
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4ED7C794FF1D11F08FCF41D6436F56BC.roa
File: 4ED7C794FF1D11F08FCF41D6436F56BC.roa (raw, json)
Hash identifier: VZ7qL+XZo7DtyaTco73NW7VaAmAzKT6zJIWqxWJy1Uc=
Subject key identifier: B0:6C:BF:9F:D0:98:22:E4:2C:C0:30:F0:7B:45:29:52:3B:FC:A1:02
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 0907
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4ED7C794FF1D11F08FCF41D6436F56BC.roa
Signing time: Sun 01 Mar 2026 18:11:19 +0000
ROA not before: Sun 01 Feb 2026 03:22:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9457
IP address blocks: 103.72.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2311 (0x907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: Feb 1 03:22:59 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a48147-72cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:ab:44:3d:9e:06:aa:78:a8:78:63:1e:ad:
d6:57:95:bf:15:51:30:63:73:a2:bc:21:e6:cf:c3:
52:01:31:e5:8c:f2:22:e4:e3:6d:30:62:23:4d:a0:
b2:3b:5e:5d:64:ca:71:b9:d3:d3:e1:20:5f:d3:10:
a6:10:9f:b7:8e:c2:cf:4c:89:e0:ea:5f:e4:58:df:
6b:b7:da:69:f3:5e:47:e2:97:dc:b8:57:e9:a5:21:
69:3b:fa:eb:64:10:96:82:90:96:3a:e8:23:77:fc:
67:45:dd:da:bd:41:96:a8:07:ec:e8:bb:c4:e5:49:
7a:89:0c:b1:7f:d7:03:56:b3:39:9b:b3:16:35:e8:
ea:49:a4:0a:14:70:cd:35:eb:13:22:cb:32:c9:1d:
93:63:4d:cf:56:d4:b4:d4:14:fa:6c:7a:d4:7b:7e:
63:22:6d:4d:0a:da:00:20:f3:46:7c:6c:fc:6b:43:
51:db:89:fb:4a:54:dc:ed:49:f0:56:7a:29:c5:1a:
be:1a:c9:a4:65:a3:d7:c3:68:2c:21:2a:2e:71:ad:
21:29:06:15:70:22:4c:01:79:eb:a7:04:2e:7d:17:
5f:b7:fc:74:74:75:01:3e:68:63:3f:5c:a9:73:6e:
13:f4:84:e5:35:03:27:d7:74:a3:ad:c3:b5:9a:9e:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:BF:9F:D0:98:22:E4:2C:C0:30:F0:7B:45:29:52:3B:FC:A1:02
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/4ED7C794FF1D11F08FCF41D6436F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a7:74:56:18:30:15:92:05:d3:c7:14:83:90:72:07:01:e6:
f5:bd:f8:c6:72:2d:e3:da:db:7c:2e:50:7a:f7:32:65:5d:ab:
44:d3:12:fe:dd:92:1d:51:b5:72:7d:c5:74:9c:4e:68:a0:32:
59:84:da:bc:12:46:98:ba:72:30:bc:17:11:db:a9:c4:b5:50:
83:5e:1b:3f:86:1b:8e:fe:85:d3:46:67:98:60:c0:ea:7e:cb:
a5:09:4b:b6:d6:27:67:ba:8b:8d:55:f4:22:cd:47:0c:31:73:
95:5f:f4:2c:29:f2:b5:4f:ae:1a:4d:5a:c4:18:95:46:e4:a4:
64:54:03:04:8f:75:7a:13:1b:46:90:6a:5d:58:dd:e7:a9:95:
04:e0:cf:b9:06:10:10:dc:95:bf:45:6f:bd:a4:49:a2:da:1f:
6a:32:73:eb:d1:51:18:85:b4:12:bb:be:dc:d6:ea:b8:4a:09:
c1:34:d5:ec:78:0b:da:be:6b:09:d3:b6:13:75:de:93:ae:60:
bf:12:0b:0e:c0:ca:5f:00:fa:36:5c:75:09:0a:67:1c:ec:30:
22:aa:4e:0a:05:69:6b:bf:c6:7c:12:4f:28:a2:a0:4f:4b:3d:
b2:91:d4:4d:8a:6d:36:c2:ae:81:5d:7b:c7:df:df:d2:ef:e0:
64:d1:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:03:31 2026 by rpki-client