
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D80B89B8474011F1AEFA8515C4833773.roa
File: D80B89B8474011F1AEFA8515C4833773.roa (raw, json)
Hash identifier: /Mx48RivMI5vcWgSlv0LvsfLYioB7M+pM8mkhUvl57w=
Subject key identifier: DC:18:3E:55:4D:54:EC:88:6F:E3:0E:A1:26:D6:44:0B:6D:22:B6:96
Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Certificate serial: 1B
Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D80B89B8474011F1AEFA8515C4833773.roa
Signing time: Sat 23 May 2026 06:38:03 +0000
ROA not before: Sat 23 May 2026 06:38:03 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 138590
IP address blocks: 151.123.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 06:21:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Validity
Not Before: May 23 06:38:03 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a114b4a-8ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:84:23:3a:f1:fd:15:af:8f:ef:7d:70:d7:
ef:38:1d:ac:e6:73:3f:4c:a2:bb:8c:10:b6:a0:24:
b2:f9:55:c6:46:37:b1:bc:8a:f1:b7:e7:fb:ef:e2:
80:0e:0f:0d:82:75:38:82:77:7b:66:10:be:6b:f5:
4e:3e:20:ff:0d:25:ae:4a:24:fc:ea:fd:08:0a:99:
37:de:6b:86:28:fe:b9:94:78:d5:f9:1a:9c:46:4f:
d3:03:26:b7:a0:c2:88:56:02:8a:a4:89:d4:3a:5f:
d5:ce:b4:48:45:b4:31:16:f4:b7:f1:ea:64:a8:65:
ea:2e:26:fd:31:54:0f:b5:93:bd:f7:f2:6c:25:96:
76:5f:9e:d9:2a:58:3e:20:2e:0e:96:ff:e3:ec:5c:
d3:b8:c6:cc:0b:b8:36:96:eb:da:b9:91:6e:04:d2:
ec:0c:38:41:e7:87:72:bf:7a:2f:1a:47:8d:94:a5:
8a:29:43:48:34:87:5b:30:ca:70:2d:b7:49:c3:69:
3f:f0:83:e2:c4:1c:4c:50:9c:2b:03:84:3c:4a:06:
56:ae:cf:b9:71:8f:18:28:ef:ae:50:f3:5e:7f:d7:
ee:81:60:73:a0:05:ff:f9:a5:76:dc:f2:08:06:9d:
19:5c:11:c1:e1:c1:d5:64:ea:4b:6f:8a:b2:18:6b:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:18:3E:55:4D:54:EC:88:6F:E3:0E:A1:26:D6:44:0B:6D:22:B6:96
X509v3 Authority Key Identifier:
keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D80B89B8474011F1AEFA8515C4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a6:7f:d9:0c:25:ea:82:40:ee:31:73:4b:b0:0d:6c:21:55:
d0:c4:40:db:e0:8d:d2:d6:32:9a:3c:62:0d:2c:8b:ae:cf:12:
51:f8:63:36:95:cc:69:93:61:05:d9:82:82:7e:aa:f4:bf:3b:
7c:72:ac:3d:be:86:f7:d4:c4:18:df:7a:61:6f:6c:c1:e8:1b:
cd:74:91:f2:3f:b4:5f:6c:ad:24:0e:7c:22:d5:6e:e6:91:ee:
69:85:a3:50:03:01:bc:94:00:ff:c5:25:bf:d6:43:ae:39:f3:
59:7c:d3:a6:f3:9c:9b:12:db:a2:5a:c9:78:63:db:6e:a6:f8:
fe:fb:b9:6e:be:e5:49:11:36:e7:1d:1d:8b:e8:5b:9f:cd:ee:
44:6c:09:ec:2e:5e:c0:3e:d1:81:1a:e2:68:e1:2b:d0:d2:92:
47:e8:c8:76:45:b5:d8:e1:07:70:21:0c:eb:a2:d6:d0:a8:be:
5a:14:8b:e5:9d:ad:c4:45:89:74:36:40:08:3d:00:d0:b6:19:
8b:54:88:a6:ec:64:e3:be:b5:49:b0:6e:ba:8f:74:2b:79:fb:
c7:f0:c4:70:9e:b1:99:de:b6:2a:25:2f:5e:32:6d:60:26:fe:
80:dc:85:57:5d:87:0c:1e:5f:df:c7:75:49:26:0d:cd:1a:42:
49:95:b2:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:38 2026 by rpki-client