
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6D2E74CE119511F18720E261383D8C67.roa
File: 6D2E74CE119511F18720E261383D8C67.roa (raw, json)
Hash identifier: 8hV+I/mqYZMZ3vIhGJc/3XoKmvvL+nj8+XqDRjhEKdk=
Subject key identifier: 90:DB:0B:35:28:0A:03:B5:20:E2:9C:53:60:CD:05:D8:78:1D:C6:95
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 10FE
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6D2E74CE119511F18720E261383D8C67.roa
Signing time: Fri 28 Aug 2026 19:39:22 +0000
ROA not before: Fri 28 Aug 2026 19:39:22 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131275
IP address blocks: 111.92.151.0/24 maxlen: 24
111.92.152.0/24 maxlen: 24
111.92.153.0/24 maxlen: 24
111.92.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4350 (0x10fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Aug 28 19:39:22 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a91e3ea-a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6b:3d:ce:64:23:af:0c:21:b7:c1:46:2e:a0:
e0:dc:e7:80:d2:61:ff:51:9a:28:02:30:f6:8a:bb:
db:fb:20:c9:79:1c:09:a8:bd:c2:84:8a:35:57:45:
6b:cd:37:ec:dd:db:55:e9:02:6e:fd:f8:ba:5b:ad:
1b:63:2d:09:75:9e:65:55:49:48:d3:b9:06:17:a5:
e5:00:6d:c1:8f:ae:3c:32:c8:b7:7d:b2:40:d9:c7:
9e:0d:ec:84:8b:b7:96:50:dd:4f:93:5d:45:d1:f0:
63:11:ba:c3:b5:36:b9:c3:9b:4b:9b:93:8b:2d:99:
58:51:7d:df:e8:95:25:8c:c3:3c:34:96:98:d0:d9:
c8:13:3d:4a:cd:31:bc:92:9e:ee:92:09:7d:f2:e1:
6b:08:78:f6:64:6e:45:a0:2e:ae:fd:8a:30:8f:ba:
93:81:f1:43:97:50:f4:b4:97:c8:6b:1e:d2:9a:c5:
1c:c7:6f:2b:6e:e4:71:8d:84:a8:8c:86:8d:53:14:
0d:fd:bd:fa:6c:e7:13:13:39:bf:f2:54:c6:fe:87:
ef:97:ed:d1:19:06:04:c2:f7:1c:8c:3a:c5:8f:5f:
69:a0:7e:0e:df:46:b8:47:06:4e:c1:f3:73:f6:e3:
a2:bc:1e:8f:5d:9e:a3:fc:1d:4d:19:73:52:3d:a6:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DB:0B:35:28:0A:03:B5:20:E2:9C:53:60:CD:05:D8:78:1D:C6:95
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/6D2E74CE119511F18720E261383D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
111.92.151.0-111.92.154.255
Signature Algorithm: sha256WithRSAEncryption
4d:19:20:88:46:31:34:1e:c7:95:47:c5:c2:5a:94:f2:50:f5:
60:c9:6f:4d:4d:7b:79:69:c6:47:10:3a:36:47:75:fb:d5:0f:
15:78:85:1e:9a:6e:2c:6b:87:cc:83:c0:b8:ab:66:27:e2:0d:
da:cd:e3:8d:5a:87:a7:6b:8c:4c:88:d9:3e:4a:dc:2d:98:b0:
bf:46:65:9f:63:c9:1f:9d:2b:ba:58:76:70:75:57:f2:77:23:
3b:3e:e6:2f:7d:6b:d3:30:10:87:03:f6:e9:99:d3:81:06:8a:
f6:95:ec:96:70:a9:35:ac:39:f8:21:d9:77:4f:1d:ca:3e:e8:
c4:d5:96:e4:ff:16:92:b1:ab:50:9a:8a:35:e9:bb:64:2a:1f:
6d:df:38:56:d6:b0:fe:06:42:e1:c1:71:55:14:13:c5:07:cc:
5f:15:4b:01:12:8f:df:4c:fa:09:6b:b0:10:27:81:d0:94:5a:
e0:10:7e:78:14:38:1b:84:2b:a0:ec:d1:ee:b6:3d:be:7f:e9:
b6:21:84:2a:91:96:e4:80:c0:74:e7:d9:0b:14:41:73:42:cc:
d7:e4:2c:13:7e:34:24:a2:e7:3d:fa:94:a2:18:98:21:52:62:
b0:b1:fc:d1:05:c6:3b:5d:4d:25:57:8a:0f:40:a5:da:c8:12:
8d:0d:44:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:38:40 2026 by rpki-client