
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa
File: 15B87C049DF911F085AD790CC4F9AE02.roa (raw, json)
Hash identifier: XomchpB2hRZ+hEaVuLCJFnVrCaHOTQW3NB9zmoA/hhw=
Subject key identifier: E4:04:CC:FB:E7:AB:5F:DF:87:D1:03:9D:9E:E6:C1:44:DA:06:3D:6F
Certificate issuer: /CN=A912F9FB/serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Certificate serial: 19B1
Authority key identifier: BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:01:56 +0000
ROA not before: Wed 03 Dec 2025 18:00:01 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 26337
IP address blocks: 103.28.48.0/22 maxlen: 24
122.201.64.0/19 maxlen: 24
122.201.96.0/19 maxlen: 24
202.146.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 16:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6577 (0x19b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F9FB, serialNumber=BFFDB7EBF45D7C61BF9D23908A9F38C332985970
Validity
Not Before: Dec 3 18:00:01 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47f14-3031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:cc:81:01:49:db:23:26:ed:86:ce:ba:bb:
b4:fb:e0:be:81:3f:e6:00:77:04:8f:38:ae:b2:f6:
ed:fe:e5:57:7e:32:09:3a:6f:15:65:3f:e3:97:28:
16:07:fe:7f:a7:08:65:da:1c:a2:68:95:3f:d7:4e:
4c:cb:21:85:0f:ad:a4:d2:3d:2e:e2:3a:a6:88:cc:
49:e0:a6:30:53:18:8d:29:e7:fa:1e:b5:59:d4:e0:
f9:d5:1e:b6:0a:e9:e2:9e:84:31:7b:46:35:29:0b:
07:f6:9d:b6:96:52:9b:ff:7d:3c:25:dc:9d:aa:e9:
66:95:1c:56:d3:40:29:de:78:ca:3e:97:17:12:27:
b3:12:bd:31:f8:3c:46:21:06:93:96:a4:60:ed:bd:
18:4a:30:f0:a0:2b:99:83:61:09:0a:37:52:90:1c:
1b:bb:e9:42:5b:20:35:63:a3:3c:95:66:56:e6:db:
b2:e4:7b:3b:18:6d:c1:e6:9c:ac:31:55:27:fa:1e:
df:98:ce:6a:9c:8b:32:f8:4d:b3:3e:ad:30:93:17:
2f:63:04:63:22:f4:fe:19:29:19:79:6a:21:73:56:
30:6e:03:1e:24:07:ec:08:83:54:54:51:61:9b:56:
6f:b8:e5:5b:15:e3:ab:70:75:2a:01:e8:5e:d8:66:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:04:CC:FB:E7:AB:5F:DF:87:D1:03:9D:9E:E6:C1:44:DA:06:3D:6F
X509v3 Authority Key Identifier:
keyid:BF:FD:B7:EB:F4:5D:7C:61:BF:9D:23:90:8A:9F:38:C3:32:98:59:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/v_236_RdfGG_nSOQip84wzKYWXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v_236_RdfGG_nSOQip84wzKYWXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F9FB/AF0098D0896F11E78A81C83CC4F9AE02/15B87C049DF911F085AD790CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.28.48.0/22
122.201.64.0/18
202.146.208.0/21
Signature Algorithm: sha256WithRSAEncryption
54:18:dd:4b:cb:52:1c:9e:da:42:d8:46:f3:31:f2:70:7f:a6:
1d:1c:4a:95:c4:19:d5:e1:ab:57:03:a5:ee:b9:43:2b:de:64:
fd:d9:76:77:7d:da:3b:d8:5f:8c:b1:4c:a2:a0:ba:f0:82:86:
10:2d:ca:ec:41:f2:ad:f0:76:9c:aa:07:14:50:4d:54:e7:d7:
24:d2:76:08:6a:9c:58:d4:05:97:ec:03:25:a7:bb:f7:65:75:
2e:96:c6:66:48:c5:32:3d:1f:31:4b:5b:50:b7:40:16:dd:c3:
8e:44:7f:39:53:61:af:52:57:cf:ce:99:dd:9b:cc:8f:b3:97:
aa:50:c4:a3:fc:04:b8:a5:52:f2:a1:64:52:98:4c:cf:de:35:
e5:30:ac:a6:60:8b:ed:bd:53:3c:9b:84:a7:36:e9:c7:d8:49:
de:60:48:96:e0:1b:28:22:d8:44:34:71:e3:22:0f:54:6e:35:
b1:33:9d:de:48:34:c8:86:7f:00:0b:32:e3:fe:5d:6b:ee:02:
c9:cb:03:50:8e:5f:65:12:b2:d7:22:51:4c:cd:bf:2e:94:a2:
6c:20:fa:1f:9f:b1:b9:9d:9a:6b:51:c4:33:91:15:d5:5c:31:
cb:64:a9:57:5c:03:85:fb:de:37:ff:0b:f8:7a:6b:c8:89:43:
f2:67:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:12:52 2026 by rpki-client