
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/0F15CD3AAF4011F1A81565FF6911F970.roa
File: 0F15CD3AAF4011F1A81565FF6911F970.roa (raw, json)
Hash identifier: bXz14egsScUPZz6IgAV/U9H8I2txbYXfr0Rpj5n0qbE=
Subject key identifier: 17:C3:87:3D:E0:C1:40:0B:8E:2E:CA:0F:02:7F:9F:11:D2:7E:3D:62
Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Certificate serial: 257D
Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/0F15CD3AAF4011F1A81565FF6911F970.roa
Signing time: Mon 28 Sep 2026 06:12:58 +0000
ROA not before: Mon 28 Sep 2026 06:12:58 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135095
IP address blocks: 103.120.192.0/22 maxlen: 22
103.146.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 15:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9597 (0x257d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28
Validity
Not Before: Sep 28 06:12:58 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6aba056a-4995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8c:e3:fb:82:ad:ce:69:a6:fc:10:dd:66:6c:
a3:98:22:22:fd:c1:67:b5:11:1c:9e:8d:71:34:ea:
d2:7c:5f:d2:29:61:2b:20:5a:b5:a6:6f:71:16:97:
47:83:20:88:bf:b4:87:b3:cb:83:0c:74:70:56:88:
17:69:07:96:5c:eb:5e:0a:0a:f0:a9:d9:c8:24:1b:
11:e6:75:f1:46:a5:56:9e:cd:21:ce:c6:4e:19:2b:
7d:57:a3:a1:4a:2f:c6:e0:23:2a:e7:d2:c8:6d:f5:
11:12:48:1a:7b:8f:5b:0f:87:c6:9e:2c:ec:d6:eb:
29:ba:36:de:33:95:17:85:ec:0a:95:71:35:f1:1a:
a5:3f:5e:87:94:b0:12:a4:31:cc:82:ff:38:8c:d0:
38:fb:26:87:5e:b3:03:38:82:41:6a:28:4e:18:c4:
8d:86:e2:20:67:12:3f:3e:b7:b0:48:cd:ed:74:a7:
5b:86:be:36:52:da:d2:5e:73:e7:89:dc:50:87:75:
ce:54:38:b2:9f:50:38:84:8a:d6:99:d7:e6:04:42:
95:72:3d:17:c0:53:0e:ec:c5:7c:f0:66:2d:59:98:
a7:70:06:ce:fd:28:25:d4:85:6e:b5:36:f9:53:25:
cd:ef:28:7a:d5:86:62:91:03:54:d6:31:5e:fd:55:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:87:3D:E0:C1:40:0B:8E:2E:CA:0F:02:7F:9F:11:D2:7E:3D:62
X509v3 Authority Key Identifier:
keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/0F15CD3AAF4011F1A81565FF6911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.192.0/22
103.146.68.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:26:57:b8:01:6a:c5:b1:78:37:46:6f:25:34:5d:ef:53:b7:
b3:5c:83:53:d2:87:e8:50:c5:c4:19:8a:4a:6b:f4:0c:ed:52:
65:df:be:ab:d9:67:fb:69:7b:ba:65:87:a1:b9:7a:47:98:32:
5e:a6:32:36:53:46:d9:e6:8c:1e:be:92:82:41:c5:f2:2f:44:
37:fb:e2:69:dc:c1:b6:83:ac:ea:a8:0b:8c:b8:8d:6b:86:1d:
f6:d6:7e:de:c2:5d:02:0f:4c:aa:be:53:a6:df:41:a8:54:f7:
13:e5:28:7a:56:a1:69:0c:d4:a4:54:77:9c:ad:12:39:cf:cb:
a9:2c:ad:81:60:34:b2:01:cc:76:4c:fb:02:7f:43:d9:06:50:
c3:68:6c:91:f7:5a:eb:dc:da:36:3c:c9:7d:5f:77:0d:67:43:
2b:bd:ac:d5:d0:3e:00:32:bc:b8:4f:0f:57:91:9a:92:69:1e:
b1:7a:bd:1b:e7:a6:9c:79:9d:6b:a9:4c:55:21:93:d0:30:d3:
70:c4:aa:35:70:e3:05:d4:e7:9e:42:8a:1b:72:33:4f:3e:dc:
ba:a4:33:a8:80:88:4b:e1:1e:d2:c5:80:d4:99:cd:86:62:8a:
ab:42:6f:aa:2e:cc:b8:22:c7:f2:38:3e:d1:42:f0:19:af:86:
b4:c9:a7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:56:54 2026 by rpki-client