
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/EF5A16E89F3E11EB852AB17AC4F9AE02.roa
File: EF5A16E89F3E11EB852AB17AC4F9AE02.roa (raw, json)
Hash identifier: WP3GWDQymjlRsnSc3HAqORtZqI7XnBdju+4ENbLFk6Q=
Subject key identifier: 06:DB:AA:4C:D9:B5:DA:77:F1:94:B7:31:12:54:1B:39:8D:59:86:7C
Certificate issuer: /CN=A915C83A/serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Certificate serial: 082C
Authority key identifier: 21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/EF5A16E89F3E11EB852AB17AC4F9AE02.roa
Signing time: Fri 02 Oct 2026 21:41:18 +0000
ROA not before: Fri 02 Oct 2026 21:41:18 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 63962
IP address blocks: 103.153.141.0/24 maxlen: 24
103.168.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:20:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C83A, serialNumber=21E9359DE9607A78CCD3590E0B449CB52B17B6BB
Validity
Not Before: Oct 2 21:41:18 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ac024fe-63bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:d0:68:7a:35:13:69:35:44:49:3d:51:94:
ac:31:38:0c:b2:e5:72:72:9d:91:a8:16:1d:18:20:
b1:bd:e2:ae:0d:44:fd:53:cb:b5:3f:da:a5:3a:37:
32:e1:17:d3:c3:16:87:49:35:55:99:eb:c8:af:f9:
c2:fc:d5:6f:a3:62:8e:75:62:7d:6e:ca:06:9e:9b:
ee:32:84:c8:d9:58:09:05:20:4c:4f:ad:bd:22:6b:
44:5f:79:fc:30:24:fb:68:9b:d0:91:0c:9d:d8:bf:
bb:06:72:02:26:db:cf:7a:f1:0e:f2:5c:74:01:e4:
e1:99:64:0f:22:e4:d2:0a:da:47:ef:f6:37:43:2a:
18:17:54:d2:17:ce:72:6c:31:30:15:e9:bc:81:55:
42:ac:c7:f3:6d:6a:e8:37:0c:8d:96:aa:1d:c4:3b:
02:41:42:e1:d2:a3:16:3b:29:a9:f0:b4:44:04:94:
46:2a:ff:ef:2d:ee:15:17:8e:4f:ff:5d:27:e9:e6:
65:01:f8:1a:60:58:15:87:5a:bb:0f:a1:5b:89:2e:
54:c1:56:89:68:a4:a2:a7:f0:08:b8:30:e5:5c:ab:
10:0d:b2:cf:2d:9c:2d:75:13:ed:ee:de:e0:06:6b:
db:fa:87:06:76:42:66:ef:60:8c:b4:0c:43:e9:64:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:AA:4C:D9:B5:DA:77:F1:94:B7:31:12:54:1B:39:8D:59:86:7C
X509v3 Authority Key Identifier:
keyid:21:E9:35:9D:E9:60:7A:78:CC:D3:59:0E:0B:44:9C:B5:2B:17:B6:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/Iek1nelgenjM01kOC0SctSsXtrs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iek1nelgenjM01kOC0SctSsXtrs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C83A/47170CD83DEC11EB904A0C65C4F9AE02/EF5A16E89F3E11EB852AB17AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.141.0/24
103.168.56.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b2:f2:5a:12:4c:29:16:36:0d:20:b9:67:11:61:f6:99:ce:
fd:80:3d:e1:72:91:6f:ef:02:23:70:33:be:10:5b:b6:45:c6:
6e:18:66:c5:81:0a:73:89:33:b7:a8:4f:bb:0d:81:41:7d:7c:
4f:c7:fc:cf:af:db:f2:e4:5f:52:ef:5c:8b:be:ea:88:ee:c6:
3f:82:6b:5d:e6:1e:0e:72:5e:36:0d:bb:ec:3c:af:4c:93:7b:
d1:11:f1:07:9f:00:69:34:85:d2:df:74:e3:95:83:f0:e1:9b:
31:e5:68:b9:03:a5:d2:08:ae:8d:fb:64:51:87:b3:be:e8:34:
50:17:27:13:ca:83:8e:d9:9e:b4:06:46:15:a4:0c:ae:08:7c:
73:73:27:7a:10:3b:16:0f:5f:2d:6f:c8:8f:e4:b7:ed:f8:8c:
c7:a3:cd:58:3a:ae:9d:67:f3:b1:02:eb:05:f0:f8:f9:0e:2f:
5f:2f:5a:e3:43:40:81:81:d4:48:9f:ab:4f:04:75:d6:8f:cf:
06:3f:99:30:69:04:38:7b:84:30:87:11:d0:9d:b9:28:02:5d:
92:6f:76:8d:4a:21:c7:43:1d:bc:de:bb:fe:11:a9:61:1f:0d:
67:bc:08:a5:5b:e5:f5:62:0e:7a:a6:64:27:13:4a:b7:8a:ec:
88:48:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:49:03 2026 by rpki-client