
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa
File: 7C5F5278589611F084D9AA7BC4F9AE02.roa (raw, json)
Hash identifier: SpGXHIvK5nyaRkt9i4BT1y40N9SY9IO5lxOenq0eXjc=
Subject key identifier: 6F:53:09:9A:78:18:74:8A:72:49:4B:3D:A3:16:62:E2:1E:8D:54:84
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 38BF
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:23:13 +0000
ROA not before: Mon 18 Aug 2025 14:50:24 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 19551
IP address blocks: 180.255.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Mar 2026 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14527 (0x38bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Aug 18 14:50:24 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48411-3f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:34:2b:f2:fd:40:d1:03:53:b1:8d:de:12:
29:64:af:7a:97:fd:83:ba:50:1d:17:f6:3d:17:1f:
d5:29:f4:bf:b1:b0:19:77:5d:f1:3f:83:9f:9f:2f:
ac:ca:2a:2c:6b:9b:2c:10:e9:41:fb:db:8f:28:14:
f3:36:16:6f:09:d2:44:38:98:4a:1d:53:39:74:75:
38:39:5f:7f:8f:52:d0:1c:53:53:98:df:1a:fc:d7:
79:02:6c:c7:c7:97:97:7d:cf:dd:8d:ae:b4:85:fd:
46:34:68:57:df:57:72:91:23:9e:01:9c:d8:cd:09:
52:bc:48:63:9c:56:2f:6c:86:be:bb:b5:8d:9e:6b:
9c:e9:e0:a8:8b:22:e1:11:fa:72:c9:38:92:1a:20:
07:bf:62:ec:41:47:b3:f3:63:41:e1:0c:85:cd:7d:
f9:74:42:15:87:79:ff:be:88:ca:9a:5e:49:7c:86:
18:51:68:e5:24:18:6a:78:ea:44:17:69:37:d6:77:
8e:d1:3a:be:93:7d:72:bd:e4:e1:13:f4:6e:cf:36:
45:ba:90:5d:3c:cd:d6:ac:04:e7:84:d1:77:7b:83:
b0:ad:19:83:4e:d4:e7:7b:4d:1c:69:c0:a5:3c:16:
41:ff:35:d7:21:2d:2b:41:11:79:0b:11:54:b1:f5:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:09:9A:78:18:74:8A:72:49:4B:3D:A3:16:62:E2:1E:8D:54:84
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
180.255.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:98:37:95:92:76:09:12:c2:c5:55:95:2b:2d:81:f6:81:23:
5a:bd:75:53:cc:0f:5e:4e:4b:0d:f1:a8:6e:9c:33:c0:31:b2:
ea:b1:b1:ee:fb:4b:55:4e:b1:c7:9a:88:7f:6a:33:20:19:70:
69:c7:f3:1a:fd:22:3c:43:de:96:d5:c7:12:0f:64:84:4b:3b:
74:dc:eb:bb:b7:37:cd:78:6f:e1:30:5c:23:bb:ed:8b:a5:66:
9f:1a:e9:19:f4:b3:36:01:6c:7b:26:ce:91:a2:e5:c0:22:be:
bd:d0:65:b4:0c:f9:cc:9f:37:ac:2c:28:5b:6a:04:0b:1c:e7:
a4:1e:ff:6b:6d:00:19:ee:a1:6b:55:30:f3:08:9c:2d:e9:7e:
95:b0:11:b2:92:0b:24:99:ee:d1:2a:6e:e5:2a:84:fc:44:03:
7d:53:36:45:65:c9:b2:c5:e0:00:cb:5a:d9:c6:e6:50:e9:b0:
0f:44:0a:50:92:d2:e3:29:12:54:95:94:de:6c:f9:18:34:f8:
0e:d8:41:56:73:0f:e5:72:de:3b:e1:bd:99:ee:50:b8:f8:88:
0a:6b:2e:0e:7f:cc:2f:0b:97:2e:e6:b5:0b:a2:e6:7b:c6:00:
97:d4:bf:d9:27:9b:71:a4:a1:25:45:f7:c4:97:a0:78:f9:6b:
39:43:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 18:01:46 2026 by rpki-client