
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
File: 449009F2387C11ECAE655C13C4F9AE02.roa (raw, json)
Hash identifier: Mu5dJqrYuOmuHmShAZpT2rCw/HyQhVg/PHnhCY5b1hI=
Subject key identifier: 0D:74:F6:C7:C7:B1:0A:0F:91:5B:46:E5:94:81:CA:34:A2:18:49:17
Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial: 054F
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
Signing time: Tue 05 May 2026 00:29:24 +0000
ROA not before: Tue 05 May 2026 00:29:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142009
IP address blocks: 103.164.146.0/23 maxlen: 23
103.164.146.0/24 maxlen: 24
103.164.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Validity
Not Before: May 5 00:29:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f939e3-6daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:88:b0:dd:d7:46:fe:2c:41:b7:06:c6:2e:
2a:68:02:29:67:6e:36:7f:dc:20:f1:1a:69:70:5d:
6b:b5:b2:26:70:6c:b2:95:74:2a:e3:5d:6c:6b:f2:
ef:06:b0:2c:e8:1d:83:d9:a0:a3:2e:5f:40:db:4a:
61:50:30:06:d5:b7:0b:b4:5e:22:31:6c:0a:98:24:
3d:ae:6e:e6:c5:cb:f5:c3:41:22:34:13:82:86:7e:
d2:c5:8d:2a:6f:2d:94:22:de:b5:a1:4c:fa:22:dd:
21:82:da:38:30:8a:7f:cf:79:ae:d4:61:de:67:9e:
fa:bb:03:ad:ad:60:68:1c:11:fd:f1:05:2b:82:e9:
51:d8:1f:78:91:52:c8:af:0c:dd:4e:c2:b5:93:c0:
de:11:49:4a:02:0a:ba:de:6f:17:10:ab:81:39:c3:
58:ea:39:7b:e0:4f:5a:0c:d1:61:f5:aa:1c:83:c0:
61:dd:28:49:65:42:71:9a:c0:62:c7:f8:1e:30:5d:
af:b8:bc:88:fa:a4:02:43:58:a7:88:0b:ee:ac:48:
e5:2a:cd:74:5f:19:42:44:0e:26:f6:29:34:fa:e7:
59:ad:c4:c2:dd:39:8f:9a:51:e5:a1:73:24:20:4d:
d7:ca:bd:cc:04:e0:1f:40:bd:a9:90:b9:7b:53:08:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:74:F6:C7:C7:B1:0A:0F:91:5B:46:E5:94:81:CA:34:A2:18:49:17
X509v3 Authority Key Identifier:
keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.146.0/23
Signature Algorithm: sha256WithRSAEncryption
22:41:35:c9:d4:b6:e0:bd:97:9d:62:92:08:2c:a1:0e:43:09:
be:b0:18:ba:06:12:24:c7:39:3c:cb:d7:7f:ef:bb:be:34:69:
8c:1d:fa:bb:ac:c9:df:47:3f:97:19:d5:c1:02:a3:de:02:bc:
93:99:45:49:2a:07:ab:a4:40:53:2b:d8:7e:f7:8b:40:cd:23:
e8:18:28:92:05:77:7c:c0:61:02:50:c7:1e:f0:05:26:18:b4:
1f:f4:b3:02:14:36:b1:d9:0f:51:73:09:7a:53:79:b6:78:be:
a4:7b:1f:f0:d3:ec:6a:50:1b:68:0a:e7:bd:b1:1c:dd:be:63:
49:d6:60:4d:1e:3a:77:44:82:d7:0d:18:86:3b:96:de:e8:58:
dd:35:73:aa:65:18:7d:ab:43:fa:6b:30:a2:20:b3:8f:1e:b4:
08:c5:52:36:3c:3b:1d:3b:74:bf:81:6a:03:f6:3b:a5:8b:39:
d4:dc:53:b4:1b:19:be:f7:a0:7c:1e:1f:db:01:3f:c6:d5:0d:
86:97:33:2c:27:11:22:50:d8:ec:4b:e2:01:9a:9c:6e:da:a6:
73:ec:e7:cc:78:f1:95:32:a4:24:99:b4:8f:a4:c6:bd:6c:39:
be:ef:48:12:c6:b7:f2:c3:b1:9e:8e:d8:76:74:f1:ce:f2:27:
0e:ed:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:57:32 2026 by rpki-client