
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D451FBE0DFEC11ED9AB6E147C4F9AE02.roa
File: D451FBE0DFEC11ED9AB6E147C4F9AE02.roa (raw, json)
Hash identifier: Ob4/NasTDkXwh6Ue75zCUaNsjqAbXrMtsg1xyaciVhc=
Subject key identifier: B4:72:67:30:EB:64:6E:17:7D:57:5A:4C:8C:9B:CE:B7:23:BC:82:5B
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 25CD
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D451FBE0DFEC11ED9AB6E147C4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:24:04 +0000
ROA not before: Tue 18 Aug 2026 16:24:04 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 54538
IP address blocks: 202.189.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9677 (0x25cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Aug 18 16:24:04 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a848724-92c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:cf:f3:aa:25:a7:7c:73:21:d4:09:a8:72:
07:9a:45:67:31:87:37:8d:5f:47:99:67:14:19:fb:
30:b8:65:cd:a7:82:e8:00:a8:86:f1:90:b6:70:ca:
4a:dc:cc:b2:d8:69:0b:c3:ff:b8:2c:18:1e:d3:e6:
63:e9:b2:53:c9:c0:aa:76:82:99:2d:c6:1b:b9:b3:
2a:a3:25:b8:24:97:a7:91:15:fb:98:91:aa:8c:f9:
bd:8c:11:3d:ad:af:3c:2b:9e:14:b3:7a:41:38:04:
05:58:d9:c8:3c:d8:ce:d3:66:f3:2b:f4:68:84:3c:
49:9d:4f:e1:73:cc:bf:4a:07:3d:43:6c:96:d5:89:
05:e0:fb:d2:2f:dc:4f:c2:be:82:36:5f:1d:17:d0:
85:55:9d:4d:2f:05:5e:30:d1:f0:a6:c7:a7:33:3f:
4a:ef:f8:cf:2a:a9:15:d7:60:70:e6:93:86:35:41:
46:18:b5:fe:46:06:a9:c0:26:e1:8b:bd:d3:f1:8d:
77:b1:1b:61:6c:6e:5b:70:67:9d:ed:db:61:f7:78:
f6:38:fa:eb:cf:40:7b:63:a1:2b:f0:30:14:bd:89:
6c:09:77:66:a3:64:c6:e3:5e:59:05:4b:4b:40:b3:
52:0d:07:69:c4:91:a5:c6:6b:9b:8f:59:83:97:72:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:67:30:EB:64:6E:17:7D:57:5A:4C:8C:9B:CE:B7:23:BC:82:5B
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D451FBE0DFEC11ED9AB6E147C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.189.133.0/24
Signature Algorithm: sha256WithRSAEncryption
33:56:ad:81:6b:c6:ac:88:34:80:72:2d:28:e5:50:87:76:ac:
e3:49:6d:2a:7f:46:97:ca:39:e8:73:f3:78:d9:71:b3:bb:5b:
57:35:f7:f4:6a:dd:9d:b7:b6:fa:61:d1:c9:d4:72:c6:ff:b5:
88:51:9b:59:70:e8:9c:ac:f4:3b:e1:7d:6e:30:49:04:32:f1:
b8:b9:d5:38:a5:53:5e:3b:ab:00:f9:24:32:79:f6:71:ab:54:
7d:08:ac:1c:1d:73:f8:8e:1f:1c:93:58:79:53:5c:fb:4a:84:
42:9c:12:81:d0:24:cd:6a:af:3f:f7:76:39:30:b4:c3:2c:cb:
d1:72:9b:75:10:ed:16:ef:fd:0a:10:cc:b8:e1:8c:61:7b:e4:
f4:98:f3:8c:a0:07:fd:03:38:ee:b5:de:4b:5e:66:43:bd:39:
2f:e8:18:ed:fb:d9:d2:eb:d8:81:d4:bb:b5:9a:09:fc:db:54:
c9:6b:da:bf:c2:34:03:cf:32:ab:d7:d8:1c:93:fb:13:9d:0b:
46:a7:10:7d:1a:d0:08:e1:41:0d:07:de:4d:2b:9a:42:53:8c:
fb:35:1d:f0:dd:03:7f:3d:18:9b:ad:55:a7:f7:d4:55:64:b6:
2c:0c:51:78:5c:ac:83:54:23:7b:e9:05:c9:81:0e:68:f7:05:
93:e2:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:23:03 2026 by rpki-client