
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/1D3D0DC21E5811EFAC23683BC4F9AE02.roa
File: 1D3D0DC21E5811EFAC23683BC4F9AE02.roa (raw, json)
Hash identifier: BgJh4zD4wVA6vueDCVPTNC8t5x//InfjVE6PnSk4dVs=
Subject key identifier: 49:29:61:6B:46:9F:BA:04:6E:8E:87:C5:07:97:95:9B:7D:92:E9:0D
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0E80
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/1D3D0DC21E5811EFAC23683BC4F9AE02.roa
Signing time: Tue 30 Jun 2026 15:11:37 +0000
ROA not before: Tue 30 Jun 2026 15:11:37 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9506
IP address blocks: 151.192.64.0/18 maxlen: 24
151.192.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3712 (0xe80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Jun 30 15:11:37 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a43dca9-0145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:33:9c:ff:04:c2:88:c2:1a:1b:b2:22:46:
49:dc:0f:2e:48:2a:5e:9d:8c:4d:ab:6f:3b:c7:d8:
b8:49:55:b6:39:42:73:89:19:14:b6:d4:7c:69:0f:
51:5a:95:68:09:ad:ef:85:7b:c6:37:df:b0:2c:db:
4e:2f:1a:bd:59:0f:d1:11:0d:cc:7b:0f:3b:e2:3f:
0c:c0:9d:46:d6:8f:5c:ea:49:9c:59:d6:50:65:a0:
8d:86:89:cc:c7:df:01:4f:30:fa:f2:2a:cd:91:21:
c6:2c:12:70:20:c7:e6:0b:6e:d4:65:1f:7b:98:cc:
a4:d5:8f:96:32:17:54:1c:55:c2:f3:4b:fe:a0:8c:
bf:ee:0a:b7:e5:4e:97:0c:85:d6:9b:e2:4c:dd:57:
3a:d7:13:93:0b:8a:98:12:33:be:dd:47:4f:0f:d2:
79:f3:de:5b:b0:3a:b0:c4:73:8f:a3:e4:11:4a:2f:
1e:74:02:98:ee:80:ef:7c:0b:d5:db:08:a5:42:84:
5b:f3:ec:0e:7d:a7:20:a8:70:1f:21:6a:87:28:7e:
8d:52:6b:d1:b0:57:a1:98:e4:fd:72:35:0a:ad:da:
69:e8:70:1c:8f:83:2b:a9:81:70:1d:3a:b8:aa:ee:
a4:23:be:59:90:98:19:15:d7:84:d7:01:f6:06:e3:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:29:61:6B:46:9F:BA:04:6E:8E:87:C5:07:97:95:9B:7D:92:E9:0D
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/1D3D0DC21E5811EFAC23683BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
151.192.64.0-151.192.255.255
Signature Algorithm: sha256WithRSAEncryption
2c:96:a7:68:6c:99:1a:c9:3f:1e:01:48:e2:b8:15:81:ba:b0:
96:47:1d:00:52:13:5a:5a:9f:d4:ad:5b:30:54:6e:9c:a5:1b:
ee:7f:53:a2:8b:be:3e:39:01:01:fc:3c:fb:c6:4b:4a:68:52:
66:fb:6a:86:de:ed:61:39:8c:ae:7d:d9:0d:be:de:b3:ed:10:
05:12:c3:4d:65:5c:e5:8d:b1:16:e3:e4:76:9d:12:7f:4f:b0:
85:db:65:2d:e6:dd:f0:31:43:2c:3d:16:2b:8b:16:18:a5:1b:
00:2b:4f:a1:b3:39:86:cc:f6:ca:ad:88:a6:c5:f9:d9:ec:b6:
8b:0e:0e:a2:97:b4:a0:2f:f1:61:11:7e:0e:aa:cc:b2:a6:aa:
de:28:f3:c6:3b:36:4b:f8:b4:3e:cd:be:7c:9b:42:77:92:ff:
85:d3:37:a7:d2:2a:f0:6f:26:9d:4d:21:99:eb:cd:f2:f6:c4:
55:35:5d:ca:d7:ec:c6:e8:eb:6a:39:16:bc:f6:5f:d4:70:8c:
df:0b:1e:c9:be:1f:0b:48:b4:53:d9:1d:aa:c7:97:03:91:aa:
24:b7:15:41:02:b5:a9:f7:38:2d:20:cd:27:06:8a:f2:79:2d:
fc:94:07:e3:a0:d5:8d:5b:f4:6a:8e:10:4c:c4:2d:48:27:c3:
29:c4:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:13 2026 by rpki-client