
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa
File: 0853C13CA2F011E9B721795CC4F9AE02.roa (raw, json)
Hash identifier: fjEst56rgS/7EdICffHrvLSF3d4oHQwicr2vWH1qxy4=
Subject key identifier: 5C:77:52:C6:01:88:1D:F4:97:8D:26:E6:0E:34:5C:D0:C1:4D:39:27
Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Certificate serial: 0F2C
Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa
Signing time: Wed 26 Aug 2026 17:35:26 +0000
ROA not before: Wed 26 Aug 2026 17:35:26 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139301
IP address blocks: 103.141.6.0/24 maxlen: 24
103.141.7.0/24 maxlen: 24
2405:8c0::/48 maxlen: 48
2405:8c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 17:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3884 (0xf2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983
Validity
Not Before: Aug 26 17:35:26 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f23de-80a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:0d:9d:eb:7c:d2:b7:09:b7:10:56:f7:6f:
5f:6f:b2:d3:5d:93:00:e9:85:89:08:9a:65:7c:f5:
af:0b:cd:ab:99:1b:40:27:fb:1c:c6:3f:72:4a:6a:
ab:fa:84:4a:1d:33:a4:b0:b1:f5:fd:6a:ab:d0:47:
73:63:8b:9a:1c:2e:28:f6:ad:c0:51:ba:73:ae:5f:
f5:f4:d7:f3:3d:d8:fc:fa:b1:de:e4:3c:10:c6:fa:
5c:60:02:79:9c:be:99:17:63:3e:54:6b:12:a9:3f:
fd:be:1d:14:c2:44:00:80:70:db:d2:65:a6:fd:38:
4b:13:75:b4:1a:e8:87:07:c4:12:5e:d7:74:e2:9e:
0d:d2:5a:df:d4:1b:95:e7:a7:79:7a:e4:67:ba:6d:
6c:4c:bb:2f:49:74:78:29:a1:cb:21:76:78:78:fb:
bd:ed:ca:f4:b7:ae:a5:8d:29:90:ef:47:4d:30:bb:
22:e1:ae:4e:82:4f:83:ef:de:8d:aa:16:a2:7a:9f:
3f:c2:c0:29:2f:c1:a4:1a:f0:bb:b9:8b:e3:c0:88:
eb:02:3e:f6:c3:7d:fd:0d:7e:ad:25:af:94:8c:85:
3e:d2:af:9d:b8:99:f1:3b:24:97:3e:32:7c:d4:17:
49:80:22:0f:21:32:90:c9:9e:97:4c:6b:52:39:16:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:52:C6:01:88:1D:F4:97:8D:26:E6:0E:34:5C:D0:C1:4D:39:27
X509v3 Authority Key Identifier:
keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/0853C13CA2F011E9B721795CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.6.0/23
IPv6:
2405:8c0::/47
Signature Algorithm: sha256WithRSAEncryption
00:bc:f5:85:8c:65:60:0f:f9:0a:41:cc:95:a0:23:69:c0:8c:
79:37:4a:75:9d:a4:f6:e5:70:33:9f:ba:f0:ca:d3:33:3b:60:
3c:70:6c:fe:17:2f:73:30:f8:bc:38:33:f6:54:34:1c:e4:a5:
aa:8a:dc:25:f3:22:fb:25:dc:87:cf:3e:22:9b:19:a8:35:8c:
92:6c:bb:cb:c0:f8:ea:6f:31:27:01:00:28:d2:50:31:f7:75:
e6:6d:d9:f4:f6:ae:31:57:6d:ce:6d:2b:2b:dc:97:68:96:5c:
4e:85:e0:5f:b3:21:d2:00:d4:73:80:1a:85:76:73:b8:54:71:
d0:14:5a:c5:6f:1c:ab:91:15:15:95:3c:0a:4a:84:8a:26:ea:
30:73:76:fa:44:8b:88:e9:f5:5a:85:2f:a9:d3:74:1a:e3:fc:
f0:f8:e5:b1:82:08:3a:4a:29:70:7f:6e:04:6e:44:ec:ab:ca:
db:1a:76:e4:56:bb:24:63:bf:ea:85:a5:fe:a3:48:08:f3:d0:
84:42:ed:42:16:9b:8c:e2:52:4b:ca:47:ef:de:bb:67:ab:86:
bb:16:b7:58:96:4d:71:23:91:ff:f5:b7:46:cc:db:11:e7:36:
95:e9:84:8b:00:09:5b:07:0b:bf:e1:a3:34:50:3b:ca:b7:be:
84:3e:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:52:20 2026 by rpki-client