
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa
File: 6E042EFCABF011EC92152E22C4F9AE02.roa (raw, json)
Hash identifier: HAzpr+/WwGkW8DZj5IL+9eyh8W1fcpKsnYsToZZGt6k=
Subject key identifier: 64:50:6A:F6:C6:7E:F8:6B:46:15:58:B4:E6:67:00:44:36:94:E5:5C
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 2751
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa
Signing time: Thu 16 Jul 2026 16:15:45 +0000
ROA not before: Thu 16 Jul 2026 16:15:45 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 19905
IP address blocks: 58.146.128.0/20 maxlen: 24
58.146.144.0/21 maxlen: 24
59.189.0.0/16 maxlen: 24
222.165.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10065 (0x2751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jul 16 16:15:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5903b0-f842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:0c:ec:7d:87:d0:ca:c7:92:0d:c9:44:5b:
cb:62:4b:c8:b8:d6:cc:47:a9:6f:4d:99:ab:8e:d5:
3e:26:80:32:62:8f:c4:21:50:e9:46:5c:84:b1:47:
cc:17:e9:6a:f1:b1:bb:f2:71:38:5b:6e:d9:6e:16:
fb:5a:e9:5e:44:2c:61:68:1a:1b:bd:33:f5:d4:7b:
7c:20:48:38:67:1c:1a:c8:89:5f:6b:a0:d6:52:65:
3f:27:f6:0f:8f:35:7b:c8:81:0e:12:58:4b:b7:c7:
58:d7:97:0d:e3:7d:17:fa:df:f0:8f:1a:82:d8:d6:
05:cd:12:aa:d6:cf:bf:fb:97:f4:d6:2c:e5:66:48:
44:3b:32:5d:88:0a:8b:33:12:fd:a4:c2:d4:a3:1c:
d1:3e:de:b6:95:2d:04:6b:3a:2c:3f:64:4d:08:9f:
97:e7:6a:e1:9c:48:a2:6f:28:48:0c:92:70:ab:af:
85:c3:02:5e:a1:f4:34:61:b6:7c:80:dd:74:ef:ec:
dd:6f:bf:3a:26:9d:60:28:67:94:b2:6f:25:88:90:
1c:55:f6:10:ba:eb:5b:8f:16:f7:38:5d:b0:74:80:
a4:3c:1d:b5:91:c7:e2:95:a5:9e:1e:e0:4c:c2:48:
1f:2a:20:38:5a:e8:3a:8f:9d:e9:e1:2f:98:5f:e2:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:6A:F6:C6:7E:F8:6B:46:15:58:B4:E6:67:00:44:36:94:E5:5C
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.146.128.0-58.146.151.255
59.189.0.0/16
222.165.0.0/17
Signature Algorithm: sha256WithRSAEncryption
64:90:02:a6:79:74:27:c8:04:b3:e5:8a:7f:89:1c:5e:91:48:
57:7b:b3:f3:ad:f3:a1:92:39:09:94:3f:da:76:f0:ab:71:2a:
7d:72:4c:1d:82:f9:87:b9:ab:2e:94:a1:69:ba:d2:ce:75:76:
ae:5a:65:0e:e4:e8:88:72:51:72:12:71:da:9b:6c:66:79:a0:
21:a7:1e:c0:5a:e9:35:ef:50:91:fd:96:d0:f7:e5:71:55:16:
95:45:16:ca:f8:41:91:81:c0:3d:79:09:cb:4e:a4:0f:2d:52:
0d:61:53:bd:07:03:c2:7e:b7:82:40:76:7e:43:b8:d9:79:cd:
ba:ef:be:44:41:41:a7:00:35:2e:ed:59:0c:18:7b:79:2a:f3:
a2:ef:de:5f:c5:ef:bd:db:23:3b:5f:00:f0:5c:9f:5d:37:1e:
62:5d:f6:34:fb:8f:ba:dc:97:d2:03:c2:8f:7d:bc:ba:32:83:
49:63:82:6a:2a:0f:0e:7c:56:f8:80:1a:53:08:f5:7d:c8:2e:
ca:3f:12:35:87:05:6c:13:84:83:2a:82:42:be:89:2e:62:1b:
f2:8b:98:6b:c9:02:4b:c2:06:0f:6b:7e:1f:5d:d3:10:7a:d3:
0b:d5:58:16:b3:f7:57:0a:6f:70:f8:25:a9:58:71:8d:02:19:
12:00:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:34:30 2026 by rpki-client