
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/5A2BB4DE28C111E7A885571AC4F9AE02.roa
File: 5A2BB4DE28C111E7A885571AC4F9AE02.roa (raw, json)
Hash identifier: JbDlEM/odCORQN2cHskqQP03mHShncMFQhmxSE5G3y8=
Subject key identifier: A0:9D:B7:03:15:50:DF:A0:54:5C:CB:E2:8B:1D:11:76:1E:4B:07:99
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 25CB
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/5A2BB4DE28C111E7A885571AC4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:23:59 +0000
ROA not before: Tue 18 Aug 2026 16:23:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38612
IP address blocks: 117.18.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9675 (0x25cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Aug 18 16:23:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a84871f-f814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:04:f5:dd:97:71:a7:a1:e3:02:07:91:04:
9e:37:5e:fb:fa:8a:a0:98:ef:e1:d2:d5:e8:ea:c5:
44:2b:3e:50:6e:6e:d8:41:50:a9:9b:3e:3a:2a:f1:
09:50:6c:40:59:0f:4e:51:06:65:aa:29:41:ad:29:
c7:b0:87:d6:8d:1c:bf:c7:94:64:b7:12:d8:a9:ba:
55:d7:da:b7:44:c2:c2:07:2e:89:d7:3f:67:e0:e5:
7d:8e:8d:23:d5:be:b3:37:cb:bf:ee:20:fa:e5:be:
9e:24:e0:6a:2f:88:c7:9d:da:d9:d8:28:90:9a:fe:
90:9c:ab:4b:3e:08:db:4c:af:79:8b:fb:a0:94:5c:
4e:8f:6f:2b:04:bd:91:2a:dc:8d:0d:a5:ba:a1:5c:
f3:8f:07:30:c6:15:ec:12:05:b2:35:80:27:c1:df:
04:f4:3c:b3:62:0b:26:87:25:81:ca:ce:25:d9:25:
24:a6:f1:b0:ef:92:de:8a:c9:2f:c3:35:5f:c6:ae:
2e:1a:30:6c:89:c9:39:87:0a:a6:cc:21:91:b0:2b:
48:fd:c6:21:ed:fb:05:ca:3d:e8:75:07:d7:5e:7f:
39:97:b3:50:1d:bb:70:f6:a4:f5:35:5a:ab:90:7e:
72:23:7d:d8:cc:dc:5c:f9:bd:c6:9a:bf:c8:e0:15:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:B7:03:15:50:DF:A0:54:5C:CB:E2:8B:1D:11:76:1E:4B:07:99
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/5A2BB4DE28C111E7A885571AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.48.0/21
Signature Algorithm: sha256WithRSAEncryption
73:36:2a:bc:11:4a:ca:df:47:03:ef:68:17:d4:d0:7e:7d:5f:
48:e9:aa:a5:51:64:e6:99:64:ee:54:09:5d:25:d9:63:0a:34:
2b:5d:a6:dc:c7:2e:3a:a9:24:4e:78:ea:ad:d8:b7:b1:7c:a9:
69:fd:b5:63:9c:fc:53:5c:39:61:79:41:7b:f7:a4:c3:0b:c7:
a4:35:f5:a7:fe:80:b8:bc:83:78:2b:16:71:ab:84:4f:75:0a:
83:e5:56:af:01:30:01:48:bd:f1:f9:7e:50:12:f0:27:dd:c8:
0a:12:f9:e1:e8:f8:e6:77:62:70:fa:98:2d:28:93:4b:d5:65:
e7:35:e3:e1:c2:75:a3:6a:3f:c0:14:a2:58:1a:da:36:f2:22:
ce:5c:2e:0e:87:5a:66:1d:af:21:e2:50:ae:08:6b:af:55:b3:
ed:6a:6c:05:b7:1f:0b:9a:07:12:ae:f5:fd:fb:16:09:f6:dd:
7f:cb:50:39:64:d2:e7:7d:45:7f:bb:08:a1:34:e0:6a:07:c1:
5f:ca:7e:a9:fc:ef:c6:88:28:7c:21:e9:1c:21:02:c9:63:48:
e9:21:6f:d3:72:8d:a6:44:13:0b:0a:70:be:9c:65:41:fe:69:
f7:02:7f:ca:40:95:41:4d:6f:d7:cb:02:c4:0a:19:72:49:c7:
9d:96:9f:4f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1
NzAyMTVDOTYwHhcNMjYwODE4MTYyMzU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ODcxZi1mODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAocUE9d2Xcaeh4wIHkQSeN177+oqgmO/h0tXo6sVEKz5Qbm7YQVCpmz46KvEJ
UGxAWQ9OUQZlqilBrSnHsIfWjRy/x5RktxLYqbpV19q3RMLCBy6J1z9n4OV9jo0j
1b6zN8u/7iD65b6eJOBqL4jHndrZ2CiQmv6QnKtLPgjbTK95i/uglFxOj28rBL2R
KtyNDaW6oVzzjwcwxhXsEgWyNYAnwd8E9DyzYgsmhyWBys4l2SUkpvGw75Leiskv
wzVfxq4uGjBsick5hwqmzCGRsCtI/cYh7fsFyj3odQfXXn85l7NQHbtw9qT1NVqr
kH5yI33YzNxc+b3Gmr/I4BXC+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKCdtwMV
UN+gVFzL4osdEXYeSweZMB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw
MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvNUEyQkI0REUy
OEMxMTFFN0E4ODU1NzFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDdRIwMA0GCSqGSIb3DQEBCwUAA4IBAQBzNiq8EUrK30cD72gX1NB+
fV9I6aqlUWTmmWTuVAldJdljCjQrXabcxy46qSROeOqt2LexfKlp/bVjnPxTXDlh
eUF796TDC8ekNfWn/oC4vIN4KxZxq4RPdQqD5VavATABSL3x+X5QEvAn3cgKEvnh
6Pjmd2Jw+pgtKJNL1WXnNePhwnWjaj/AFKJYGto28iLOXC4Oh1pmHa8h4lCuCGuv
VbPtamwFtx8LmgcSrvX9+xYJ9t1/y1A5ZNLnfUV/uwihNOBqB8Ffyn6p/O/GiCh8
IekcIQLJY0jpIW/Tco2mRBMLCnC+nGVB/mn3An/KQJVBTW/XywLEChlyScedlp9P
-----END CERTIFICATE-----
Generated at Fri Oct 9 00:18:43 2026 by rpki-client