
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/A2DC8C9A4F7B11F1A3D5282FCC833773.roa
File: A2DC8C9A4F7B11F1A3D5282FCC833773.roa (raw, json)
Hash identifier: YUtSjt3WoGXo+IxfCpIihU+kCKwTBNB8WP+VlFPoQho=
Subject key identifier: 5A:51:26:7E:B3:35:E9:EF:92:EE:16:0E:36:FF:00:70:A5:4D:F4:6E
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0E7D
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/A2DC8C9A4F7B11F1A3D5282FCC833773.roa
Signing time: Tue 30 Jun 2026 15:11:32 +0000
ROA not before: Tue 30 Jun 2026 15:11:31 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 19905
IP address blocks: 151.192.0.0/18 maxlen: 24
151.192.64.0/18 maxlen: 24
151.192.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3709 (0xe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Jun 30 15:11:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a43dca3-2eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:ef:45:90:d8:df:60:bf:e9:6e:67:9e:05:
3a:15:e5:24:11:ca:e8:ea:0f:38:e7:03:a0:51:d3:
26:7b:80:e1:d6:f8:48:27:68:19:75:92:63:19:33:
ae:72:0b:20:a6:63:45:9c:cb:fb:7f:15:d2:c5:54:
ff:b7:d4:88:3c:b0:11:70:be:9f:03:4c:36:0a:46:
90:d7:a9:07:11:84:da:13:f8:90:f1:4a:ea:58:49:
ef:90:47:ac:f6:c9:fd:bf:9b:c0:3d:39:a4:fc:f5:
72:a4:32:a7:b6:22:87:e2:44:f9:71:a9:f8:ba:6e:
d5:34:08:bb:4e:b7:0f:19:2c:b9:02:a3:cb:b9:f5:
4a:b1:3b:ee:58:1b:6d:33:ab:8b:09:63:48:67:d0:
9b:26:79:45:03:f9:13:04:32:cc:49:c3:38:d2:c2:
53:b4:d3:49:6b:90:1f:f9:e7:be:02:73:52:d8:7c:
71:02:7e:b7:42:3b:49:d8:a0:c4:74:f9:26:a4:64:
b6:1d:cd:c2:50:86:6e:cf:c7:00:c7:88:ad:e0:fc:
69:63:40:ea:f9:2a:55:24:92:f8:1a:8a:d4:97:4f:
c8:b1:23:5f:4d:7d:8d:69:51:34:f3:56:fc:6a:a1:
66:2f:b3:d9:0a:c7:0a:b8:92:92:49:8d:0e:f6:14:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:51:26:7E:B3:35:E9:EF:92:EE:16:0E:36:FF:00:70:A5:4D:F4:6E
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/A2DC8C9A4F7B11F1A3D5282FCC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.192.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:b6:19:d5:5f:8a:73:0b:af:7b:bc:a9:5c:31:17:c2:79:8f:
71:e8:66:3f:7a:b5:c2:bf:c1:d5:09:81:d9:a3:55:48:ca:c9:
60:71:4c:40:e3:c2:86:f9:06:f9:d0:1f:75:44:22:05:93:04:
09:8f:ca:19:1e:9e:fd:14:e5:07:72:38:3f:14:ec:2d:16:5d:
0c:08:74:9c:af:4a:a3:c3:ac:a6:f6:35:ba:0a:03:37:49:97:
fd:97:b3:2f:7f:2f:f2:4d:07:4b:52:a4:3c:36:51:b0:d3:66:
6e:da:60:ad:8f:20:bf:41:f2:43:ec:3d:b7:ca:2d:5e:3e:1e:
a8:84:1c:18:dd:b4:1c:af:ee:26:64:3d:8a:44:1e:fa:5f:36:
4d:32:22:74:19:70:64:6a:47:12:35:ec:aa:d6:b9:13:fa:4b:
e6:3c:1e:70:0b:af:27:9e:a6:6c:9c:22:df:ca:84:df:c7:39:
4e:97:9d:12:30:4f:1a:f9:fb:07:24:4c:c0:8b:9c:e5:07:52:
ee:66:ae:cb:1f:6c:8d:95:cb:50:57:d1:19:65:e1:a4:12:21:
e6:cf:c5:e1:60:86:89:f2:63:6a:de:22:17:57:a1:6a:e1:ce:
6d:00:c6:84:64:ad:92:a4:cb:48:a5:cd:37:33:6c:d1:fd:13:
dd:08:b6:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:32:52 2026 by rpki-client