
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
File: F5615BC09B4111EF9EB3AD3AC4F9AE02.roa (raw, json)
Hash identifier: logSYup7qS9Q6pYA6lyqNDxPjhcWKFpRkqTRuyUnXYU=
Subject key identifier: 38:C0:B1:FD:52:B7:DE:69:CB:7E:04:EE:56:1D:53:44:B2:D5:AD:E5
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3175
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:22:43 +0000
ROA not before: Mon 06 Jul 2026 16:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152516
IP address blocks: 157.20.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12661 (0x3175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd653-ec09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f8:e8:b7:09:d2:73:12:a2:f0:39:8c:df:a3:
9a:34:4e:5f:89:c6:e1:42:1d:35:4f:fc:df:bc:4c:
d7:dc:08:f2:bd:7e:4d:00:4d:bc:38:b7:67:26:59:
3e:88:bb:43:1e:0f:19:82:4d:6a:55:67:22:6e:b2:
cb:bd:04:dc:b1:37:65:aa:60:ff:bf:b5:80:72:7d:
be:69:0c:47:bb:8f:2d:ff:3e:a1:90:5b:55:0b:55:
ba:93:db:6a:a4:9e:52:fb:72:13:87:32:b7:7c:7e:
b4:13:02:d3:37:9c:96:87:f1:36:3d:93:a0:e7:7e:
33:f6:d7:53:ec:9a:ba:ac:48:bf:0d:71:f8:6f:64:
a4:db:ad:db:a2:10:80:da:f1:6a:1e:8f:ad:ec:3b:
1e:6b:7e:2e:cb:8d:ee:35:08:cd:5f:60:70:15:4e:
5c:c2:cc:30:b1:3e:39:4e:85:48:03:6d:f5:b6:14:
74:39:c5:26:96:2e:21:7b:ad:b1:bf:7d:ec:5a:7e:
2f:cc:7f:2e:6f:40:47:0e:c4:0c:77:80:23:a4:3d:
b0:5a:f5:4e:01:9a:16:ce:fe:79:de:21:d0:15:df:
83:c2:11:67:ae:e1:4a:07:9b:45:b5:62:29:3f:5a:
c5:a7:53:d5:a3:d2:3d:1f:4b:5f:52:c1:bc:71:52:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C0:B1:FD:52:B7:DE:69:CB:7E:04:EE:56:1D:53:44:B2:D5:AD:E5
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.228.0/23
Signature Algorithm: sha256WithRSAEncryption
35:14:b5:f4:eb:07:4d:58:0e:2b:ac:0c:64:a5:1e:ef:bd:c6:
52:3a:bb:53:72:61:37:fa:ee:33:52:fd:9e:75:53:6f:ec:44:
9a:1d:02:f7:d1:c7:ba:d1:3e:45:fd:0d:db:84:fc:28:96:1c:
27:72:e0:df:9d:31:0c:f7:df:c3:99:00:f8:ef:ba:7f:d0:2b:
8e:92:21:d1:62:bd:81:b7:57:7f:63:bb:9b:d2:5f:be:2d:03:
60:66:01:96:4d:7b:f7:9b:48:68:0e:9d:d1:26:89:ab:b2:ce:
90:df:55:36:f6:20:73:26:4b:fc:a3:7f:d3:61:f8:36:da:bd:
17:a3:57:9c:90:94:a9:06:7b:c5:ee:19:d3:42:1a:be:94:03:
12:ab:f3:af:35:01:6e:c6:9c:2b:2e:ae:b9:66:f8:c3:f8:75:
0d:04:02:5d:92:7a:0e:fb:a4:62:52:e9:2b:98:5a:9c:52:e8:
b4:72:41:b3:e5:02:09:b9:07:12:4c:61:4c:58:ac:e3:82:4a:
bc:a3:b7:a5:53:17:65:96:15:b8:c5:b2:88:9a:cb:86:6f:9c:
4f:26:a8:7e:06:1a:50:45:db:8e:2a:2e:d5:e9:7b:8a:b5:27:
6d:80:e1:2c:6f:57:bd:74:73:f3:6b:90:d3:7d:66:64:db:95:
27:59:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:34 2026 by rpki-client