
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/4E7FF5F8CF4011F093323D50C4F9AE02.roa
File: 4E7FF5F8CF4011F093323D50C4F9AE02.roa (raw, json)
Hash identifier: tKUyqADQNHpmGouxD/J8Dml9YhqA+hcHH8c4dolMR/8=
Subject key identifier: 1A:7F:99:26:B9:4F:5D:78:A8:5D:3D:D1:B5:24:C1:6E:86:EB:C5:A9
Certificate issuer: /CN=A915AC36/serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Certificate serial: 35
Authority key identifier: F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/4E7FF5F8CF4011F093323D50C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:39:44 +0000
ROA not before: Tue 02 Dec 2025 05:32:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 29802
IP address blocks: 144.79.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:16:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AC36, serialNumber=F1C80FBDD54C1802902C85CE990A112ED30B5F5F
Validity
Not Before: Dec 2 05:32:35 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a5a12f-5818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:8c:a9:12:7e:ee:df:45:1e:4c:7b:11:13:
60:30:1f:ad:09:b0:bb:4f:83:2b:aa:ca:b3:be:9d:
1c:60:6e:57:73:7a:83:ae:7b:2f:09:9e:5c:19:d0:
ef:c4:53:2a:c9:d9:18:bb:6a:a7:de:89:a4:13:64:
57:43:19:f2:de:cf:2d:de:d9:a9:48:e6:dc:e9:75:
bc:4c:16:80:d6:a3:69:50:1a:c0:ae:22:84:39:08:
bf:7f:a3:ea:2b:c6:e5:78:e8:74:35:7d:b0:14:44:
68:6c:d0:b7:10:f6:ad:ab:36:33:04:b0:97:f0:4e:
15:ca:d1:0d:f5:f5:55:67:61:fc:93:4e:68:5b:5c:
5f:df:f2:92:de:94:5b:82:14:d6:34:4c:6f:29:ff:
1d:7a:08:a1:c4:74:c3:f6:f7:36:bc:12:7a:08:28:
97:41:2b:1b:2d:a3:8c:bd:65:36:c7:63:cf:3a:5c:
b8:cb:7f:49:73:ea:02:70:c8:5e:f6:1b:7e:b4:27:
32:f2:d7:0c:48:02:fa:43:8c:96:81:33:04:b8:63:
5c:84:34:78:9c:8c:d3:c0:e9:eb:b7:0f:73:ce:1d:
e3:02:96:dd:18:8c:14:49:51:b0:4b:0a:0a:d7:a2:
39:51:0c:87:0e:6b:4e:7c:05:cf:86:d2:ad:71:c3:
9e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:99:26:B9:4F:5D:78:A8:5D:3D:D1:B5:24:C1:6E:86:EB:C5:A9
X509v3 Authority Key Identifier:
keyid:F1:C8:0F:BD:D5:4C:18:02:90:2C:85:CE:99:0A:11:2E:D3:0B:5F:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/8cgPvdVMGAKQLIXOmQoRLtMLX18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8cgPvdVMGAKQLIXOmQoRLtMLX18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AC36/E422A998CC1B11F0B93D8F2CC4F9AE02/4E7FF5F8CF4011F093323D50C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
144.79.16.0/24
Signature Algorithm: sha256WithRSAEncryption
24:51:90:76:2d:69:78:c3:eb:90:fa:b8:64:30:e9:06:35:18:
e4:a8:2f:34:98:7f:d1:e9:fe:83:05:6a:24:a3:e4:22:29:7c:
39:76:a0:40:ee:e6:01:8c:39:28:6a:8b:ee:62:5a:e3:f5:83:
15:58:cf:2f:22:69:f6:4f:56:0c:83:05:ba:db:68:c2:14:dc:
f0:ab:e7:0f:1a:0e:4b:be:05:ad:33:cb:37:b0:65:5e:d0:3f:
da:3b:4d:9f:2d:45:0a:2b:d5:cf:82:08:1e:e3:a4:4b:c9:6b:
3a:2b:a3:f3:d2:14:01:34:15:63:da:57:1e:f8:87:8c:bd:a1:
90:ef:aa:57:ba:2e:dc:b9:4c:93:3b:1b:6d:bc:c3:e2:67:94:
27:a6:9b:15:db:a7:d0:20:d8:d3:d0:a2:be:2c:c5:19:9a:9b:
f7:d7:18:3b:68:a8:e0:9d:55:92:0c:2d:74:eb:1e:6a:60:62:
23:86:0c:bd:f8:c0:b9:33:10:99:a7:6d:ce:f7:33:bd:7d:f4:
33:ec:6a:8f:9a:93:7b:0d:2c:72:21:a1:04:35:16:9e:ab:29:
04:8e:d1:30:b0:ae:5c:b4:b1:8e:fd:4f:75:d6:c5:88:d0:e0:
6f:8f:4a:7a:3a:80:9f:04:2a:32:52:de:7e:28:66:eb:73:0b:
c7:7b:b8:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:47 2026 by rpki-client