
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
File: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier: meK5qbYaDDS3NgP1iQTl9+RC5ogwZonvvBUGE8vHZIw=
Subject key identifier: C6:50:DD:5F:C6:D9:68:00:D0:89:D6:78:AF:E1:9D:51:65:A9:2E:15
Certificate issuer: /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial: 03AF
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
Signing time: Thu 29 Jan 2026 00:21:07 +0000
ROA not before: Thu 29 Jan 2026 00:21:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18390
IP address blocks: 27.96.192.0/19 maxlen: 24
115.69.0.0/18 maxlen: 24
202.172.96.0/19 maxlen: 24
203.23.236.0/22 maxlen: 24
203.29.65.0/24 maxlen: 24
203.29.124.0/23 maxlen: 24
203.31.202.0/23 maxlen: 24
203.56.244.0/22 maxlen: 24
203.57.48.0/23 maxlen: 24
210.1.192.0/19 maxlen: 24
2407:e400::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Validity
Not Before: Jan 29 00:21:07 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=697aa7f3-4cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:f7:1a:19:9f:4f:a8:e7:7e:94:ec:62:0a:
01:9f:8d:d7:63:c4:f0:db:44:7d:a8:a7:7b:07:b5:
9e:dc:eb:39:f2:8c:88:c2:8a:76:4a:14:66:0c:77:
8c:a3:fc:54:9f:92:69:d4:d9:da:f9:e6:b1:1c:c4:
fb:b3:c4:b7:79:54:42:2d:2f:77:a5:15:2a:bf:23:
1f:fd:66:ce:9d:2a:6b:22:c6:cd:a7:24:17:ff:27:
52:dd:d8:56:7e:42:fc:cb:76:f3:e5:e0:90:c2:f3:
4a:97:22:f9:55:4d:8a:9f:ec:92:91:bf:57:df:96:
96:6b:67:ec:54:d3:c3:4b:48:09:c5:32:1c:f7:dc:
61:ac:15:d3:7c:f8:3f:63:0b:b9:df:95:e5:1c:fc:
3e:b8:a8:46:26:d5:6e:79:e6:71:ee:1d:f6:1d:38:
25:97:3b:1d:0f:0d:53:3d:f6:4d:dd:bd:61:a0:74:
39:47:98:e0:b1:b8:6b:50:eb:5a:37:3e:e5:55:eb:
9d:08:2c:32:25:10:cf:ac:47:3c:68:8b:10:d2:6a:
fa:cd:0e:88:18:c1:b9:81:50:15:06:f6:28:6f:44:
ac:37:e8:64:2b:23:87:59:d0:f0:6a:03:51:a6:8e:
63:3a:a2:27:6c:62:01:9c:38:1b:dd:99:bc:db:b2:
05:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:50:DD:5F:C6:D9:68:00:D0:89:D6:78:AF:E1:9D:51:65:A9:2E:15
X509v3 Authority Key Identifier:
keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/63F05DE02F1D11EDA3E29B09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.192.0/19
115.69.0.0/18
202.172.96.0/19
203.23.236.0/22
203.29.65.0/24
203.29.124.0/23
203.31.202.0/23
203.56.244.0/22
203.57.48.0/23
210.1.192.0/19
IPv6:
2407:e400::/32
Signature Algorithm: sha256WithRSAEncryption
97:a2:c3:4e:02:ac:d6:98:9d:61:76:a5:ac:fb:36:9e:2a:14:
5d:db:4d:36:5e:61:5b:3b:96:b3:05:13:00:fe:8d:bb:ad:19:
b8:e0:c4:f3:f9:33:2f:e1:df:43:92:83:21:e6:cc:c4:f1:95:
7f:c9:ef:d3:e6:8a:4f:6c:63:f8:65:f1:9c:48:10:1d:7d:ab:
47:86:79:27:1f:72:f0:69:b7:46:4c:87:df:ca:d3:18:c2:b4:
a2:8b:9d:4b:5a:7e:31:2f:de:a0:b5:a2:79:9c:65:d0:97:e8:
3d:72:23:4c:6e:7b:45:79:72:d0:63:2c:80:ae:fa:72:46:b4:
3c:a9:3a:0d:01:21:30:50:fa:b2:55:1e:ec:64:41:5d:d2:93:
93:8b:1f:11:e0:20:e7:4e:28:7e:93:e9:8c:59:3b:4b:81:67:
d7:49:03:29:e0:1a:74:b9:e7:95:58:64:51:81:f6:36:00:59:
dc:fa:80:dc:f5:c5:4a:0a:97:89:74:f1:b3:a7:92:5b:09:56:
7a:6c:7b:0b:da:9f:16:72:ea:a3:de:02:82:0a:2b:6e:ad:e4:
8e:2f:1e:f3:ac:d3:38:68:b2:cc:86:b7:13:d4:2d:16:f0:46:
d5:70:0b:fe:b0:54:14:38:13:e4:30:05:fa:20:96:c0:2b:54:
31:0c:ca:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:47:25 2026 by rpki-client