
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
File: B2A621DADA4711F0A0B4C6A990D3641D.roa (raw, json)
Hash identifier: vtYeDrgDVDYpydstxqGvKZDpQ+8m/h2qUkMiKDSPoy8=
Subject key identifier: 34:BF:9B:25:03:EC:A6:A5:CE:91:CF:69:B9:74:7F:58:BF:14:A5:DD
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 0F81
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
Signing time: Sun 01 Mar 2026 19:18:34 +0000
ROA not before: Tue 16 Dec 2025 06:23:12 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141372
IP address blocks: 111.92.158.0/24 maxlen: 24
111.92.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3969 (0xf81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Dec 16 06:23:12 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4910a-6cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:52:db:68:16:7d:cb:dc:a9:23:55:21:5f:
6b:ee:24:4a:8b:d2:89:a6:8a:1c:de:da:2e:78:48:
d5:aa:75:12:2d:25:fa:fb:d7:b1:bd:6a:b0:57:c5:
10:98:17:be:0d:33:13:fa:00:67:b4:d8:e6:c5:f5:
c6:3c:5c:d4:84:a3:91:d1:fe:ac:11:11:9b:aa:d7:
30:23:31:ff:3d:54:8e:69:ea:64:7b:9d:3b:e8:9b:
06:23:10:83:4d:99:c3:26:1c:66:d5:bf:24:52:8e:
54:39:c6:4b:1e:c8:53:a7:74:1d:bf:f5:f8:c6:78:
c8:8e:f6:76:c9:25:02:de:b2:a8:b2:3a:1b:9a:19:
91:3b:2e:fb:f9:db:b0:c7:8b:0e:7c:2e:72:eb:2a:
7d:69:99:f3:ce:a6:9c:01:02:63:a5:8e:ff:df:cd:
19:47:12:15:ce:60:80:11:21:3d:e9:fe:34:e4:b5:
24:cd:48:64:f8:e6:00:a3:d0:f6:c8:5b:8e:d8:ff:
be:5a:4a:63:a6:65:09:74:71:ae:ec:e2:bd:2d:f3:
1a:07:b0:6c:a1:11:52:5a:29:21:40:8c:9e:be:69:
e6:a1:7a:ee:b4:5e:29:47:4a:65:9a:dc:10:76:2c:
ab:15:e6:38:4e:7a:40:21:7d:c7:b2:d4:7a:a8:56:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:9B:25:03:EC:A6:A5:CE:91:CF:69:B9:74:7F:58:BF:14:A5:DD
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B2A621DADA4711F0A0B4C6A990D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
111.92.158.0/23
Signature Algorithm: sha256WithRSAEncryption
05:85:df:2a:a9:18:66:b1:23:c3:6b:e3:13:89:44:14:64:51:
82:7b:ae:4d:d9:e4:41:e4:df:3f:e5:7d:1a:af:71:39:30:36:
a3:dd:a4:74:ba:d7:6f:ab:97:72:6c:ea:9e:bd:e2:06:5b:8f:
92:2d:f3:dc:4f:d1:e8:cd:94:5a:f1:4b:1b:1b:82:49:8d:ed:
7c:4e:88:91:82:b3:70:76:85:97:98:27:e8:31:d4:08:6d:80:
4f:4b:c6:39:b3:73:10:82:c7:cc:8e:a6:36:87:40:03:37:7e:
75:88:f7:41:19:d2:3b:57:06:7d:ec:07:a7:74:8f:00:07:ec:
64:2f:9e:33:c9:27:c2:65:ac:a0:25:31:a9:13:c7:f1:48:e5:
d3:df:ea:c9:2e:41:01:db:74:fe:ac:e2:f1:c5:c8:5f:ee:8a:
c9:ce:16:9e:3e:1e:06:e9:56:7a:97:7f:c1:ca:8a:1f:94:9b:
d3:d9:21:48:29:3b:f8:eb:8c:c1:d2:9f:71:c1:ec:36:1a:42:
3b:1f:94:7e:70:c0:f0:da:df:45:0a:ee:f9:3a:ae:46:da:a8:
6d:77:ed:20:d8:af:fb:3d:56:ca:2a:a5:88:90:52:c6:73:dc:
cf:8e:16:47:a6:b1:d8:44:22:6f:52:f6:31:87:f0:77:5f:da:
3e:5e:92:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:13:42 2026 by rpki-client