
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa
File: 3576B330ABFA11F0A2E07C6AC4F9AE02.roa (raw, json)
Hash identifier: 0w3HfHH7UREiRpb2xtmCSCZqE3QWtDjCuYCvHhtDjnw=
Subject key identifier: FA:56:A0:50:96:7D:1E:10:AD:B6:CF:41:E2:38:B8:4D:C5:6A:CD:52
Certificate issuer: /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial: 07C0
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:11:24 +0000
ROA not before: Mon 26 Jan 2026 21:17:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134455
IP address blocks: 103.160.92.0/24 maxlen: 24
103.160.93.0/24 maxlen: 24
2406:e7c0::/32 maxlen: 32
2406:e7c0:1000::/36 maxlen: 36
2406:e7c0:c000::/36 maxlen: 36
2406:e7c0:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1984 (0x7c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Validity
Not Before: Jan 26 21:17:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4814c-22d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8d:f7:08:72:3a:8c:5c:4b:b6:a2:1f:a4:81:
34:0f:0a:ba:d5:a1:22:78:52:34:7f:91:4c:97:16:
ae:18:6a:55:55:a6:70:26:0e:5c:5c:29:3b:6c:99:
60:06:f2:b3:80:7a:a0:85:48:da:e9:e6:52:b1:38:
25:9e:f4:d9:08:3f:b7:02:d1:ee:f1:d0:d7:91:1d:
dd:f5:eb:a7:a2:0b:30:e2:0a:8d:d7:14:c4:49:e8:
98:58:75:b3:be:4b:9e:e2:e7:81:3b:af:dc:84:e2:
84:59:c3:01:b6:2e:1e:b6:23:1a:a3:ab:6f:f7:d0:
ae:f7:f2:31:90:5f:57:82:7d:46:9e:47:47:50:2a:
fe:e8:38:8f:7f:ad:55:f1:00:98:77:c1:a4:ff:fe:
46:3e:cd:a5:6d:d7:ec:71:99:57:cd:70:31:8a:51:
9d:eb:13:19:7a:52:0b:0c:93:89:1a:da:33:47:53:
b7:dd:59:c0:e6:64:23:de:f3:68:ef:bf:72:bd:9f:
90:43:a4:25:c0:c8:5c:d5:42:df:03:17:0a:7c:38:
a7:38:34:79:d1:96:f0:c1:16:3a:00:06:6a:07:cf:
1b:c4:9f:c6:28:cd:eb:ea:84:a9:2e:be:c9:9b:a6:
7e:eb:79:09:99:da:ab:0a:bb:7e:da:06:35:6b:18:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:A0:50:96:7D:1E:10:AD:B6:CF:41:E2:38:B8:4D:C5:6A:CD:52
X509v3 Authority Key Identifier:
keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/3576B330ABFA11F0A2E07C6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.92.0/23
IPv6:
2406:e7c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:7b:44:fa:89:be:b5:8a:66:86:cb:ba:2f:80:d2:87:c0:8f:
44:9c:56:fb:7f:dc:71:43:3a:ca:88:4f:22:32:83:be:bc:51:
7e:16:9c:18:7d:b2:ed:2d:57:9d:ee:12:12:9b:a1:08:96:0f:
d4:f9:57:33:7a:de:78:84:f0:b5:db:d0:cb:b7:e3:11:02:8f:
57:4c:1f:5d:3a:3b:5a:43:92:47:28:d2:89:4c:26:14:53:23:
50:67:54:26:9a:ac:10:03:94:3b:92:5c:b2:91:fe:6f:11:e5:
37:97:ae:d0:7c:42:a9:f6:61:df:c5:0d:37:48:fa:17:51:18:
e3:d3:23:ba:4f:ac:64:b4:6a:ac:3a:1d:c8:69:a0:73:40:cb:
99:56:70:e0:1c:66:b3:a3:3f:2d:f3:cb:9c:0d:00:c8:33:e0:
ea:f0:22:ba:b9:fd:3a:52:57:a5:16:6c:13:22:ab:8b:e2:6f:
f3:d9:3b:c1:7d:4a:f1:76:42:88:4c:ca:9f:07:35:af:89:c5:
a9:6f:9e:26:d0:5f:00:64:3d:0b:a7:ac:db:0f:c5:a2:c1:7d:
70:4d:1a:64:cc:58:e9:a6:89:64:b3:eb:3d:7c:50:81:3f:63:
f7:97:4c:37:17:4c:58:2c:fd:47:0e:ae:c5:0a:2d:16:bf:c8:
bc:a6:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:38 2026 by rpki-client