
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/39BE7BDA196411F18D404492083D8C67.roa
File: 39BE7BDA196411F18D404492083D8C67.roa (raw, json)
Hash identifier: sBJq9qerjhcBYVzMIF6/S8M1X7V6Vei2+aWbrKnJuM0=
Subject key identifier: 49:AB:CE:92:C0:94:5F:A7:EA:5E:F3:41:C8:13:0D:0B:F5:2C:9F:2E
Certificate issuer: /CN=A915CBC5/serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Certificate serial: 62
Authority key identifier: 14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/39BE7BDA196411F18D404492083D8C67.roa
Signing time: Tue 25 Aug 2026 08:57:41 +0000
ROA not before: Tue 25 Aug 2026 08:57:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140910
IP address blocks: 103.153.90.0/23 maxlen: 23
103.153.90.0/24 maxlen: 24
103.153.91.0/24 maxlen: 24
2001:df6:cbc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl
rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CBC5, serialNumber=14574C6C8C376EE9B3C1C8A5ADB75CB8C268FFAA
Validity
Not Before: Aug 25 08:57:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8d5905-3e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:55:ff:4d:70:4d:c0:ac:9c:db:2d:e2:a9:
8d:9e:4e:77:74:e4:26:93:b0:67:d6:7d:30:16:d7:
67:40:5a:77:dd:b2:bf:69:b8:95:2e:54:0d:1b:2e:
6c:ec:9c:23:13:da:26:2f:fb:60:b3:5c:80:10:cd:
41:76:cf:38:ca:ff:af:21:b6:a0:1a:9e:b6:73:fe:
cb:a8:a5:8a:3f:2b:2d:9b:00:13:1e:44:14:e5:5f:
0c:a2:d6:82:b3:62:1d:c2:1a:0a:21:7b:0a:fd:68:
fe:24:d7:70:53:fb:d3:35:ec:79:21:db:70:c2:fb:
fb:8b:7b:90:fc:a6:f5:04:70:df:f0:45:55:a9:a8:
05:72:28:f0:67:59:84:2d:93:9a:d9:c5:81:ec:a7:
52:31:90:c2:05:8d:dd:9c:cc:0e:cc:0c:b9:e8:30:
db:84:e0:4d:6d:dc:29:70:0e:7a:f4:6c:79:ba:46:
cb:6f:43:4a:79:d0:12:50:a0:91:a2:43:29:24:57:
23:b1:c0:ed:11:b0:47:3c:30:0c:ab:a5:74:e8:fa:
6b:db:49:dc:e8:29:3a:77:2d:20:7d:cd:9b:d6:a4:
14:1b:75:96:b6:c8:c0:3a:e5:4e:22:22:86:b4:f9:
fe:0f:a9:3d:f2:3d:ce:14:98:fd:a5:ef:17:43:08:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AB:CE:92:C0:94:5F:A7:EA:5E:F3:41:C8:13:0D:0B:F5:2C:9F:2E
X509v3 Authority Key Identifier:
keyid:14:57:4C:6C:8C:37:6E:E9:B3:C1:C8:A5:AD:B7:5C:B8:C2:68:FF:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/FFdMbIw3bumzwcilrbdcuMJo_6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFdMbIw3bumzwcilrbdcuMJo_6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBC5/F858D7E2196011F1AA594DE3073D8C67/39BE7BDA196411F18D404492083D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.90.0/23
IPv6:
2001:df6:cbc0::/48
Signature Algorithm: sha256WithRSAEncryption
24:04:35:f5:a6:17:1d:34:e8:5d:a4:11:9d:86:de:61:a3:6f:
9b:61:82:62:da:8f:24:8c:fe:e9:c9:e2:e2:10:a1:41:b9:4d:
63:bb:02:e4:12:8c:e1:50:69:0e:57:59:28:73:ac:b1:01:e4:
03:1e:a5:78:4f:20:c3:b7:7b:d3:23:da:83:81:24:90:42:35:
9f:73:ac:27:69:50:14:ff:7f:32:ea:a6:08:6b:f2:8b:cc:8a:
94:58:ec:bc:0a:bb:04:12:60:82:e5:bc:f8:0b:c0:1c:38:e8:
53:c6:e3:c9:c6:46:3c:b2:1a:0a:1e:6c:31:ff:80:98:7a:21:
87:a5:d8:8a:23:7c:db:b4:f1:b4:e3:d9:6a:81:ff:9f:9d:5a:
d6:98:9d:f1:32:a3:05:78:35:15:ac:c6:02:25:f3:c4:0d:29:
8d:00:28:3d:42:b4:51:30:80:df:ac:83:d0:c4:19:10:02:09:
a4:21:d0:a6:84:43:90:88:a2:b3:bc:53:14:5f:f1:aa:84:23:
6f:1c:80:8b:99:f1:63:39:3e:ce:c5:92:95:56:34:b1:11:4f:
bd:79:c5:88:ad:e6:86:38:5c:ce:44:aa:65:78:ad:53:ba:dd:
7c:c6:28:06:a9:27:e5:39:73:06:bf:a7:23:68:ff:7c:1b:27:
3a:6f:4b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:28:37 2026 by rpki-client