
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
File: A915A3543FEC11EE99AC0F43C4F9AE02.roa (raw, json)
Hash identifier: BMS7yIShPQgNQAhR+NlB0waVolj3Ec+7GobiZkhfVxk=
Subject key identifier: 9B:D6:FA:FF:ED:27:2B:5C:91:6B:AA:25:46:A0:DF:88:1D:48:33:D0
Certificate issuer: /CN=A91AF0C6/serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Certificate serial: 0242
Authority key identifier: B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
Signing time: Sat 29 Aug 2026 02:54:10 +0000
ROA not before: Sat 29 Aug 2026 02:54:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151646
IP address blocks: 103.248.140.0/23 maxlen: 23
103.248.140.0/24 maxlen: 24
103.248.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF0C6, serialNumber=B86F2B5ED697A121F4F29D5820372CF14055120B
Validity
Not Before: Aug 29 02:54:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9249d2-ff30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5d:d2:ab:ba:56:5b:e6:a2:ec:3c:3c:36:c3:
27:cc:af:10:8a:45:ec:a9:69:31:19:c3:53:33:c0:
db:48:a1:b5:65:4f:52:9f:f0:eb:1c:ab:cb:07:3c:
bb:6e:ae:90:81:df:15:f1:20:6c:a6:95:44:1c:f9:
34:8a:b2:a0:4a:67:59:83:10:8b:e1:05:06:31:e7:
3d:6f:10:ce:55:4c:db:4f:19:9b:81:ae:31:fb:9f:
08:78:76:13:e3:35:e2:83:5d:98:f1:b3:0a:e9:ca:
1a:86:b2:d1:5d:6f:2b:ff:21:11:fe:ec:1b:03:bc:
fd:8f:8d:f6:8a:3b:33:e4:70:e0:22:5f:df:8a:b3:
e1:39:48:6d:99:54:d5:01:76:6a:a7:82:62:4a:ca:
08:f7:43:11:cb:78:62:b5:fe:3b:82:cc:f0:58:55:
db:db:71:cb:95:88:74:a7:7d:9a:37:27:bb:6d:73:
1b:2f:0c:c4:73:27:1a:8c:e4:62:8e:e0:bf:83:85:
0a:4a:ba:96:af:85:01:96:5f:16:e3:35:38:0c:d6:
95:45:f1:8f:0d:91:2f:b1:b1:fa:ba:45:4f:3a:a1:
1e:5f:fe:03:05:59:f2:d6:d1:cd:ff:59:25:bc:4e:
d3:50:7d:bc:dd:38:89:b0:59:26:ef:40:35:96:51:
2f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D6:FA:FF:ED:27:2B:5C:91:6B:AA:25:46:A0:DF:88:1D:48:33:D0
X509v3 Authority Key Identifier:
keyid:B8:6F:2B:5E:D6:97:A1:21:F4:F2:9D:58:20:37:2C:F1:40:55:12:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/uG8rXtaXoSH08p1YIDcs8UBVEgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uG8rXtaXoSH08p1YIDcs8UBVEgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0C6/3FCEBD223FEC11EEADF5D338C4F9AE02/A915A3543FEC11EE99AC0F43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.248.140.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:41:bc:55:84:92:9a:99:6d:4a:44:36:06:41:1c:4f:e5:39:
2b:17:55:be:35:38:5c:06:97:6e:86:db:f4:88:e7:7f:2e:fa:
09:1b:a5:da:9c:85:70:67:44:8c:92:9b:70:93:a7:b6:79:db:
1d:70:91:d3:7e:c5:0a:61:7f:49:6d:31:56:bd:f1:46:32:6f:
39:5d:a7:df:d2:37:e8:5d:3d:35:6c:11:45:8a:da:b2:f9:be:
72:15:e7:8c:3b:20:ef:d2:e9:0f:18:c2:dd:94:3d:1e:62:3f:
ad:dc:5a:05:46:89:45:77:b4:b5:a2:61:38:d9:28:9d:d2:b5:
33:46:62:31:49:ac:f9:b7:12:ac:2a:1e:fb:10:41:b9:08:9b:
ac:6e:d5:fd:99:f2:e1:4c:22:37:8b:59:d5:da:5c:58:c6:1b:
e6:78:26:29:47:13:af:3c:f3:af:c7:85:58:3d:b0:89:cb:1b:
21:63:0b:df:c8:a2:2e:c6:b2:c3:34:19:c7:14:18:a7:53:f1:
16:0d:c0:27:c8:1f:ab:d0:09:1d:6b:ae:13:4d:f7:c0:34:07:
3b:7a:a7:b0:1f:27:90:b2:c4:9b:5a:8d:42:da:86:47:37:aa:
f9:84:5c:80:5d:5f:1b:07:7b:45:1e:19:eb:21:70:81:97:dc:
e4:45:8f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:02:05 2026 by rpki-client