
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa
File: 9DBB8670790211EC9EE24885C4F9AE02.roa (raw, json)
Hash identifier: gjf2jRQsp1qsh5RXiSSXaVBggupO1BAV+sMX1zhYhgA=
Subject key identifier: CE:EC:6F:D7:91:5C:E9:13:0E:F3:D3:E5:1D:22:C9:E9:15:FD:ED:8E
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 2750
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa
Signing time: Thu 16 Jul 2026 16:15:41 +0000
ROA not before: Thu 16 Jul 2026 16:15:41 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 140929
IP address blocks: 58.146.144.0/21 maxlen: 24
222.165.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10064 (0x2750)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jul 16 16:15:41 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5903ad-0104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:6d:43:70:66:b3:9b:36:0e:8e:99:ff:84:
17:f0:18:4e:89:93:33:09:d8:5a:6a:d5:ff:98:c9:
df:51:6f:fe:db:2e:7f:5b:9f:e7:d9:2b:f9:4c:bd:
12:7d:6d:73:b1:8b:8a:17:9c:55:a3:f4:ac:1a:1d:
79:6c:fb:81:66:42:42:79:18:9e:26:9a:64:74:ce:
11:b7:23:08:1a:35:6d:93:63:82:9f:c4:60:33:70:
0c:ec:85:28:5c:8b:fc:95:cb:58:ad:44:df:da:df:
57:9c:48:b1:f7:c6:d1:35:f1:65:29:b1:b9:9e:89:
b6:31:85:1a:2d:52:f1:c6:bf:f1:2b:88:08:33:32:
31:ef:3c:8c:1b:7c:0a:d6:d2:10:e6:ad:ea:e8:26:
35:27:7d:72:d8:7b:d4:5d:b3:ad:25:c6:5f:6c:1d:
eb:28:14:4b:69:01:a9:d5:56:c1:0a:8f:f0:e8:87:
be:d2:7b:84:46:3d:4d:74:99:fb:99:ad:2c:f9:a6:
df:39:97:70:80:af:8e:b8:5a:7a:90:bd:8e:70:c4:
6f:a6:1b:72:65:bb:71:e4:10:04:0b:e1:41:b2:b8:
2f:f7:98:9b:cb:be:97:18:3f:ca:41:7b:5c:d9:17:
3e:e3:d0:44:77:75:22:e6:5d:d7:21:13:64:77:ce:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EC:6F:D7:91:5C:E9:13:0E:F3:D3:E5:1D:22:C9:E9:15:FD:ED:8E
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/9DBB8670790211EC9EE24885C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.146.144.0/21
222.165.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6f:aa:96:3f:11:a5:ee:e8:b4:a9:03:83:10:0c:a2:59:85:19:
3c:f3:02:a4:37:b6:9f:1d:87:7f:ea:2f:9e:6d:5f:48:76:91:
4f:27:e7:ab:08:31:2c:fe:e4:bd:f3:84:37:30:16:8d:8a:c2:
89:79:ed:ce:ed:df:93:22:05:18:5e:9c:7a:48:d7:33:b0:ac:
2e:11:3d:ad:a4:db:87:63:0c:40:8f:44:5c:8a:87:d4:38:0b:
7e:b3:69:99:e5:1a:9d:42:a4:11:d2:8c:cb:00:4f:b5:87:ec:
4c:00:e4:bc:f1:67:21:31:6c:ad:2e:35:f7:af:d9:dc:84:1d:
d8:c9:62:7b:da:ab:83:d9:a2:0e:ba:8d:02:1f:6e:0f:76:6a:
6f:df:08:1b:48:da:ee:c4:8c:22:51:77:b9:6f:98:b5:1c:59:
d7:ac:e1:c4:b8:f6:d3:d5:c1:54:86:fe:b4:27:25:c9:f9:4a:
38:08:1d:62:63:bb:9d:6b:f8:2a:ec:b5:ec:31:6f:6d:21:6a:
83:46:d6:14:d8:29:7b:fe:66:81:3d:e1:2c:96:b5:6f:9e:46:
db:8c:48:52:90:d4:91:d3:b6:98:2c:c6:95:ba:3d:f2:26:58:
67:45:4c:0b:60:3b:2a:23:8e:3d:29:4a:01:dc:c1:07:fe:9e:
08:d6:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:27:01 2026 by rpki-client