
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
File: 15875DC27B5E11EFAB71253BC4F9AE02.roa (raw, json)
Hash identifier: 5QPe8ncIbmOtpv/0UagKDEsBkTPo/vp1GJpaE7hkl9I=
Subject key identifier: 90:56:2E:01:9E:07:12:81:65:7F:EE:29:F4:36:46:A4:72:65:FB:12
Certificate issuer: /CN=A917C9BF/serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Certificate serial: 017E
Authority key identifier: 5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
Signing time: Wed 09 Sep 2026 02:09:07 +0000
ROA not before: Wed 09 Sep 2026 02:09:07 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 26380
IP address blocks: 14.102.177.0/24 maxlen: 24
45.115.128.0/23 maxlen: 24
45.115.130.0/23 maxlen: 24
103.55.148.0/23 maxlen: 24
103.55.150.0/23 maxlen: 24
180.92.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl
rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 04:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C9BF, serialNumber=5CACE5BF655AACF7CBC6272C5C697F377A06CE8C
Validity
Not Before: Sep 9 02:09:07 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6aa0bfc3-f68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:fc:15:12:36:b0:6a:92:a5:0e:ec:be:1a:
11:24:28:2e:50:7b:45:f5:4a:20:28:0b:4a:f9:89:
2e:e6:13:c1:af:e3:37:1b:6e:e6:2d:22:6c:c0:b0:
6f:e9:63:34:94:d0:1d:2c:87:cc:b4:dd:7c:80:82:
65:6b:55:13:06:0e:eb:36:63:4c:76:90:af:f0:fd:
54:a9:54:ad:ad:79:1e:e7:49:86:da:55:0f:b3:0e:
02:1b:4a:f8:cb:fd:04:42:43:1d:22:65:17:8f:52:
20:ff:f5:67:19:5e:ed:7b:56:ea:98:c8:a1:ed:4b:
93:67:b9:ae:7f:5f:58:e8:ae:45:04:06:9a:78:53:
30:88:48:47:19:cd:26:ff:e8:34:c3:0b:19:bc:6a:
0a:02:a1:fb:7b:63:02:a2:f0:2c:63:64:24:a1:d8:
54:df:e7:28:8a:3e:18:b8:4b:13:9d:a3:e2:fb:29:
9f:84:7e:38:8e:20:89:f3:61:f5:22:c9:57:46:ca:
68:03:31:f4:96:08:c7:83:8c:af:07:99:0b:0f:9a:
b4:10:2c:f5:bc:68:5f:2a:32:55:e4:4e:55:b8:6b:
51:7b:6d:3e:a1:3c:80:dd:a8:df:ec:07:00:99:d2:
f7:e6:7a:f2:8a:45:00:ca:10:ae:26:0f:ae:2f:eb:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:2E:01:9E:07:12:81:65:7F:EE:29:F4:36:46:A4:72:65:FB:12
X509v3 Authority Key Identifier:
keyid:5C:AC:E5:BF:65:5A:AC:F7:CB:C6:27:2C:5C:69:7F:37:7A:06:CE:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/XKzlv2VarPfLxicsXGl_N3oGzow.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKzlv2VarPfLxicsXGl_N3oGzow.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C9BF/BE1D4A347B4D11EFB0236C78C4F9AE02/15875DC27B5E11EFAB71253BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.177.0/24
45.115.128.0/22
103.55.148.0/22
180.92.176.0/23
Signature Algorithm: sha256WithRSAEncryption
34:b2:bf:a6:c4:e8:fb:be:65:9d:90:45:54:cd:b9:b9:ab:78:
20:25:f3:f4:22:df:08:f8:82:04:6a:0d:a7:89:dd:85:ef:08:
ce:c7:48:b6:d5:ae:18:3a:2a:c4:39:b7:f8:c9:34:01:06:40:
87:3b:93:d9:3d:81:a8:2f:03:50:00:b7:fc:9b:20:1e:2c:95:
47:b5:9d:d6:dc:bb:c6:13:39:f9:b1:4d:6b:56:07:0d:7d:45:
bb:25:99:8e:13:54:a8:bc:8e:56:21:93:ec:ff:ad:e2:8d:ca:
91:69:4b:34:83:68:c5:c0:1d:68:c2:94:0a:e1:31:ce:9d:1f:
c1:7a:f6:b6:8d:a3:69:ed:f0:f5:27:c2:4c:0f:c0:11:b0:8e:
40:53:4d:b9:bb:f8:b5:43:47:82:5b:0d:0b:03:ae:78:61:be:
cc:16:1c:f0:0e:ee:02:5d:aa:6b:cd:88:72:28:3f:4a:c5:1e:
a8:f6:cb:d1:b3:69:07:c5:51:c2:07:0e:d0:1f:6b:16:6e:b0:
a1:db:12:5e:dc:55:47:60:ec:79:84:4e:a4:56:f8:a9:82:16:
54:56:4d:31:4a:ca:3e:f9:10:95:f1:28:c7:bd:ec:10:63:59:
21:3f:86:7f:c8:dc:6a:ab:18:36:d7:5b:8f:a5:0c:18:1b:e7:
5f:fd:3a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:11:13 2026 by rpki-client