
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/59B3485028C111E7A885571AC4F9AE02.roa
File: 59B3485028C111E7A885571AC4F9AE02.roa (raw, json)
Hash identifier: 6UgOGQv0Ctje2VZDbPHgfGoDZCHN2/IGI8BJAut7+dw=
Subject key identifier: D3:CD:6B:B7:45:DA:98:2E:09:EC:F7:5F:63:36:9C:25:6C:93:71:41
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 25C9
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/59B3485028C111E7A885571AC4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:23:55 +0000
ROA not before: Tue 18 Aug 2026 16:23:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24493
IP address blocks: 117.18.32.0/20 maxlen: 20
117.18.33.0/24 maxlen: 24
117.18.34.0/24 maxlen: 24
117.18.35.0/24 maxlen: 24
117.18.36.0/24 maxlen: 24
117.18.37.0/24 maxlen: 24
117.18.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 14:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9673 (0x25c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Aug 18 16:23:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a84871b-0b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:81:69:b5:14:79:10:04:a0:6f:eb:d1:a7:
a0:4b:a3:ba:86:32:2d:6e:4a:4c:96:18:ca:05:06:
c4:bd:5a:ef:05:17:6f:a8:be:62:70:8b:ab:18:6c:
43:d7:95:0b:d1:78:ae:ec:5b:41:da:df:0d:96:b3:
14:e0:33:97:78:f6:b9:67:d7:1b:af:b5:be:7e:f7:
97:72:55:11:8e:ea:f5:e4:d5:47:53:d0:15:d8:3a:
25:ae:45:91:04:c3:13:58:6c:62:6a:65:25:48:ce:
fa:93:43:6c:07:02:f8:1a:f9:28:04:51:b3:f0:28:
59:78:72:15:72:bf:a8:e2:8c:60:b7:f4:4a:9a:88:
13:27:8e:ca:25:97:8d:d6:5f:12:5c:35:80:7f:f5:
74:28:c8:dd:2a:3b:ad:f5:a6:66:d2:2d:76:23:0f:
6d:97:32:f9:ed:ff:a7:1f:5b:55:97:8f:b0:51:25:
6c:57:56:30:80:db:e9:aa:aa:29:3a:e7:b5:76:8c:
65:4f:6e:a3:30:06:71:7a:37:c0:7a:74:f2:5c:36:
81:a5:13:ae:fc:7a:a0:16:31:e6:4e:c2:48:e1:84:
b4:25:23:02:6a:90:0e:01:c8:6e:9b:d7:f6:6c:2a:
70:0d:ab:ba:ab:e6:8a:4a:af:52:27:ab:76:d1:8b:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CD:6B:B7:45:DA:98:2E:09:EC:F7:5F:63:36:9C:25:6C:93:71:41
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/59B3485028C111E7A885571AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.32.0/20
Signature Algorithm: sha256WithRSAEncryption
96:28:c1:44:1f:c1:ac:8a:21:ad:24:07:a4:9f:32:ba:b2:9d:
13:e4:0a:e8:ce:a1:08:ae:e9:71:6e:b5:44:09:ad:8f:79:f9:
66:84:17:9f:34:f1:74:fe:2d:d1:dd:d8:fe:67:10:13:0b:c7:
82:7c:5c:38:3e:bf:76:28:40:fb:d1:e2:04:34:76:40:36:bc:
71:90:fc:e4:fd:c3:7d:45:34:15:ca:8e:a3:2b:98:a2:3f:d7:
64:7e:1d:81:14:c5:4b:ff:f9:e2:be:1b:af:f3:82:9a:bb:8c:
6c:c1:3a:9e:01:b5:b7:ae:95:2a:ad:1f:d6:c3:51:e6:6a:26:
14:52:1f:38:36:ad:e2:ab:9a:55:0b:42:9e:4a:83:56:46:ef:
66:0b:49:d6:d9:09:fb:fe:59:ad:db:22:c8:27:3b:a1:81:7c:
04:96:9c:f9:64:0c:df:de:7b:19:0e:9a:05:90:ea:2f:c0:fe:
67:25:d8:1c:70:01:df:ad:08:91:aa:8b:ab:5a:f1:5a:83:c8:
47:63:5a:7e:25:28:98:9c:47:2b:4c:48:27:1c:72:9f:40:f1:
5c:9e:b2:4e:c2:81:67:3b:72:ea:cc:42:e7:a8:3b:07:50:4d:
2a:60:d4:54:3a:67:14:d0:0c:29:69:ed:d8:a4:79:eb:a4:e8:
a8:c1:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:54:05 2026 by rpki-client