
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B49F7F56D2F111F1A7AFF9A71466CEF9.roa
File: B49F7F56D2F111F1A7AFF9A71466CEF9.roa (raw, json)
Hash identifier: w4rozlAgICD7/Pt2a7v/F/lX/gnjgz3bolh3Q9if4GQ=
Subject key identifier: B3:8A:9E:B2:21:2F:F3:99:88:5A:5D:15:43:A6:73:1B:6F:0F:42:5B
Certificate issuer: /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial: 11F7
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B49F7F56D2F111F1A7AFF9A71466CEF9.roa
Signing time: Wed 28 Oct 2026 17:29:05 +0000
ROA not before: Wed 28 Oct 2026 17:29:05 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 152605
IP address blocks: 111.92.128.0/24 maxlen: 24
111.92.129.0/24 maxlen: 24
111.92.130.0/24 maxlen: 24
111.92.131.0/24 maxlen: 24
111.92.132.0/24 maxlen: 24
111.92.133.0/24 maxlen: 24
111.92.134.0/24 maxlen: 24
111.92.135.0/24 maxlen: 24
111.92.136.0/24 maxlen: 24
111.92.137.0/24 maxlen: 24
111.92.138.0/24 maxlen: 24
111.92.139.0/24 maxlen: 24
111.92.140.0/24 maxlen: 24
111.92.141.0/24 maxlen: 24
111.92.142.0/24 maxlen: 24
111.92.143.0/24 maxlen: 24
111.92.144.0/24 maxlen: 24
111.92.145.0/24 maxlen: 24
111.92.149.0/24 maxlen: 24
111.92.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 22:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4599 (0x11f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Validity
Not Before: Oct 28 17:29:05 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6ae230e1-20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:03:ad:e9:f8:bd:b4:97:b7:8b:68:6e:32:
8a:c3:08:3f:11:81:e0:b5:b7:1e:6a:b0:29:4a:12:
0d:b8:cd:67:f2:51:47:56:78:19:a4:e1:af:83:1a:
5d:58:a3:1f:52:2c:1c:1d:cd:c3:d0:90:84:69:ca:
f4:97:77:40:05:98:5d:f7:ca:4b:01:19:03:ad:ef:
18:49:9f:50:f1:33:29:36:7a:c1:5b:16:34:e4:15:
9e:bf:9e:77:a8:31:5b:5e:59:09:07:0e:32:57:41:
bc:d8:f3:38:fb:0f:a7:22:a3:d5:fd:ea:92:8e:10:
6f:b6:1d:cb:7f:20:f0:b2:2e:b0:99:1e:ed:7b:2f:
7f:60:51:cb:c5:b1:97:df:51:46:47:de:5b:d7:30:
8f:21:f8:44:8b:42:09:de:33:31:55:18:95:b0:c4:
75:c1:e3:38:1f:b0:a5:a9:02:f2:85:67:64:1c:21:
a4:df:0f:52:24:80:c0:b0:23:29:4a:a4:2b:4d:98:
f1:b4:fa:8f:0a:84:52:13:0a:91:23:30:86:ba:6f:
62:bb:04:21:b2:28:3e:fa:60:87:51:b8:b6:d8:a4:
0d:d5:39:2b:bf:5a:00:43:99:08:53:d2:69:16:fa:
bb:8f:55:31:27:24:ae:dc:0f:9e:c4:8f:14:9b:03:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8A:9E:B2:21:2F:F3:99:88:5A:5D:15:43:A6:73:1B:6F:0F:42:5B
X509v3 Authority Key Identifier:
keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/B49F7F56D2F111F1A7AFF9A71466CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
111.92.128.0-111.92.145.255
111.92.149.0-111.92.150.255
Signature Algorithm: sha256WithRSAEncryption
97:86:17:15:9a:70:a2:88:57:41:b5:a4:72:94:9a:5e:b5:a1:
5f:ce:d6:8d:1a:13:21:36:23:98:01:f0:d2:dc:65:bd:9a:91:
50:06:af:a4:03:19:39:f2:5b:a3:42:81:de:f4:74:db:3a:6d:
f6:27:d4:86:e4:8d:00:b8:d3:42:47:fb:97:35:61:ca:46:d2:
b5:ca:b6:45:e8:e9:43:37:0b:dd:42:15:b0:14:7c:c9:04:8c:
7b:3f:55:4b:a2:f0:d7:8a:fb:e5:da:82:bf:d3:97:3a:ec:9e:
88:6b:63:2a:77:d4:6e:ad:26:fc:bf:ce:dd:a7:d8:41:fd:00:
7d:6d:b8:97:f0:6b:f1:f7:b6:fe:10:68:e7:63:58:60:97:0d:
f5:17:06:ad:ea:1f:20:f8:ec:70:87:23:ec:ea:f9:b1:5e:c2:
18:59:e8:60:73:a3:cd:21:a9:3f:a0:55:18:31:ce:a4:83:27:
f2:6a:40:5f:db:bc:ba:bb:2f:59:37:2b:54:36:b0:4d:6a:42:
f0:fd:03:f7:f9:73:63:c5:52:09:df:74:da:9d:26:5e:2a:be:
1b:47:47:ae:78:db:0b:41:fd:c6:5a:98:2e:70:8d:9e:db:ed:
c8:d5:34:1f:af:6c:55:70:7c:e6:41:ca:6e:1f:ca:2b:f8:82:
2c:fc:d2:ab
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgICEfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYxMDI4MTcyOTA1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWUyMzBlMS0yMGFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2X0Dren4vbSXt4tobjKKwwg/EYHgtbcearApShINuM1n8lFHVngZpOGvgxpd
WKMfUiwcHc3D0JCEacr0l3dABZhd98pLARkDre8YSZ9Q8TMpNnrBWxY05BWev553
qDFbXlkJBw4yV0G82PM4+w+nIqPV/eqSjhBvth3LfyDwsi6wmR7tey9/YFHLxbGX
31FGR95b1zCPIfhEi0IJ3jMxVRiVsMR1weM4H7ClqQLyhWdkHCGk3w9SJIDAsCMp
SqQrTZjxtPqPCoRSEwqRIzCGum9iuwQhsig++mCHUbi22KQN1Tkrv1oAQ5kIU9Jp
Fvq7j1UxJySu3A+exI8UmwM3yQIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFLOKnrIh
L/OZiFpdFUOmcxtvD0JbMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvQjQ5RjdGNTZE
MkYxMTFGMUE3QUZGOUE3MTQ2NkNFRjkucm9hMDUGCCsGAQUFBwEHAQH/BCYwJDAi
BAIAATAcMAwDBAdvXIADBAFvXJAwDAMEAG9clQMEAG9cljANBgkqhkiG9w0BAQsF
AAOCAQEAl4YXFZpwoohXQbWkcpSaXrWhX87WjRoTITYjmAHw0txlvZqRUAavpAMZ
OfJbo0KB3vR02zpt9ifUhuSNALjTQkf7lzVhykbStcq2RejpQzcL3UIVsBR8yQSM
ez9VS6Lw14r75dqCv9OXOuyeiGtjKnfUbq0m/L/O3afYQf0AfW24l/Br8fe2/hBo
52NYYJcN9RcGreofIPjscIcj7Or5sV7CGFnoYHOjzSGpP6BVGDHOpIMn8mpAX9u8
ursvWTcrVDawTWpC8P0D9/lzY8VSCd902p0mXiq+G0dHrnjbC0H9xlqYLnCNntvt
yNU0H69sVXB85kHKbh/KK/iCLPzSqw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:28:37 2026 by rpki-client