
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/BAC363F00DDD11EBAF7D927FC4F9AE02.roa
File: BAC363F00DDD11EBAF7D927FC4F9AE02.roa (raw, json)
Hash identifier: U7Xb+WB2Zy8rYE3wkWAyIpelmLIP9RIDmbOk5JFzEG4=
Subject key identifier: 4B:66:0D:28:54:E7:7F:2F:BA:E9:52:D1:C5:3E:32:50:5E:77:A9:39
Certificate issuer: /CN=A915FD96/serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Certificate serial: 0827
Authority key identifier: CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/BAC363F00DDD11EBAF7D927FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:24:52 +0000
ROA not before: Tue 22 Jul 2025 22:03:29 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.117.141.0/24 maxlen: 24
103.144.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FD96, serialNumber=CD8BBE706CCD9B5532CF3EB1D5FBBD7D3E3EBEA4
Validity
Not Before: Jul 22 22:03:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a43014-1ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:ee:c0:64:ce:75:63:a2:85:cc:12:62:1c:
a1:3e:b9:71:76:1e:79:c5:5a:0a:3b:fb:ac:80:eb:
50:7a:c5:50:41:12:a6:40:e8:53:63:da:08:26:5a:
1d:75:12:d5:9f:ef:98:28:db:64:ee:05:12:ce:a1:
96:21:c3:04:98:1e:32:2e:f6:1f:f3:95:7b:b6:1b:
a8:ff:0e:19:4e:76:53:59:cd:0d:5b:08:71:c9:6d:
1c:7c:46:72:8f:b3:9f:e0:35:ac:53:63:8a:ce:39:
be:9d:0c:34:fa:eb:b4:a9:73:86:9c:d8:68:80:d3:
bd:8b:27:16:90:04:d1:f5:4b:0e:3d:2f:d6:65:6d:
be:6c:24:a6:df:53:48:99:10:e3:77:a3:2e:c0:89:
0b:38:4d:0c:c0:50:3d:bf:18:27:b6:12:da:d6:7f:
de:a8:af:92:f6:5a:02:ae:c9:03:e7:b0:60:d1:97:
d0:ab:a0:be:b2:76:47:18:77:9f:34:10:c3:90:7c:
96:32:50:45:64:99:c3:92:e6:10:d7:67:d3:34:36:
b3:ef:a0:cc:14:74:09:4b:a8:ec:2f:e2:80:0a:91:
4f:0b:d5:cf:6c:68:98:a6:f7:08:3d:10:0a:70:60:
60:c4:07:ac:6f:37:19:9c:52:ec:bc:e3:b3:69:da:
91:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:0D:28:54:E7:7F:2F:BA:E9:52:D1:C5:3E:32:50:5E:77:A9:39
X509v3 Authority Key Identifier:
keyid:CD:8B:BE:70:6C:CD:9B:55:32:CF:3E:B1:D5:FB:BD:7D:3E:3E:BE:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYu-cGzNm1Uyzz6x1fu9fT4-vqQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD96/7566F5260DDB11EBAF7B107CC4F9AE02/BAC363F00DDD11EBAF7D927FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.117.141.0/24
103.144.139.0/24
Signature Algorithm: sha256WithRSAEncryption
63:65:9a:de:4b:c4:f7:fe:c1:49:76:2a:76:9f:47:20:48:30:
2a:89:aa:0d:0e:68:2d:fc:27:59:52:8c:1c:a1:1b:1f:25:15:
39:c7:41:ac:6a:90:40:7c:ad:ed:c8:c2:17:2b:77:09:0d:8a:
10:7e:a9:63:df:8d:dd:11:bf:c1:c1:d5:27:8b:f8:10:f7:e0:
68:ef:a5:c1:7d:04:ac:33:42:08:6d:1b:d5:6e:9c:30:9e:06:
6d:54:0b:33:f8:e9:3d:3e:75:c7:4a:a7:f8:ef:f7:2f:a6:f7:
48:98:cc:07:28:8b:e8:58:fa:40:6b:4f:96:c6:82:c7:9c:07:
26:b3:2b:e4:5f:00:75:db:1f:b8:c5:46:db:5f:c1:10:98:4c:
c8:44:e7:20:4c:cb:ee:32:8f:a5:38:38:70:65:02:8b:da:75:
dd:24:22:9d:31:01:02:b9:88:b9:2a:16:01:f2:b2:76:04:50:
33:19:c5:bc:7d:17:43:62:3f:49:d4:59:d0:98:e5:7c:5d:1d:
d3:d7:42:e8:5f:3d:c4:7c:6d:de:5a:43:c7:c2:cf:0b:d2:79:
95:7f:97:14:5f:18:fa:8c:cf:37:f5:ce:88:c3:f0:61:c6:56:
7e:38:c9:0d:ee:9a:8d:75:af:1e:f4:6c:9f:a7:77:74:5c:96:
0f:b3:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:23 2026 by rpki-client