
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
File: 87448EFE3D1D11F0A469B051C4F9AE02.roa (raw, json)
Hash identifier: qON8fOpiAFWIBePu84NRB9cwAMAAuYNXb/sy5AFv5E0=
Subject key identifier: E9:64:B2:E9:56:A1:94:41:4C:2B:21:32:89:9B:66:D0:C0:9A:B9:43
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 0986
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
Signing time: Wed 30 Sep 2026 20:40:41 +0000
ROA not before: Wed 30 Sep 2026 20:40:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 44259
IP address blocks: 103.72.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:38:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2438 (0x986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: Sep 30 20:40:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd73c9-8d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:d2:92:d2:20:ae:45:27:e0:0e:73:43:ef:
e0:c3:0f:f7:e8:fd:77:e7:7a:b0:68:36:d6:f7:05:
10:a8:ed:ef:57:92:31:9e:0b:5e:ff:7d:ef:4c:d3:
41:cd:2c:bd:05:d0:f1:99:a9:3b:72:45:90:53:09:
b7:de:3b:76:34:e7:ae:94:3e:03:45:96:b9:55:02:
9a:ba:eb:19:87:71:e1:d3:d1:43:e9:fb:3a:e1:78:
6f:df:8a:8e:ea:40:63:1f:10:db:35:76:4e:8f:98:
b0:c9:d1:74:e7:46:10:d9:57:ce:e4:48:fc:f7:26:
da:ce:6c:f5:b2:39:1f:16:e2:c3:6b:61:24:2f:8b:
96:d3:45:82:ef:22:7e:9d:23:c8:ce:83:a2:47:10:
79:0b:ef:ea:9e:de:8b:e4:47:15:46:bc:5e:74:f9:
5c:36:b7:5c:d1:57:dd:f1:3f:89:0f:02:43:5a:07:
7c:25:b1:40:7d:97:64:41:cb:3f:41:db:22:78:10:
ac:2e:0d:cc:86:c9:32:9a:10:ca:13:61:57:b5:47:
f2:36:20:b1:ce:69:98:e8:c0:96:b5:9b:51:a0:97:
5c:a0:20:ee:ab:6a:ca:bc:fd:5b:97:49:8b:a3:09:
a7:ba:0c:13:18:5f:15:65:58:47:6a:e0:1a:48:7b:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:B2:E9:56:A1:94:41:4C:2B:21:32:89:9B:66:D0:C0:9A:B9:43
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/87448EFE3D1D11F0A469B051C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.101.0/24
Signature Algorithm: sha256WithRSAEncryption
31:52:2e:fa:5a:ff:d9:ad:9b:2f:35:88:93:9a:19:73:43:fa:
86:a6:35:de:b3:8c:33:59:cb:86:f0:e5:07:f4:1c:eb:e2:20:
60:1a:a3:8b:85:90:62:b1:ed:f6:82:09:37:63:a5:80:c3:7f:
b7:56:19:6b:cd:03:3f:0c:fd:eb:df:82:62:54:43:bf:09:3f:
32:0c:2d:44:7d:1a:3c:92:18:3f:c8:56:e0:f9:55:56:0b:81:
ec:1d:e2:91:e8:76:47:42:93:b4:0d:76:1a:58:ef:0f:dd:bf:
c5:50:62:e9:33:1e:0f:07:51:e5:3a:0f:60:bc:0f:a8:7d:f5:
af:08:27:4e:46:09:21:3f:52:c2:34:72:c4:a3:7f:8a:69:ca:
9e:77:34:bf:50:84:88:eb:25:08:bb:23:4c:bc:b4:4c:0e:13:
a7:28:48:e9:f1:e3:06:68:d9:1e:63:0c:ca:d6:57:d4:75:81:
9d:b1:18:38:c9:a0:67:1c:a1:0d:82:72:e9:2e:ac:a9:e5:95:
6f:52:b4:3d:9c:fb:0a:56:3d:55:04:ea:20:40:ae:ee:dc:09:
f9:cc:de:37:52:92:45:5e:c3:b1:8b:7c:f3:e9:8c:24:16:d9:
ab:c4:bf:32:1c:e9:69:ee:94:89:14:4e:35:65:6a:5e:f1:6f:
71:5b:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:22:39 2026 by rpki-client