
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D8ACA550474011F1AEFA8515C4833773.roa
File: D8ACA550474011F1AEFA8515C4833773.roa (raw, json)
Hash identifier: mTGBJhQVRmtXPjIaMK+NnXwADQJAOPWD6GOuporz7rY=
Subject key identifier: D1:56:FB:25:34:5F:4F:92:FF:02:9F:70:C9:C5:45:06:09:11:FD:4A
Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Certificate serial: 1C
Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D8ACA550474011F1AEFA8515C4833773.roa
Signing time: Sat 23 May 2026 06:38:05 +0000
ROA not before: Sat 23 May 2026 06:38:05 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 150750
IP address blocks: 151.123.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 05:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Validity
Not Before: May 23 06:38:05 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a114b4d-725e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:1d:19:52:df:42:31:bf:10:fc:f8:48:43:
45:b9:1c:91:ee:5f:f3:0b:93:c7:cc:8f:7e:1c:6b:
9f:49:2e:eb:e3:94:0d:56:74:37:70:51:10:47:51:
c6:8f:35:ea:74:ef:c8:79:22:83:4f:d0:44:0a:ae:
06:bb:4d:06:95:d7:41:c1:3c:f7:e5:97:2d:e6:9a:
d8:35:bf:ea:fd:75:3b:23:97:03:41:fb:12:31:d7:
27:e9:0c:bf:6f:ea:62:21:79:50:d3:a0:b4:85:38:
eb:ba:ec:f9:96:d7:77:8d:ed:a0:86:fb:6e:a5:fe:
7a:c0:ed:90:49:cb:45:4d:ef:d8:80:46:f2:79:c3:
40:e8:e4:4a:4c:e0:42:d2:61:ca:aa:ec:df:fb:c5:
31:c5:46:d8:56:85:61:b7:ac:8a:37:2d:68:8c:a7:
88:74:fd:2b:bd:7f:b1:9d:31:a4:72:e6:d1:96:22:
d0:cd:1d:8f:4b:fc:fc:b1:58:1e:d3:23:c4:3b:fe:
2d:30:88:4c:3d:7d:25:bf:1d:8b:ec:6c:b7:41:1e:
d0:27:a9:18:a0:92:95:e5:e7:90:a1:4e:bc:91:bb:
6c:34:dd:30:53:fe:90:b6:ce:e3:a6:c7:57:1c:4d:
99:de:84:62:7a:33:36:ca:1a:36:a4:7e:19:7d:69:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:56:FB:25:34:5F:4F:92:FF:02:9F:70:C9:C5:45:06:09:11:FD:4A
X509v3 Authority Key Identifier:
keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D8ACA550474011F1AEFA8515C4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.159.0/24
Signature Algorithm: sha256WithRSAEncryption
16:76:20:7c:e8:b3:8b:37:ea:a6:65:52:33:df:c7:98:35:08:
7e:bf:15:18:75:83:11:1b:e1:e3:1e:23:8e:74:92:26:6d:4c:
69:31:93:fc:d1:9f:c3:d7:35:06:6a:95:e6:e2:31:84:40:6f:
86:65:d4:0e:98:ab:ce:e8:18:c1:7a:5e:4d:9a:3d:9d:62:87:
28:16:53:b1:48:b0:94:35:c9:0d:b1:99:e7:8f:1f:96:f1:3c:
19:1b:6c:c0:60:27:67:64:59:f7:34:58:d3:af:78:63:d0:3d:
cb:36:ef:45:c8:c5:fd:0c:28:3e:e4:34:7e:e5:0e:cc:ef:45:
fc:2d:8e:06:7c:67:78:2f:8c:1c:b1:d6:b5:c7:89:42:f7:2c:
b2:e0:d3:04:a7:68:85:8d:c7:56:33:f5:5a:f8:cc:02:b7:73:
4c:f3:1e:9b:c3:7b:b5:c0:e3:b2:7a:96:6c:93:52:8a:f0:68:
7c:c2:14:8b:f4:e4:47:3e:9a:ee:9b:f5:f4:2f:cd:02:43:e3:
c2:4b:99:31:17:60:af:7c:0f:61:9f:42:9b:09:ca:0d:ac:32:
ce:1c:bb:6a:e4:6d:d9:11:68:79:dc:77:92:0f:0e:f8:45:47:
0b:a5:bc:6a:ff:3b:81:e1:78:0b:f9:ce:05:d1:e2:2e:ef:c9:
e8:82:39:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:41 2026 by rpki-client