
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/5B12B2B0915511F1A8A4FE826911F970.roa
File: 5B12B2B0915511F1A8A4FE826911F970.roa (raw, json)
Hash identifier: HrmVhWrBT16ZorM9C2f2yDdovxpvH6JykEKOijJcSOk=
Subject key identifier: 64:3F:45:66:AF:0C:98:3D:55:DE:52:C3:F9:58:5C:E9:FA:C3:F4:02
Certificate issuer: /CN=A915B358/serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Certificate serial: 47
Authority key identifier: CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/5B12B2B0915511F1A8A4FE826911F970.roa
Signing time: Thu 06 Aug 2026 05:12:01 +0000
ROA not before: Thu 06 Aug 2026 05:12:01 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138077
IP address blocks: 9.176.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 07:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=CDC131850A25F0CCDFC9B9B9CC8EE64C3AFA6D08
Validity
Not Before: Aug 6 05:12:01 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a7417a1-a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:2f:4f:8b:8c:3d:f0:e1:54:a4:79:0a:9a:
08:52:f8:65:c0:a3:7c:41:e0:16:16:1e:db:8e:67:
16:91:a2:c0:03:8d:7a:f2:dd:cb:7f:c6:c6:f4:49:
6a:09:da:6e:f6:20:89:e6:ac:84:ed:d5:bf:58:12:
68:eb:f7:82:50:20:1f:78:35:ba:6f:7b:41:7b:15:
eb:05:dc:aa:34:79:97:e5:1f:ee:a5:0b:2d:f9:4d:
ee:80:7e:25:86:df:69:ce:da:00:02:c3:e3:a2:59:
22:77:45:d4:40:43:b9:5b:13:7d:0c:35:15:8d:e2:
ae:20:46:4b:2b:5d:29:0b:ba:cf:c8:45:cd:86:ef:
8f:4a:52:31:e0:a7:82:ff:09:29:fd:3f:b5:ac:9f:
e9:c8:fb:64:c2:b5:5f:0b:fb:2b:ab:cd:1a:9a:eb:
9e:2b:36:72:6c:11:1f:a5:40:16:f9:03:3e:8c:b7:
4d:ee:70:e6:e4:13:69:12:d4:f0:04:80:2d:1a:1c:
4d:53:57:47:7f:81:16:96:19:a1:cb:8b:8a:db:9b:
e2:a9:86:45:c1:07:16:49:de:6f:21:9f:12:1d:7f:
86:9c:da:6b:d7:00:7d:39:96:90:75:78:09:a9:d4:
ce:66:a8:53:02:5a:75:49:99:37:a5:33:2d:db:d2:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3F:45:66:AF:0C:98:3D:55:DE:52:C3:F9:58:5C:E9:FA:C3:F4:02
X509v3 Authority Key Identifier:
keyid:CD:C1:31:85:0A:25:F0:CC:DF:C9:B9:B9:CC:8E:E6:4C:3A:FA:6D:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/zcExhQol8Mzfybm5zI7mTDr6bQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcExhQol8Mzfybm5zI7mTDr6bQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/C8FD800438A211F186E88F207EEE528E/5B12B2B0915511F1A8A4FE826911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
9.176.224.0/20
Signature Algorithm: sha256WithRSAEncryption
10:b9:8c:32:ce:99:1a:db:cc:22:76:1c:0a:67:87:5e:36:3f:
e6:6c:47:8d:5b:12:85:06:99:6f:60:77:02:7d:b7:54:08:56:
83:49:77:b8:8c:ba:b5:b7:cd:ef:fc:a8:14:29:e2:a9:60:bc:
90:05:ba:71:f6:59:f2:bb:06:55:b0:3e:af:b0:3d:87:dc:55:
eb:51:45:08:a1:b3:ca:74:38:ec:7b:e7:a5:e6:09:f0:fe:1c:
cc:4f:70:9d:92:9d:39:16:3e:ad:d7:53:76:6c:35:a0:ea:9c:
09:2e:75:92:53:7f:4d:c4:b4:0e:ae:74:c7:24:2c:06:ec:5c:
6b:b3:44:f8:57:2f:af:a7:6b:35:d2:26:01:d5:62:a1:3a:05:
6f:c2:14:46:96:30:1c:fc:09:3e:8c:db:be:aa:47:fc:75:54:
8a:80:d3:d0:7c:e2:89:24:b5:28:0d:71:3a:35:39:bf:0d:84:
18:54:02:69:e7:47:b4:00:41:05:ab:b7:f2:fc:f3:0e:4a:4f:
40:62:3a:e4:b8:e6:bd:80:6d:c2:58:ce:ec:ed:91:74:f6:da:
14:98:8a:41:e9:f4:b0:a1:c4:b0:57:95:95:8e:94:6c:f8:5a:
b2:94:e9:00:fb:de:f3:e2:13:ef:6e:83:1f:4a:e2:8e:b7:d3:
08:89:37:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:11 2026 by rpki-client