:b6:46:0f:75:0a:bc:aa:ba:4a:c4:1d:a5:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5D:37:AA:A3:D7:96:94:3B:02:FB:CE:77:DE:75:5E:AB:48:A8:21
X509v3 Authority Key Identifier:
keyid:A6:28:03:44:01:C6:5C:F4:69:75:DE:8C:9B:46:72:F8:5E:00:FE:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pigDRAHGXPRpdd6Mm0Zy-F4A_ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C365/09FB518A5E4511EDB517D22AC4F9AE02/83B6F66C5E4711EDA05F092CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.20.0/22
103.153.144.0/23
IPv6:
2401:16c0::/32
Signature Algorithm: sha256WithRSAEncryption
e3:e1:58:dc:a0:f5:80:b4:a6:17:b2:ea:a9:8a:1b:d2:c2:e8:
39:81:6c:c8:01:66:66:9a:e0:2b:8e:c9:0c:2b:27:9c:b9:4f:
cd:87:4c:fc:17:3b:e7:84:25:dd:6b:8d:d4:af:7f:aa:77:94:
9b:bf:37:66:12:74:80:74:63:d8:22:fb:1a:48:1a:43:d6:d1:
46:ed:fb:3b:75:ef:b0:e9:e6:60:e4:d6:50:39:b6:cf:7f:67:
cb:c9:e6:8a:3d:26:45:08:42:bf:c3:4e:d6:ff:9d:47:5c:ca:
49:9f:39:98:6e:58:6a:6b:ec:6a:7c:db:d0:8a:4c:a2:11:40:
ea:22:90:04:99:a6:ae:37:55:55:2b:83:de:13:13:d0:42:7a:
0b:ee:5f:ff:df:e8:eb:29:41:6d:04:28:e9:f8:e4:6c:f1:20:
05:c6:30:94:d1:08:03:1f:ad:de:01:92:aa:d8:db:a5:5c:90:
06:90:cd:84:ee:2c:60:41:dc:71:2c:81:11:14:9b:30:9e:16:
1f:02:73:c2:6e:55:02:37:25:bc:c2:2a:97:73:79:dd:9f:5f:
75:05:aa:15:9a:4a:77:6d:17:a3:a7:a0:2f:8c:36:64:7d:45:
d0:14:13:9a:64:ed:3f:da:8e:6e:e5:6c:38:cf:27:4a:5d:da:
94:8f:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:32 2026 by rpki-client