
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
File: BC94C436F62711E9AC18E63BC4F9AE02.roa (raw, json)
Hash identifier: kmwG0SfeWdiV4Xu5QoUdYfe+EQnDiuhdgFgvkYNigm8=
Subject key identifier: A0:AD:2B:13:EA:2F:38:1E:5C:A0:CF:CB:10:06:ED:C3:80:65:A6:0F
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 38C5
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:23:19 +0000
ROA not before: Mon 18 Aug 2025 14:50:30 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 6619
IP address blocks: 203.126.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14533 (0x38c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Aug 18 14:50:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48417-22ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:36:e4:a9:53:b9:ca:2e:01:b2:8e:4b:96:
e5:e0:3d:41:c5:32:c9:36:c5:1c:fb:85:85:02:b3:
2a:85:70:49:ac:6c:b3:25:bf:b4:7a:c1:ce:cd:70:
98:02:d9:64:10:36:31:bd:20:21:d6:83:69:13:de:
2f:13:cf:1e:a3:df:43:dc:61:3a:ec:88:02:6c:f1:
a0:5d:55:25:2d:63:b1:88:7c:08:5b:73:29:3b:10:
1c:8c:a4:a0:2a:9e:e2:53:4a:fe:2e:59:1f:a6:b2:
aa:04:50:cb:93:00:fa:10:d6:83:b9:ec:03:bb:78:
fe:47:dc:9f:76:25:8c:9a:80:9e:25:00:23:d7:5e:
de:10:b4:a8:2d:09:b0:ff:06:47:1a:72:2d:65:66:
61:6c:bd:b6:b1:b3:5e:b9:e6:2c:d2:25:91:79:ea:
09:89:42:95:76:e0:a2:39:90:db:64:da:36:77:82:
5d:41:69:7e:19:2a:c7:b0:68:83:18:e6:b5:59:6b:
a5:fa:4b:f6:67:61:4b:70:ae:1a:26:42:c3:e0:9e:
3c:68:2d:6d:77:21:df:31:7b:41:60:de:72:a4:ce:
9a:22:f8:f0:4e:80:c7:16:fe:82:27:52:71:d3:78:
f9:8f:cf:7f:ee:04:a1:83:d2:2d:65:5a:e6:52:d9:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AD:2B:13:EA:2F:38:1E:5C:A0:CF:CB:10:06:ED:C3:80:65:A6:0F
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BC94C436F62711E9AC18E63BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.126.64.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a7:a3:8c:e7:8b:e9:6c:de:21:a5:b1:17:e3:c5:b0:50:09:
bb:5e:e4:82:df:d0:de:af:f2:2f:f7:da:99:f2:e9:30:00:b3:
7b:a0:52:1a:33:4a:98:b8:2b:32:df:d0:4e:34:c6:63:af:f8:
63:c1:ee:91:2c:34:c9:94:87:64:33:63:c5:14:fd:77:75:8d:
c3:72:fc:e5:3a:8b:7d:6b:23:0f:9c:a8:20:5f:b1:12:25:e2:
07:d8:9c:b1:40:28:64:2c:44:78:5e:7e:1d:dd:8b:8b:bf:9c:
b4:b0:93:49:11:52:20:99:40:8d:16:19:77:b9:14:41:a7:ad:
98:61:84:11:fc:98:9c:f5:31:ec:01:c5:b4:94:23:a5:45:87:
da:c0:f2:ec:06:58:fc:40:b7:48:8b:b8:a3:d4:3f:a1:d7:94:
64:4b:28:10:fd:d2:89:a6:92:b9:de:a6:32:7b:1d:5b:d4:e0:
1c:0b:a9:7e:36:da:70:04:d0:92:7b:bc:3b:9c:83:2d:e5:dc:
4c:e4:22:fb:a0:89:12:41:59:af:a4:52:4d:cb:bd:e6:a4:b4:
e5:6f:65:ca:f7:fa:f3:94:bb:78:ef:ae:81:2d:d5:cc:a6:d6:
03:48:b4:f6:e0:70:cd:20:cc:1c:2d:65:ab:25:2e:e3:b8:cf:
04:66:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:02:42 2026 by rpki-client