
$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/D70E2EBA064711F1AE681DED2D3D8C67.roa
File: D70E2EBA064711F1AE681DED2D3D8C67.roa (raw, json)
Hash identifier: 1JPAaBxQU9AhpcPFeoIrUjS9mBdhHYUPT9UCOyk2QDY=
Subject key identifier: 47:6A:FE:70:D3:8D:76:15:02:2D:90:3A:34:08:81:4B:65:08:7C:E2
Certificate issuer: /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial: 02
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/D70E2EBA064711F1AE681DED2D3D8C67.roa
Signing time: Tue 10 Feb 2026 06:15:04 +0000
ROA not before: Tue 10 Feb 2026 06:15:04 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 154489
IP address blocks: 151.158.152.0/23 maxlen: 23
151.158.152.0/24 maxlen: 24
151.158.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Validity
Not Before: Feb 10 06:15:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698acce8-b3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:14:72:4d:0e:c7:07:54:c7:07:28:09:49:
1e:c2:46:d1:e7:97:4c:b2:28:a9:23:6e:b7:06:76:
49:7b:97:47:3e:66:22:de:c3:da:84:06:fc:56:f3:
d1:2b:71:ea:b9:bd:4a:7b:90:42:26:fe:6d:88:10:
11:82:c4:29:7f:5e:3d:83:f9:af:62:44:a1:63:5c:
ad:a3:cc:84:98:a3:00:5e:71:58:ac:ce:03:1d:c8:
7a:fc:3b:cd:d2:c8:f1:a0:53:f1:70:80:55:d5:85:
91:5b:b3:3b:35:ea:89:d1:38:b8:6b:ae:06:42:2a:
95:24:8b:93:07:1a:f9:f6:c2:80:c1:7b:71:9f:98:
74:9c:40:7c:95:f5:1b:ed:07:dd:6f:6b:9f:fd:48:
99:c9:94:b5:88:51:9b:cb:aa:36:01:ce:e2:a6:85:
e6:4a:a7:e5:3e:d2:5a:8c:eb:3a:a6:2e:cc:b1:4e:
91:c0:f3:e2:c2:28:63:c0:a0:07:74:e5:ee:a8:b5:
d4:17:77:8d:d1:e1:b8:ff:1e:69:42:93:a8:67:5e:
cb:b6:de:47:48:36:a9:6c:8e:10:cd:b2:c6:b8:8c:
f1:58:cf:20:cc:b6:fd:69:d7:ff:e4:9b:81:63:24:
45:ad:4d:88:e1:8c:b4:fd:e1:85:2e:a0:47:2e:fb:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6A:FE:70:D3:8D:76:15:02:2D:90:3A:34:08:81:4B:65:08:7C:E2
X509v3 Authority Key Identifier:
keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/D70E2EBA064711F1AE681DED2D3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.152.0/23
Signature Algorithm: sha256WithRSAEncryption
23:6e:b4:47:c0:8d:2b:e4:66:ef:2d:3e:2e:8f:4c:52:8f:bc:
cb:8a:ad:88:48:df:1e:95:2a:0e:63:a5:46:ea:fe:9b:eb:bf:
c1:6c:de:a7:0d:4a:5f:30:17:7c:6c:4c:fd:4a:8d:d0:08:4d:
9d:18:bc:f9:b0:c5:a8:f1:e9:73:8c:ea:f4:9e:04:4d:dc:bc:
02:31:c1:d5:7c:44:9a:64:25:13:97:b8:fb:99:0d:90:82:20:
eb:03:3a:0b:d1:50:c7:5d:0d:52:4a:dc:9f:ac:42:84:ef:f1:
80:17:9d:54:c8:56:02:67:50:18:2c:49:95:d1:5d:98:14:53:
3d:3c:34:b1:a2:36:80:2f:a9:c6:c7:9a:11:45:86:73:3b:68:
2d:d3:3a:00:83:7c:6f:2f:c2:e0:c2:82:a1:5a:b4:cf:02:8f:
49:63:d8:d3:8b:12:cf:62:1d:17:db:a2:06:8b:cb:b3:5e:7e:
21:7a:0f:68:53:db:85:6a:ae:4a:00:d9:67:c2:bb:97:86:ed:
fd:33:76:f5:44:34:ec:4f:7b:cb:46:38:cb:35:50:5b:37:9f:
4b:a7:f3:af:0f:e1:ee:32:94:2a:48:5d:52:3a:67:a2:cb:b9:
0d:60:36:50:72:df:15:f8:1b:07:71:46:d1:de:9d:6a:e7:92:
df:3f:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:04 2026 by rpki-client