
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
File: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (raw, json)
Hash identifier: xKk5d03+9wZXJdfwshOg6FyI1CiaWzltp3LdLqc/HF0=
Subject key identifier: 06:30:A0:CD:41:78:A7:19:BF:14:78:6F:B5:B7:95:AB:E5:7F:43:8F
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: 0A
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
Signing time: Fri 30 Jan 2026 11:41:59 +0000
ROA not before: Fri 30 Jan 2026 11:41:59 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138043
IP address blocks: 151.158.112.0/24 maxlen: 24
151.158.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Jan 30 11:41:59 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697c9907-f782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:cc:61:14:64:98:81:fb:b0:0e:70:0d:28:
c4:23:79:ea:3e:9c:e0:e6:c3:6d:2f:30:9f:90:3c:
d7:29:c5:55:75:fb:bb:cd:38:9d:bf:54:7e:f0:59:
f8:b4:3f:2e:af:81:dd:49:62:c9:b4:28:94:e9:3a:
2c:96:17:2f:66:f6:52:f3:5f:20:9a:5e:0b:e7:cd:
2c:97:48:4a:28:4e:47:8f:29:d5:fc:ed:51:18:43:
11:4e:a5:19:c0:a0:0f:22:dd:7d:8e:97:d5:ac:a6:
ce:bd:20:1e:72:de:39:1a:7c:4a:5c:6f:d0:35:76:
aa:ef:29:16:56:fb:14:3d:dc:e2:2d:38:cb:6d:81:
3f:08:69:ec:cc:88:6c:f3:cb:9a:a2:54:3b:1e:0e:
45:73:3d:49:9c:37:08:ed:00:8b:b3:5a:3c:b2:f9:
a4:92:41:c1:92:74:bd:b3:db:d8:0e:3f:95:f8:83:
73:23:55:8a:62:32:ed:1a:f1:55:9a:8a:eb:6b:7f:
7d:4e:d8:68:7d:4f:d0:76:92:63:11:93:1b:5b:a6:
79:c2:8d:14:85:95:b1:07:c8:c0:c9:2b:35:86:17:
f7:74:ad:05:d2:2a:98:7e:dd:cf:62:b2:56:3b:ed:
03:aa:d7:c9:27:3c:75:27:3e:fd:57:06:f9:13:bc:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:30:A0:CD:41:78:A7:19:BF:14:78:6F:B5:B7:95:AB:E5:7F:43:8F
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.112.0/23
Signature Algorithm: sha256WithRSAEncryption
63:73:cd:68:f9:83:51:a1:e8:45:5f:d7:2c:6d:14:23:69:f3:
2d:aa:3a:06:cc:90:d9:c5:e8:8e:68:e0:48:34:85:5f:b3:01:
41:bf:21:37:b2:e2:10:fc:5c:6f:88:4f:e5:53:1e:07:95:56:
55:5a:e6:93:7a:1d:f6:7f:00:49:61:49:67:3a:d6:eb:bc:23:
a0:d0:92:1c:ea:4f:cf:c5:6a:60:8c:a2:3a:ee:d3:c7:2b:d7:
ec:b5:9d:62:f2:f9:fe:cc:4c:f0:27:d4:d8:46:f9:35:3c:20:
af:22:26:51:fa:94:24:dc:33:63:db:d9:f8:b8:de:8c:7f:d8:
56:9c:37:29:bc:59:4e:b5:14:0d:8a:2f:40:fc:68:20:5f:06:
0e:67:38:9c:d8:e2:e1:78:67:8e:11:1b:bb:3a:b8:f3:11:0f:
0a:3c:41:8b:3a:57:4b:63:93:57:3a:7a:b9:4a:2f:b5:22:dd:
fc:d2:96:8d:99:34:31:10:a4:7e:d8:b3:46:4b:83:a2:94:4e:
20:4f:ba:a3:85:da:68:a0:d2:33:0f:23:c8:d7:0b:1a:cf:2d:
98:4f:0d:0f:52:7c:0c:8f:5a:e3:68:fe:d3:df:95:35:e9:4a:
00:63:ff:ab:74:ec:bb:46:80:e7:81:2c:e4:4a:2b:ab:40:cf:
19:cc:1d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:17 2026 by rpki-client