
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/489B8430DE8911EEB21B9B45C4F9AE02.roa
File: 489B8430DE8911EEB21B9B45C4F9AE02.roa (raw, json)
Hash identifier: TKzfnbL4N/YqAsPmkqZrRqZwXzr+/5wSY/kNkmRx0vY=
Subject key identifier: 77:3B:93:B8:07:62:1F:7F:51:A2:53:F9:18:EA:F4:B2:31:2C:0B:56
Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial: 0187
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/489B8430DE8911EEB21B9B45C4F9AE02.roa
Signing time: Fri 03 Apr 2026 04:39:03 +0000
ROA not before: Fri 03 Apr 2026 04:39:03 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152464
IP address blocks: 157.15.178.0/24 maxlen: 24
157.15.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:57:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Validity
Not Before: Apr 3 04:39:03 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cf4466-697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:5b:00:26:b2:a7:57:53:5e:6a:51:38:dc:
d0:55:9d:a6:53:f4:0c:b6:db:a7:65:42:3a:1a:93:
12:aa:cd:4d:62:7e:dd:ec:16:28:e7:d9:8a:dd:b4:
fe:c6:f4:31:6f:2b:f6:eb:bb:8c:fa:a3:81:db:65:
3e:f5:02:ed:9b:65:be:5d:41:75:02:9d:18:22:57:
21:55:cb:88:df:a0:86:7e:0c:f0:bd:a5:f3:03:f5:
18:16:fa:49:28:ce:cd:81:ec:8b:2f:87:88:a0:7d:
36:1f:07:f8:2a:8d:a2:94:29:2d:c2:c7:31:36:cc:
a6:1b:77:fe:e9:42:85:77:e1:ae:57:db:c9:8f:38:
2c:76:dd:fb:77:cd:36:22:41:82:5f:76:57:dd:e5:
8c:2c:4f:40:80:d3:d4:1d:93:12:da:9d:8a:40:79:
6d:66:56:43:fc:7c:7c:27:40:27:c1:55:d7:b8:9c:
f2:26:5e:c6:5c:1f:45:de:13:c4:50:e2:98:7b:a9:
d0:38:3d:8c:d8:db:df:d0:5a:08:87:65:8f:2a:dd:
28:eb:b7:cf:cb:e0:5d:0a:8f:c6:e3:8e:97:72:4d:
fa:fd:46:09:97:79:95:1e:91:69:73:dd:de:31:f4:
87:67:ff:c1:ea:2e:ef:67:c3:b8:cd:a8:6c:bb:e5:
9f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:93:B8:07:62:1F:7F:51:A2:53:F9:18:EA:F4:B2:31:2C:0B:56
X509v3 Authority Key Identifier:
keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/489B8430DE8911EEB21B9B45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.178.0/23
Signature Algorithm: sha256WithRSAEncryption
70:33:61:a9:20:5f:2b:73:6b:f6:39:ec:00:ea:e4:ae:48:b7:
3b:38:07:d5:57:d6:2a:82:bc:69:03:5e:dc:16:1f:9c:cd:d3:
38:f3:89:5f:86:97:f1:67:45:0e:4d:7b:f2:89:4d:fd:86:ad:
46:1a:35:f4:3e:7d:df:c8:9e:15:68:43:19:af:37:41:b5:3b:
8e:14:de:05:20:14:1c:05:11:80:e4:dd:a7:61:1c:50:5d:33:
30:c0:03:3f:d1:35:28:86:02:58:86:f3:f9:11:f1:b3:c8:d9:
59:ac:2b:fb:f9:ae:fc:f8:1c:3a:14:a5:98:e2:56:26:80:af:
be:cc:a2:c6:04:14:1a:d1:1a:84:34:d9:f1:7d:25:15:73:7f:
91:93:2a:a7:dd:a4:4d:90:93:82:50:67:2b:06:d0:29:f7:65:
5d:c0:c7:c7:1b:64:0f:f0:f1:f1:09:24:04:1b:40:f0:64:5e:
24:d9:cb:f6:c2:12:8a:8c:27:04:9f:5d:bc:1b:7d:c6:c9:51:
5d:7a:3c:14:11:ce:c4:4e:53:58:b0:25:c7:67:1f:a3:bf:e3:
ea:27:85:5f:b0:85:20:90:51:61:4a:2f:a2:6d:5c:ae:c9:14:
58:c8:0d:93:d0:c3:fd:aa:92:7c:78:c4:f2:a7:dd:14:c3:b4:
c2:55:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:02:46 2026 by rpki-client