
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa
File: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (raw, json)
Hash identifier: pXY678rgib9MDIpv4q9NRSvkOIHZhVLc8Ni424DybDE=
Subject key identifier: 0C:AA:89:36:BE:C8:0A:70:56:34:E8:7F:6E:FA:D0:C6:F8:4D:93:C8
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 26E5
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:33:20 +0000
ROA not before: Fri 04 Jul 2025 16:22:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 45938
IP address blocks: 103.234.104.0/24 maxlen: 24
2404:e801:101f::/48 maxlen: 48
2404:e801:201f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9957 (0x26e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jul 4 16:22:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47860-4930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:3a:20:8a:69:fa:05:73:3f:87:b0:6a:a7:
e2:61:b0:db:85:c7:5c:ea:35:76:75:da:c1:1a:75:
40:95:7e:ef:b8:88:51:dc:7a:7f:3f:d6:a7:e1:3d:
f6:24:0e:65:08:65:5d:1d:02:04:69:22:78:cc:a5:
2b:c7:67:7b:3e:58:4b:7c:f4:19:d4:c1:62:ae:19:
52:bd:64:01:c1:37:a8:aa:fa:39:f4:93:47:84:be:
1e:d8:74:33:8d:7d:c4:03:98:1c:07:c2:3d:93:19:
b4:f0:6a:96:fc:bd:ca:34:9d:37:3d:20:5b:27:06:
4c:36:b1:2a:3e:3a:98:64:c5:d4:b1:6a:9c:eb:5c:
6d:6b:00:08:92:2f:15:82:2d:53:4d:9a:71:4f:0f:
34:9b:b9:79:1c:85:f6:80:35:cd:6c:a6:ee:72:f8:
55:d5:84:c2:bc:c3:f3:57:47:4a:71:74:1c:e2:8f:
d9:50:f3:9c:7b:64:f0:b8:b2:1a:6a:85:98:a7:3d:
c3:2d:da:ae:67:46:46:36:2b:d6:69:e2:53:05:bd:
47:aa:fa:c4:33:9c:34:6e:d1:85:0e:1e:d6:35:2e:
01:e2:0b:ca:59:e7:9b:d9:29:cf:80:91:62:d4:78:
01:c5:17:cd:7d:66:b1:64:be:4e:43:2b:9f:f6:b1:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:89:36:BE:C8:0A:70:56:34:E8:7F:6E:FA:D0:C6:F8:4D:93:C8
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/5CCAC7F8528C11ECB6101B10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.234.104.0/24
IPv6:
2404:e801:101f::/48
2404:e801:201f::/48
Signature Algorithm: sha256WithRSAEncryption
90:d3:7a:29:96:c9:cc:be:59:e7:d5:3a:57:28:3e:24:7a:58:
fa:67:8e:c0:82:04:d9:99:37:14:51:fe:3c:e8:d0:ba:d1:a4:
35:7d:a7:03:4a:89:ca:36:0a:44:a7:b3:79:68:c3:42:41:45:
4d:18:df:43:4f:0c:ae:2b:90:25:72:8f:82:b9:52:33:89:e4:
d9:1c:5c:69:98:fd:c4:11:6d:20:1d:bb:8d:36:a6:77:07:c7:
03:27:cc:c0:03:92:51:5a:ae:13:f4:12:7d:65:83:51:0a:c8:
3d:1e:66:e5:e3:c0:84:87:8b:df:2b:da:c5:62:dc:16:15:c9:
b4:e8:49:34:36:5f:0f:61:a0:bf:46:68:3d:0c:46:06:b1:15:
79:5d:ef:66:51:7b:1a:61:86:63:8f:fe:cc:38:59:8b:98:ce:
9e:52:22:5b:82:af:c7:62:c4:a7:8d:52:ad:79:84:41:8f:32:
3d:c2:97:14:f5:d9:86:5c:af:18:00:f1:9e:56:22:db:0b:f3:
26:4a:85:f7:4a:05:49:83:1e:f8:2c:3a:dc:7b:0a:a9:43:7f:
02:f7:1f:48:59:8e:95:6d:b9:2e:70:31:57:b0:9c:85:f5:da:
b4:c4:a6:49:a4:47:d0:f2:1d:95:22:4c:f7:02:c3:2e:dd:03:
e2:17:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:26 2026 by rpki-client