
$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/2C8A1D2C16BA11F18FA4AADE273D8C67.roa
File: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (raw, json)
Hash identifier: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=
Subject key identifier: 25:89:1D:F4:24:8D:44:B6:6F:67:BC:8F:DC:52:FC:93:2D:4E:44:80
Certificate issuer: /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Certificate serial: 02
Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/2C8A1D2C16BA11F18FA4AADE273D8C67.roa
Signing time: Tue 03 Mar 2026 04:33:49 +0000
ROA not before: Tue 03 Mar 2026 04:33:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150683
IP address blocks: 151.158.252.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 08:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Validity
Not Before: Mar 3 04:33:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a664ad-cf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:c5:0e:60:83:09:96:2d:32:d4:73:9c:d8:
00:85:45:5e:c1:59:61:ba:46:b9:c6:e2:72:2c:d0:
c0:01:33:03:37:93:ee:9c:1b:66:83:b1:f1:aa:87:
01:09:67:b4:b2:cb:14:80:9f:e9:37:bf:c5:19:8d:
48:e8:dd:b3:d9:ae:3f:4e:39:a0:ab:5b:87:f8:98:
b9:f5:44:ec:a6:c1:7d:7a:97:33:03:2c:63:66:22:
4c:5f:19:6e:41:46:41:6c:49:d3:0a:2e:34:bf:78:
55:06:e9:98:71:54:38:5d:a7:b1:f5:69:18:1e:f9:
a0:66:f6:c4:96:1f:c8:a2:26:51:75:0a:96:d2:26:
05:f8:40:d4:34:ac:0e:49:c3:1d:eb:31:dd:30:84:
2d:47:84:2d:52:4f:bb:46:cd:fe:65:57:24:bb:ab:
b5:ce:c7:59:59:a0:c9:5a:23:0a:da:3f:82:de:15:
7e:67:55:c5:9a:9b:73:ec:20:7e:4d:ed:30:ad:5d:
d1:5e:20:28:a0:07:e5:c3:1b:ad:f0:0b:69:5d:04:
81:4b:04:76:05:68:65:36:d7:33:5a:ef:fb:a5:9e:
be:6c:33:06:1e:6a:66:6b:75:80:96:85:8d:02:f1:
82:7f:a6:6c:c2:9a:2b:9d:56:7b:06:79:ba:d6:ab:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:89:1D:F4:24:8D:44:B6:6F:67:BC:8F:DC:52:FC:93:2D:4E:44:80
X509v3 Authority Key Identifier:
keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/2C8A1D2C16BA11F18FA4AADE273D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.252.0/23
Signature Algorithm: sha256WithRSAEncryption
33:45:e3:ff:22:fd:90:89:52:2b:80:24:0d:1e:6b:23:0e:40:
c4:84:17:6c:ee:6f:94:a6:a6:ef:84:b3:25:d8:c5:b6:0c:41:
67:db:d7:57:77:27:a2:c1:46:a8:c1:83:1a:99:52:b3:18:aa:
6a:af:87:78:ac:48:61:b8:b1:c4:8c:be:a6:52:0d:26:2c:6b:
81:2a:a6:48:ed:6d:2f:8d:d4:6d:12:79:99:bf:d0:00:ec:7a:
70:10:06:c0:cc:42:6f:55:62:ca:65:28:66:9f:d9:b1:cf:93:
1e:0e:f0:5b:e1:c6:66:0d:e8:15:cd:fd:5f:a0:37:0b:99:28:
69:5e:b6:1a:bb:cf:bc:48:fc:14:60:d0:55:2f:1f:5b:ac:7c:
06:b4:6f:e2:0b:14:d1:7e:29:79:53:2c:8d:62:f5:d7:f6:f5:
5d:b5:7b:24:68:4c:d1:44:54:75:7b:01:23:eb:f7:33:57:b0:
e7:85:f0:bc:79:d3:80:dc:96:59:39:0c:1a:51:83:49:fd:e9:
7f:31:57:66:83:f0:23:08:49:5b:95:21:e4:80:b1:13:7f:b2:
cd:6d:a6:23:9b:11:07:24:fc:e1:09:15:3c:48:f4:18:bc:48:
8b:73:84:f6:30:52:46:1d:4a:02:82:de:68:bb:52:a6:06:20:
95:95:81:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:06:56 2026 by rpki-client