
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/2920764254CC11EF84CA4F17C4F9AE02.roa
File: 2920764254CC11EF84CA4F17C4F9AE02.roa (raw, json)
Hash identifier: G2hd7aTBtXyVdHJzvOwWg0asx4SjusrRdgXjTfzqrt8=
Subject key identifier: B8:67:59:C7:62:C9:68:91:D6:BD:C4:65:78:61:7D:62:B8:74:7B:C4
Certificate issuer: /CN=A915392C/serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
Certificate serial: 017E
Authority key identifier: E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/2920764254CC11EF84CA4F17C4F9AE02.roa
Signing time: Wed 05 Aug 2026 06:54:27 +0000
ROA not before: Wed 05 Aug 2026 06:54:27 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131219
IP address blocks: 103.68.94.0/24 maxlen: 24
103.120.247.0/24 maxlen: 24
2001:df3:e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl
rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 04:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915392C, serialNumber=E8804B7E104D6576F0C8DC482A51B5E367AA1F77
Validity
Not Before: Aug 5 06:54:27 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a72de23-86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:00:2b:fd:72:76:1c:80:fe:83:25:f7:c6:16:
95:05:e9:25:4f:9f:92:12:ad:b1:05:42:aa:b1:1d:
e7:5f:c8:e7:f3:03:1a:1f:53:c6:12:48:16:2f:7d:
0e:d1:89:4e:c0:f7:12:8e:69:e1:67:9d:d2:de:e3:
a5:87:45:93:a9:69:7d:22:af:76:6e:07:d3:9f:85:
34:2b:e6:95:37:a5:35:0b:71:0e:ee:d1:0b:ea:4f:
b5:6d:b9:9b:d0:d2:d2:00:23:0a:f3:d5:f7:27:be:
c9:d4:6a:e5:49:43:77:09:69:b6:14:db:a2:db:8c:
c1:e5:4a:6b:b2:38:01:92:a5:cd:08:6b:74:92:9f:
fb:c9:88:f6:2b:1c:bf:e8:f5:ef:be:2d:a8:d0:b4:
ed:41:eb:27:1e:08:fa:b3:d6:08:ea:1d:7e:8d:20:
44:bf:da:2a:b3:a1:c5:6d:00:5e:1f:52:b4:a5:07:
be:31:20:b4:0b:c0:d7:41:21:02:a1:7b:78:be:0d:
db:22:5a:4b:05:7e:4e:d6:dc:e6:b9:10:de:fe:cd:
c7:d1:6f:5f:52:f7:1f:b2:82:65:6b:34:85:52:27:
35:32:81:20:d7:fd:a8:74:89:fc:c3:4b:fc:46:9f:
73:95:e3:53:eb:a3:3f:46:35:77:68:77:37:c8:e7:
a2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:67:59:C7:62:C9:68:91:D6:BD:C4:65:78:61:7D:62:B8:74:7B:C4
X509v3 Authority Key Identifier:
keyid:E8:80:4B:7E:10:4D:65:76:F0:C8:DC:48:2A:51:B5:E3:67:AA:1F:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/6IBLfhBNZXbwyNxIKlG142eqH3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IBLfhBNZXbwyNxIKlG142eqH3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915392C/A6404A4A54CB11EFA1627016C4F9AE02/2920764254CC11EF84CA4F17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.94.0/24
103.120.247.0/24
IPv6:
2001:df3:e00::/48
Signature Algorithm: sha256WithRSAEncryption
ce:fd:8c:c0:d6:e3:2c:be:4c:1b:1c:48:a2:c6:60:7f:3d:2d:
54:d6:fe:55:83:fb:71:1c:32:c9:b1:17:8d:65:67:84:3d:47:
c7:30:ea:08:13:a4:0d:ce:ff:79:6f:1c:e0:2e:86:80:8f:39:
ff:fb:2a:1c:3a:1b:1d:92:ad:e7:9e:75:e8:66:28:37:c7:8e:
39:f9:43:09:9f:cf:33:c4:ef:18:bf:9f:e3:2c:11:93:45:b4:
8a:fe:88:8e:6b:88:c4:56:a4:9a:f3:a8:ca:ef:f3:c2:73:2a:
88:02:79:d6:5a:a4:b7:6f:8f:d4:43:48:f3:2b:96:c5:89:dc:
6c:ad:96:e3:d0:ff:2d:65:8d:85:04:24:c3:68:92:54:5b:7f:
69:0d:16:ce:7f:57:05:a5:7c:7d:c8:19:d0:f7:34:51:1a:38:
19:f0:13:44:70:97:9c:d9:19:e8:56:22:ba:ca:d7:13:52:4c:
77:07:4a:22:66:9c:be:49:d3:48:5f:f1:78:25:83:a0:b6:5b:
7d:85:b9:85:65:2c:67:64:71:06:46:cf:6d:9a:a1:a2:2c:aa:
1c:c8:cb:5e:2d:43:20:5a:19:8e:8f:62:9a:a9:e9:b3:9d:ba:
cd:a7:d8:53:67:55:b1:d9:be:8f:38:9b:f1:d2:dd:51:db:ee:
1a:99:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 16:29:46 2026 by rpki-client