
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
File: 395803C8CDD011EEB4E50681C4F9AE02.roa (raw, json)
Hash identifier: XOe/vM34D66BlUFCrb7DKWFlj6Evg6LmNAADyKLibkc=
Subject key identifier: AC:6E:B3:A7:DD:FC:FA:9A:97:B3:DB:F1:7B:6D:F6:41:26:38:41:80
Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Certificate serial: 0186
Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:24:53 +0000
ROA not before: Mon 03 Mar 2025 07:29:10 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 63801
IP address blocks: 157.15.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 03:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Validity
Not Before: Mar 3 07:29:10 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a59db5-f9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:21:de:ab:a2:41:d9:a0:de:59:ad:98:27:
84:8a:42:b9:a7:7c:65:59:09:df:f7:06:31:a5:89:
69:c6:af:e4:9f:05:35:be:fc:c7:22:a5:eb:f9:f3:
d8:da:8a:26:9d:45:dc:a2:66:35:d9:65:c6:fe:c3:
cb:a3:19:fb:87:ec:78:4d:fc:a6:61:b4:a7:3d:d2:
1e:d6:2f:45:37:ef:0a:d2:5b:8d:a6:47:a9:ab:9c:
25:9a:7f:14:86:6c:37:2f:3c:1e:ff:e1:77:58:66:
f7:bf:47:ea:63:51:3a:56:bf:38:8e:7e:b9:12:f1:
46:fc:c8:aa:31:9a:b0:1c:17:fa:27:45:71:5b:84:
c0:37:0f:8e:5f:f6:39:15:ee:c6:0f:51:63:35:4c:
e9:ab:b2:e8:1f:d2:8c:c0:70:05:fd:94:3b:0e:e6:
65:59:c4:b6:fd:5f:6f:4f:f2:f2:7b:bb:b4:a3:26:
c2:1f:bd:6f:6d:f4:bd:df:17:1a:63:bb:31:66:d4:
19:f2:d3:6b:19:5f:f5:49:12:b8:31:a7:6e:2f:aa:
d6:be:e2:d2:e3:a8:86:50:f7:10:0e:ec:10:75:67:
94:99:df:3d:1a:b8:e1:0c:b6:2f:1f:d3:3e:ec:a5:
91:f8:35:3a:f6:d6:e0:38:2a:84:9c:05:00:99:fc:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6E:B3:A7:DD:FC:FA:9A:97:B3:DB:F1:7B:6D:F6:41:26:38:41:80
X509v3 Authority Key Identifier:
keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.126.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c5:36:9f:78:db:09:a8:31:38:c7:9c:35:68:8c:6d:90:30:
54:94:10:f4:57:06:38:45:65:5a:b6:dc:aa:91:d9:e0:52:e2:
20:fd:31:c3:53:bb:b8:3d:bd:3b:fb:c6:5f:1a:d3:60:09:1a:
7c:d2:41:94:20:9c:fc:21:3d:39:c8:8e:64:76:a1:57:1a:81:
85:16:4b:c5:db:ff:2a:4e:f0:e7:49:7e:2f:f9:c4:d4:0b:58:
67:d0:a1:af:e3:61:8a:b6:17:36:f4:64:31:5e:5a:1e:d9:b5:
f7:a0:2f:f5:be:09:94:ff:be:de:83:67:3a:eb:23:bd:e7:88:
51:28:61:d9:87:9f:1d:eb:b8:eb:1c:9c:83:f8:74:45:8a:07:
5a:1a:d6:d7:9d:13:95:d8:71:d1:9a:ac:da:17:cd:b0:31:a8:
ca:43:02:eb:ee:41:47:a4:2f:33:d8:d9:db:b7:a8:b2:8f:20:
61:f3:48:3a:31:bd:2a:22:77:50:ac:06:0a:44:81:fc:74:8b:
6f:68:73:4e:72:c7:90:b8:85:7e:08:f9:10:50:ef:83:a1:62:
0b:dc:7c:7b:d8:65:3a:42:8f:98:24:2d:14:31:9c:79:00:02:
80:fd:d7:0c:6f:ea:3a:32:59:e9:d9:83:c1:fb:6d:01:b5:31:
f6:28:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 09:18:29 2026 by rpki-client