
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/A068B0C4F54511EF88062F4FC4F9AE02.roa
File: A068B0C4F54511EF88062F4FC4F9AE02.roa (raw, json)
Hash identifier: 5zcvJSt2efyJ2mxfcHBGUb0jglP48w26ykrEskIQ7pk=
Subject key identifier: C7:24:8F:B3:11:06:E7:6F:09:9C:67:10:16:B6:ED:63:D1:E8:3F:CA
Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Certificate serial: DC
Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/A068B0C4F54511EF88062F4FC4F9AE02.roa
Signing time: Sat 11 Apr 2026 06:45:03 +0000
ROA not before: Sat 11 Apr 2026 06:45:03 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.227.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3
Validity
Not Before: Apr 11 06:45:03 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d9edef-ac6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:b7:eb:c8:11:a7:85:f3:d4:40:32:27:b8:
de:1c:41:c0:4a:06:3c:52:5c:65:2e:96:44:b0:e5:
b9:22:68:b2:51:b0:b9:41:96:dc:85:24:e6:cf:f3:
71:e2:21:0d:64:f9:62:20:bd:02:f1:8b:32:4d:8a:
8f:a1:12:fd:ef:a0:f3:d1:52:99:41:80:3b:e7:57:
fa:6d:f9:15:52:88:13:f7:1a:98:db:53:d9:50:36:
3d:2a:2f:d0:71:a3:1f:aa:04:40:fa:cd:27:2c:22:
0d:3e:bc:0c:fd:2e:df:a7:c6:69:12:cc:d1:73:50:
3f:8c:2b:01:eb:a1:94:5e:16:54:e0:4c:ed:7a:bf:
7e:bd:4e:d6:c8:fa:02:d4:2a:81:37:d7:fe:e5:05:
79:bc:48:f8:27:cf:fd:a1:f7:c1:52:35:d6:4b:67:
b2:a9:69:d3:b1:10:37:1a:23:ab:8b:96:ae:53:e3:
ae:08:23:6c:1b:df:33:d0:88:d2:5a:bf:80:a6:6e:
70:70:29:9a:51:c1:e1:e3:3a:95:26:b3:85:98:87:
6c:ab:80:2a:cb:49:5e:10:1f:1a:d6:50:4f:8d:db:
e2:8c:25:c3:bc:74:01:74:4d:94:89:04:cc:d0:97:
8b:a7:8e:fd:5a:7c:6b:67:e6:fb:3e:f5:8a:45:3c:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:24:8F:B3:11:06:E7:6F:09:9C:67:10:16:B6:ED:63:D1:E8:3F:CA
X509v3 Authority Key Identifier:
keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/A068B0C4F54511EF88062F4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.227.15.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e6:4b:e6:1e:b6:bb:13:c7:ff:b9:c4:69:8e:ed:b8:3f:f0:
b5:e6:a9:0f:b7:e2:f5:d2:19:df:f0:c8:d9:60:cf:4e:95:0f:
57:20:67:af:94:9d:41:4b:29:8e:5b:1a:fe:86:33:fa:7c:5a:
8b:0f:0f:78:aa:2f:f6:3d:4f:2b:5f:5b:19:eb:df:1a:96:8d:
6d:ad:2a:d5:5a:31:01:4f:8c:4a:24:80:cd:83:27:f3:4e:f0:
10:22:8d:57:a1:cb:24:9f:25:7f:33:4d:8d:4f:4c:f2:e5:8e:
77:e9:c4:20:20:32:f5:11:22:1e:07:64:49:47:10:27:52:78:
9b:dc:e8:08:57:3c:e4:21:ad:7e:48:6e:3e:14:93:e3:97:b1:
3c:c9:34:b7:92:72:ae:36:36:d2:9a:5a:cc:2d:b1:3e:d1:9d:
69:c1:26:c7:f5:f5:f8:0c:ab:02:e4:5b:7b:7e:e8:bb:c1:0e:
49:fb:46:0b:9b:a0:59:cc:d8:e0:f6:3b:4c:53:f8:ec:4d:0f:
42:23:10:2a:a0:a3:7f:4f:82:13:c8:bc:79:73:9a:f1:9e:f5:
6b:d5:16:c7:b6:3c:6f:71:ec:62:21:0d:ec:ff:92:d4:60:63:
8b:63:f8:d1:c0:a4:1e:f7:a2:9e:ba:df:85:0e:2b:c2:6f:59:
7f:38:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:44 2026 by rpki-client