
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/15FB452EE46E11EABA2FD316C4F9AE02.roa
File: 15FB452EE46E11EABA2FD316C4F9AE02.roa (raw, json)
Hash identifier: FkqjDfVUmQMN96zXrlCTi6buAdC6XkNUVbHR27Lovec=
Subject key identifier: E8:CF:4B:E9:19:9C:BA:B3:A1:17:A6:95:0E:04:91:04:77:5D:54:0E
Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
Certificate serial: 0CBB
Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/15FB452EE46E11EABA2FD316C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:24:21 +0000
ROA not before: Fri 28 Mar 2025 18:59:35 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135346
IP address blocks: 103.109.212.0/22 maxlen: 22
103.109.212.0/24 maxlen: 24
103.109.213.0/24 maxlen: 24
103.109.214.0/24 maxlen: 24
103.109.215.0/24 maxlen: 24
2402:7e40::/32 maxlen: 32
2402:7e40:212::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl
rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3259 (0xcbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8
Validity
Not Before: Mar 28 18:59:35 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a405c5-6411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:c0:0b:5e:12:a5:61:ff:12:e9:bd:a6:c5:
9e:29:4a:94:12:e1:9e:a5:05:77:d2:22:31:09:4e:
91:30:34:52:18:d1:a5:81:53:e2:52:05:a6:e5:a7:
d1:c4:02:ae:94:78:db:7d:bc:d1:b3:63:46:6d:8f:
6a:08:c4:2c:71:0f:20:6c:b6:90:cb:30:ea:de:67:
3a:ba:84:26:b0:87:bc:6b:2e:ad:c9:bb:b6:a2:0d:
ce:82:2b:c0:49:23:51:df:a8:86:00:43:62:f2:8d:
8f:87:7d:86:3f:22:2c:ab:47:ce:5e:1c:d4:a7:cf:
89:3b:5b:ab:75:04:99:35:39:b9:d8:7b:a9:71:80:
9b:e4:f4:e9:14:0c:c7:e5:17:d1:b9:2a:87:e3:6f:
95:8d:ef:e9:9e:17:2a:32:f1:29:69:fc:98:7f:6d:
c6:4d:11:0d:85:96:68:41:36:4e:ed:01:f5:93:c9:
6c:11:fc:d7:8f:15:ff:d7:ed:53:b4:4c:7d:38:4e:
60:5b:8c:d3:9a:a7:2d:a0:b6:80:3f:2d:1f:6d:a5:
6f:a3:e0:0e:2c:2c:8c:8d:83:83:f9:7d:da:12:93:
fe:e2:eb:6b:52:27:31:5b:4f:b0:68:65:91:3f:a6:
02:a4:f7:ea:f4:8e:28:10:ae:b7:3f:b2:5a:49:68:
78:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CF:4B:E9:19:9C:BA:B3:A1:17:A6:95:0E:04:91:04:77:5D:54:0E
X509v3 Authority Key Identifier:
keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/15FB452EE46E11EABA2FD316C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.109.212.0/22
IPv6:
2402:7e40::/32
Signature Algorithm: sha256WithRSAEncryption
77:6b:4b:ea:af:23:46:97:21:3c:70:70:2f:1d:8b:b8:cf:7f:
d1:2b:53:ed:17:e6:0c:fe:6d:8e:01:7b:cd:a4:6f:92:3b:b8:
7a:7c:27:6f:14:72:5a:f5:5b:a6:ae:a8:79:22:95:1c:df:25:
3f:94:92:3e:b4:98:33:49:e7:76:6f:82:3d:27:55:a5:e7:22:
be:43:a7:94:f3:69:de:f8:f1:e1:ad:6a:9d:06:73:58:e0:74:
dd:66:19:da:f0:5b:59:f9:64:ab:35:47:96:b5:6b:4c:1f:e2:
19:9c:fe:e2:1f:ed:8c:61:c4:44:c8:87:db:a2:20:f6:92:8e:
4e:e4:20:ad:dc:a5:b6:25:3a:6d:68:88:f2:41:da:3c:bb:5e:
a4:88:b9:25:6c:c2:8c:f1:65:09:c7:25:9b:4c:93:84:7b:da:
e0:ea:12:5d:50:5f:e8:11:09:34:6c:c1:12:57:58:8e:c5:3d:
05:f8:2d:cb:de:3f:ae:74:a7:b5:e3:1b:76:c4:47:98:76:15:
e9:a8:f2:a5:25:46:2b:17:e2:27:fc:79:53:7d:1e:6d:15:f2:
54:2c:e9:51:57:b2:01:9f:e7:1c:b6:2a:4a:40:ee:be:8b:41:
1c:df:fb:e0:4b:b2:bd:a8:69:f6:e2:98:09:03:f3:48:f7:44:
1c:5b:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:40 2026 by rpki-client