
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
File: 03476D523FB011F097B5F864C4F9AE02.roa (raw, json)
Hash identifier: QyN/K5ddABSKpld0fDzbTZufoDAlTMcHtvLl/DeGwQM=
Subject key identifier: B1:38:4C:29:40:7A:DA:32:3D:2F:72:B1:E8:F4:F7:C8:C0:02:D8:38
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 0985
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
Signing time: Wed 30 Sep 2026 20:40:39 +0000
ROA not before: Wed 30 Sep 2026 20:40:39 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 153933
IP address blocks: 103.72.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2437 (0x985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: Sep 30 20:40:39 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd73c7-a33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:1a:2b:96:d2:1f:4b:06:14:48:82:0d:dc:
d0:6a:7f:a2:48:ca:d7:3f:82:e2:ff:2c:10:b5:84:
bf:3a:ab:82:c1:ea:27:ca:fa:dd:a3:f0:29:3c:0d:
26:43:37:b5:92:30:41:63:a7:e6:cc:c9:0e:d9:a2:
70:72:bb:48:2f:d2:d0:b4:37:26:84:df:13:da:a1:
81:14:eb:3d:4e:8e:0d:7a:4a:f9:b1:73:79:73:5a:
da:d0:ef:5d:b5:6d:9f:a9:b1:6b:d5:eb:44:3a:bb:
d7:c5:ef:c1:ab:78:89:68:e4:f0:d9:e3:12:f6:73:
16:e9:d5:3a:0f:da:75:c3:0d:a4:81:c8:2e:f1:d0:
37:c4:61:47:d1:80:28:06:ed:b0:bc:43:28:0e:0d:
17:7e:12:90:ef:70:0c:d5:e5:38:31:fc:17:4a:e8:
46:3f:ad:20:d7:c4:aa:5d:46:a9:59:52:5f:c3:cb:
11:c4:a4:36:cb:38:85:5a:68:f9:9f:00:71:c0:0d:
96:d3:db:b0:c0:2b:e1:25:f4:ab:88:06:3c:47:1e:
f6:54:42:a8:88:f8:23:83:b6:0f:62:4f:8c:b2:df:
36:fc:b3:e1:c5:7c:81:ae:98:6b:de:2d:b9:43:c3:
79:0b:f3:d6:8c:e7:8c:6e:9d:0c:ed:f7:f4:0c:c4:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:38:4C:29:40:7A:DA:32:3D:2F:72:B1:E8:F4:F7:C8:C0:02:D8:38
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/03476D523FB011F097B5F864C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.100.0/24
Signature Algorithm: sha256WithRSAEncryption
39:20:7c:69:3c:e9:b1:c0:e2:0e:09:29:67:0c:f6:8f:e9:10:
39:a1:2a:5c:66:d0:3d:3d:fd:cf:25:5b:00:47:4b:05:53:fe:
65:3a:6e:07:69:ad:41:29:e3:fa:29:85:c5:2d:3d:68:fc:f4:
d4:64:15:01:fd:dd:fe:ce:f0:e4:d2:b1:d2:79:f2:d7:a4:db:
0f:0e:09:ce:f3:4d:49:8f:80:91:7b:eb:b0:03:7a:44:9a:1c:
e5:e3:78:c7:49:97:86:7a:46:f4:ac:a1:cf:91:e9:ce:c4:90:
a9:1d:1b:cb:0f:ff:b5:34:a6:a5:89:b8:2b:39:b4:74:a6:16:
95:a9:a3:72:25:4e:d8:5b:54:3e:c6:8c:03:32:a4:2b:19:4c:
1f:65:2c:fd:50:87:e2:87:fe:20:b7:a4:80:22:d8:b6:8a:f4:
a5:d5:6f:e5:d1:5a:36:e5:2d:bb:9b:d1:0f:7e:4e:13:52:aa:
1a:ab:b6:0a:1e:f9:b2:bd:be:2f:b1:c6:25:49:bb:2a:2f:53:
79:e9:b6:a7:4d:19:a9:c5:44:3b:6b:a7:ee:3b:71:49:71:bf:
43:2d:b1:17:74:ca:33:69:20:b0:4f:83:86:da:52:66:0f:aa:
06:f9:ca:51:c9:4c:29:6d:63:f2:a1:3a:08:b6:6d:41:5f:3e:
bb:e2:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:22:35 2026 by rpki-client