
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/AF0B10DA76AA11F1B1C1D2366EA30FBC.roa
File: AF0B10DA76AA11F1B1C1D2366EA30FBC.roa (raw, json)
Hash identifier: I8vYr4sK7wPDCmK1D8AG70gSisE8oer5TEFY/kjW/mk=
Subject key identifier: 5F:8A:DA:6B:F5:DD:B3:D6:1A:E4:40:10:C1:E1:55:58:AF:3B:6C:2F
Certificate issuer: /CN=A915B358/serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Certificate serial: 63
Authority key identifier: 80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/AF0B10DA76AA11F1B1C1D2366EA30FBC.roa
Signing time: Fri 03 Jul 2026 06:44:48 +0000
ROA not before: Fri 03 Jul 2026 06:44:48 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 18013
IP address blocks: 151.158.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 09:52:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Validity
Not Before: Jul 3 06:44:48 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a475a60-e273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:ab:42:2b:58:81:40:17:2b:d7:67:31:e7:
4b:15:32:83:f9:52:eb:58:11:49:0f:a6:11:30:d2:
ad:e3:b3:23:ad:76:c2:ec:33:58:91:e7:59:17:07:
78:0e:08:70:7b:bc:ff:e8:3e:81:9e:3c:e2:df:1c:
78:b1:97:e3:58:88:0c:fb:e3:b1:db:c1:6c:fc:77:
47:b1:c2:0b:00:b3:da:ce:e1:79:60:98:20:9d:a7:
60:fc:97:9d:41:87:79:da:55:45:23:2c:0f:c4:68:
3e:40:10:b5:2a:b6:de:97:13:e6:3f:b8:b5:77:15:
65:cc:0c:97:0e:ff:56:71:47:06:a8:b0:6b:01:e6:
6a:31:75:ad:95:e4:5b:e3:22:ba:71:a8:9e:54:8f:
89:3b:f0:8f:cd:18:19:86:9f:f3:d4:6a:02:5f:67:
31:44:44:6a:d7:71:0f:0c:9b:2a:93:4d:1a:0a:e0:
6f:dc:99:05:8e:d5:be:28:f6:f3:91:d5:2d:a8:10:
60:0c:d8:77:37:b0:9d:54:d5:1f:43:c4:4e:7f:01:
40:1a:2f:cd:5f:d6:32:52:fd:cd:fb:b7:73:79:bb:
b2:6d:e3:86:8d:60:98:c4:44:a6:97:cc:c3:ad:4b:
fe:17:d1:8e:7c:1d:0c:bb:bf:13:23:f7:b6:b1:50:
aa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8A:DA:6B:F5:DD:B3:D6:1A:E4:40:10:C1:E1:55:58:AF:3B:6C:2F
X509v3 Authority Key Identifier:
keyid:80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/AF0B10DA76AA11F1B1C1D2366EA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.9.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ba:cc:7b:d2:13:46:06:ee:8d:b4:cd:f2:35:28:ce:6c:31:
a6:35:91:75:5b:da:6a:5c:b7:2d:6a:02:ec:98:84:75:d6:11:
38:22:71:6e:a2:25:4a:52:66:7f:22:34:c9:b8:fa:1e:b9:11:
b0:31:83:93:f5:11:a8:bf:fd:42:47:30:1e:f1:20:fc:5b:af:
cf:a3:af:ca:36:b7:4b:b5:10:7f:9d:8d:f0:3e:c6:d3:28:c7:
41:de:3d:b0:a5:80:44:fa:bf:ef:5a:97:18:9e:98:1f:3b:60:
ee:cf:b7:ad:d1:82:77:b0:32:18:e8:7e:3c:c7:73:2a:e7:ec:
65:a8:98:62:b4:36:84:3b:30:73:02:d0:34:78:24:bb:f4:42:
8f:53:fd:6e:f0:00:5a:7c:89:9e:23:46:90:18:cd:eb:81:f0:
4d:1b:5d:23:5f:65:41:21:24:46:68:1a:1c:34:d5:89:3b:42:
7e:b9:a0:bf:2e:50:39:94:d7:98:66:cc:45:3d:9a:5b:5c:af:
3e:07:34:4f:1d:28:bb:e2:91:9b:0c:ed:36:9a:a1:90:5a:8b:
ed:03:7d:89:64:9a:af:54:aa:6d:47:0a:0a:5b:e5:94:da:68:
15:fe:a0:16:7b:73:fa:d6:45:aa:50:d9:82:6e:5c:d6:5e:87:
fc:29:9d:91
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QjM1ODExMC8GA1UEBRMoODBDODJCOUQ0MjY2MTc5OEQxQTJFMDBCQ0VBQjA2RjNF
NEUxQTM1RTAeFw0yNjA3MDMwNjQ0NDhaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNDc1YTYwLWUyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtlqtCK1iBQBcr12cx50sVMoP5UutYEUkPphEw0q3jsyOtdsLsM1iR51kXB3gO
CHB7vP/oPoGePOLfHHixl+NYiAz747HbwWz8d0exwgsAs9rO4XlgmCCdp2D8l51B
h3naVUUjLA/EaD5AELUqtt6XE+Y/uLV3FWXMDJcO/1ZxRwaosGsB5moxda2V5Fvj
IrpxqJ5Uj4k78I/NGBmGn/PUagJfZzFERGrXcQ8MmyqTTRoK4G/cmQWO1b4o9vOR
1S2oEGAM2Hc3sJ1U1R9DxE5/AUAaL81f1jJS/c37t3N5u7Jt44aNYJjERKaXzMOt
S/4X0Y58HQy7vxMj97axUKrDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUX4raa/Xd
s9Ya5EAQweFVWK87bC8wHwYDVR0jBBgwFoAUgMgrnUJmF5jRouALzqsG8+Tho14w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMzU4L0U3RTU2NEM2RjEx
NDExRjA5NkNENTU0RDRCNkY1NkJDL2dNZ3JuVUptRjVqUm91QUx6cXNHOC1UaG8x
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvZ01ncm5VSm1GNWpSb3VBTHpxc0c4LVRobzE0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjM1OC9FN0U1NjRDNkYxMTQxMUYwOTZDRDU1NEQ0QjZGNTZCQy9BRjBCMTBEQTc2
QUExMUYxQjFDMUQyMzY2RUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXngkwDQYJKoZIhvcNAQELBQADggEBAJC6zHvSE0YG7o20zfI1KM5s
MaY1kXVb2mpcty1qAuyYhHXWETgicW6iJUpSZn8iNMm4+h65EbAxg5P1Eai//UJH
MB7xIPxbr8+jr8o2t0u1EH+djfA+xtMox0HePbClgET6v+9alxiemB87YO7Pt63R
gnewMhjofjzHcyrn7GWomGK0NoQ7MHMC0DR4JLv0Qo9T/W7wAFp8iZ4jRpAYzeuB
8E0bXSNfZUEhJEZoGhw01Yk7Qn65oL8uUDmU15hmzEU9mltcrz4HNE8dKLvikZsM
7TaaoZBai+0DfYlkmq9Uqm1HCgpb5ZTaaBX+oBZ7c/rWRapQ2YJuXNZeh/wpnZE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:31 2026 by rpki-client