
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
File: A1456A4CBE6811EEBFF35870C4F9AE02.roa (raw, json)
Hash identifier: snLtGNX/R2DW6Vtfs0FBnEL4/BkZ4v63NpPkeUhXcvc=
Subject key identifier: 12:6D:DB:45:EA:D2:07:A7:AF:F6:C2:DE:2A:A2:56:52:07:96:A9:3B
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 01A0
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
Signing time: Fri 03 Apr 2026 04:37:21 +0000
ROA not before: Fri 03 Apr 2026 04:37:21 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 152447
IP address blocks: 157.15.52.0/23 maxlen: 23
157.15.52.0/24 maxlen: 24
157.15.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Apr 3 04:37:21 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf4401-b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:56:fc:9e:72:e7:2d:3a:02:c1:1e:3a:bd:
00:a9:94:74:f1:d2:70:26:8c:e1:8d:b3:2e:bd:bd:
97:f0:fc:3d:ea:fe:60:d3:3e:4e:b6:59:d8:45:9b:
49:dd:f4:8a:07:27:59:bb:17:d4:81:65:e0:f3:1a:
4e:dc:59:bd:ad:6f:5f:06:5d:64:2d:fe:e7:ae:5d:
f7:fb:f8:b2:28:38:d9:11:10:2b:b1:58:c3:ee:aa:
a7:35:f4:ca:81:3f:15:a2:e6:1f:00:0c:df:c9:a8:
1f:18:9a:0c:da:8d:25:2c:04:3d:89:d6:3c:00:b7:
3a:59:f9:17:aa:87:92:eb:ec:55:02:38:85:70:59:
53:d4:ef:0f:10:24:59:e2:b7:05:96:74:4d:57:0e:
bb:c1:43:f3:70:a6:3f:00:f7:eb:35:d9:76:24:1b:
07:89:ab:dd:68:35:b2:6b:61:0f:1d:10:81:25:4f:
f0:c9:14:51:7d:d9:70:ef:a1:a4:db:69:57:87:2a:
38:d5:8b:8e:33:46:0d:00:c5:69:fa:4b:94:70:27:
58:02:23:eb:a3:78:bf:59:ae:52:07:40:ec:1b:09:
3f:5c:00:28:9a:d0:9f:e3:c0:95:52:99:9d:44:9b:
ce:b9:00:cb:96:9d:3e:b8:42:b4:97:af:73:03:2e:
cc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6D:DB:45:EA:D2:07:A7:AF:F6:C2:DE:2A:A2:56:52:07:96:A9:3B
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d9:7a:e4:26:44:a4:3d:c7:e4:01:bc:8a:63:1c:2e:ba:2e:
03:5f:12:07:c2:7a:b3:10:a6:e1:8e:94:01:05:08:d4:15:13:
92:4c:32:97:f8:31:e1:c6:49:0f:1a:8b:48:6b:a1:79:d4:8e:
e7:7b:86:fe:12:a7:19:6b:58:f7:1e:22:eb:2f:fe:60:4c:a6:
71:9c:3f:98:0d:46:9a:10:36:d4:53:fc:dc:74:df:49:3f:40:
62:a1:69:95:de:9e:b0:f7:4c:2b:d2:05:ef:01:4f:f8:cd:94:
cb:62:ab:93:4b:fd:5c:bf:5e:7f:56:f3:f0:a0:ee:f7:5c:50:
b7:24:e9:9e:f9:3b:4f:da:98:9c:68:b5:2c:ae:74:41:15:ab:
8f:02:db:ab:72:33:df:e5:cb:f4:9c:13:be:d4:1d:db:f2:74:
2c:a7:8e:4c:e6:b6:a1:86:b8:a1:d5:b7:15:19:f1:69:d6:8e:
14:ee:7c:11:a1:c1:9e:2d:b7:00:d6:75:fb:aa:f4:0a:02:79:
02:d6:ac:c7:d0:d6:dc:ec:97:33:a8:28:02:ff:d6:61:a4:2b:
b5:48:a2:0d:3a:d7:b5:3e:a4:5f:44:70:91:cd:2d:b1:3b:50:
58:0b:71:30:81:34:2b:44:12:2d:19:58:d3:ad:2e:bc:b2:cc:
3a:8a:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:28:27 2026 by rpki-client