
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/028640A8242B11ED9547B486C4F9AE02.roa
File: 028640A8242B11ED9547B486C4F9AE02.roa (raw, json)
Hash identifier: mYlWkTExX4PpePww15vUHKurfA1SwY/bbac2OYhbj/0=
Subject key identifier: BB:84:CB:51:5E:87:69:5D:7F:7A:CF:D7:B1:A1:E9:F1:C8:46:20:19
Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Certificate serial: 0315
Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/028640A8242B11ED9547B486C4F9AE02.roa
Signing time: Thu 09 Jul 2026 02:28:39 +0000
ROA not before: Thu 09 Jul 2026 02:28:38 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17639
IP address blocks: 45.251.24.0/22 maxlen: 22
103.219.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 02:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 789 (0x315)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Validity
Not Before: Jul 9 02:28:38 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4f0756-01bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:6b:0a:90:de:a0:8d:30:ca:8d:d9:6a:25:
15:d2:70:39:b8:03:de:93:b6:d9:01:16:99:fd:a0:
ff:ca:1d:b7:7d:e2:f7:32:05:61:4e:0d:62:44:9c:
04:2a:4e:fa:14:81:d5:2f:e7:f3:78:53:d6:c9:7e:
5a:c8:d7:04:15:5b:65:a4:d8:fd:44:35:b0:8e:37:
8e:31:1b:62:f3:e9:bb:2d:ee:bb:94:f2:df:98:21:
b7:72:4e:b3:12:21:1a:79:e0:85:a1:ba:09:4c:43:
55:ac:9c:25:06:29:81:24:74:32:99:c7:84:99:17:
7d:eb:42:0c:e1:25:f5:8d:d4:ff:93:28:68:0a:18:
d5:f6:74:fc:cd:97:b3:45:08:12:0b:c4:25:bf:10:
bf:40:c3:6f:f0:e0:4a:4b:a8:67:df:38:00:20:9c:
f1:4b:57:2e:26:79:46:6a:31:72:fe:e1:2e:e9:a6:
54:12:33:0f:a7:30:fc:b9:1b:d8:7b:3a:7b:ec:f8:
c9:2d:ac:d6:e5:65:d0:b2:92:b5:74:ee:ce:7c:e0:
8e:90:72:bf:20:84:21:82:1b:e0:e4:8f:31:de:5e:
fa:84:53:41:21:f6:61:5f:de:c4:65:0a:3e:f1:ce:
69:04:50:0d:52:7d:9f:99:f3:01:be:dd:15:1a:c3:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:84:CB:51:5E:87:69:5D:7F:7A:CF:D7:B1:A1:E9:F1:C8:46:20:19
X509v3 Authority Key Identifier:
keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/028640A8242B11ED9547B486C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.251.24.0/22
103.219.188.0/22
Signature Algorithm: sha256WithRSAEncryption
75:13:f8:62:78:5f:70:e0:e4:a3:0f:a3:b3:de:b3:52:d2:a0:
bd:1c:a6:26:98:17:09:56:42:cf:17:f6:50:15:5d:83:f0:5b:
5f:d2:e4:26:d0:73:e0:0a:5b:a1:4b:88:14:e8:68:be:38:ad:
d7:c5:a0:1a:93:b2:eb:d8:26:b6:d2:41:eb:70:87:bb:55:6c:
55:f9:75:13:9c:de:21:45:69:a4:f5:a5:68:80:a9:2c:c7:75:
27:1c:c2:94:22:e2:d7:a3:fb:d9:a5:8a:0b:be:aa:dc:cf:0f:
70:9f:c0:86:bd:59:b6:c5:c6:83:b6:c1:5c:d5:13:5e:4f:73:
0d:fb:21:15:89:d2:58:a9:7e:04:b7:9c:40:d1:59:9d:63:11:
0c:7e:14:39:89:5a:9b:57:d5:42:75:df:c1:ae:6e:04:e5:c0:
cb:56:eb:b3:31:57:2f:82:06:84:e0:44:73:e8:eb:c7:94:8d:
39:66:94:14:8d:1b:0b:22:6d:13:7c:24:05:55:ec:3c:55:df:
30:b0:ae:6b:d8:42:db:4c:c7:8c:93:96:23:7c:a1:cc:da:ba:
6a:2c:50:9d:35:e8:2f:53:07:4f:e8:dd:cf:9d:64:87:f1:10:
b3:0b:6f:79:c8:a4:d1:dd:e9:e0:29:d9:1e:2f:84:fb:bb:b4:
da:5b:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:28 2026 by rpki-client