
$ rpki-client -vvf rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/A885DC48100411F1A3563A300F3D8C67.roa
File: A885DC48100411F1A3563A300F3D8C67.roa (raw, json)
Hash identifier: tF3ywN7eYQwZg7AMUnYYT38GsrrKw6HcmRM3Hqi+nbg=
Subject key identifier: 3B:C9:09:02:B8:92:B3:DA:AF:6F:69:77:C8:FF:D0:0A:D7:D6:71:3C
Certificate issuer: /CN=A912465F/serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Certificate serial: 15
Authority key identifier: 4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/A885DC48100411F1A3563A300F3D8C67.roa
Signing time: Sun 01 Mar 2026 05:39:58 +0000
ROA not before: Sun 22 Feb 2026 15:39:22 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137967
IP address blocks: 151.158.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912465F, serialNumber=4E89F20CE1D1E2AEC8D60565053130BD607D5BFD
Validity
Not Before: Feb 22 15:39:22 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d12e-e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:32:25:16:bc:e9:5f:b0:02:59:39:7e:3d:
b0:4b:eb:93:fb:8e:2d:b7:c6:e4:be:16:18:e1:ec:
04:d4:b5:c3:a7:cb:d7:a3:38:ae:12:5b:dc:4d:cd:
3b:5e:99:21:09:a9:b4:4d:08:6c:a2:58:48:76:45:
5e:c1:c2:f4:62:41:2d:7f:f8:3c:c9:ad:79:04:e7:
fb:dd:0e:1f:e2:9a:72:c9:ae:67:31:86:d9:df:34:
e8:b2:e8:5f:81:bf:d4:9f:57:fd:9e:f1:8f:2f:52:
13:bd:46:1f:aa:ed:48:20:47:5c:c6:bf:1f:e8:44:
80:03:30:d1:e0:ff:6a:56:27:2f:5d:52:b3:d9:35:
88:c5:d6:ef:eb:ce:09:12:87:27:1d:0d:19:4c:d2:
f4:3c:e7:31:4e:57:c4:2f:a5:f1:45:c2:72:fb:47:
f8:09:52:0a:9a:1a:b6:00:cc:3e:27:33:a3:f2:68:
e2:44:14:54:26:f9:2c:fd:12:7f:13:d9:c3:d0:13:
96:e0:ab:20:e5:0c:c5:48:31:e1:40:3c:c4:6e:6a:
19:37:80:cd:83:5f:db:1e:1c:9e:84:46:6f:c5:b2:
1c:18:8c:21:7e:32:76:bb:f5:f8:5e:cc:ed:9a:39:
2d:2e:ab:33:16:99:f3:28:c1:e6:b9:88:d3:96:69:
3b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:09:02:B8:92:B3:DA:AF:6F:69:77:C8:FF:D0:0A:D7:D6:71:3C
X509v3 Authority Key Identifier:
keyid:4E:89:F2:0C:E1:D1:E2:AE:C8:D6:05:65:05:31:30:BD:60:7D:5B:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/TonyDOHR4q7I1gVlBTEwvWB9W_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TonyDOHR4q7I1gVlBTEwvWB9W_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912465F/702C34C6064711F1B4BAFBC52D3D8C67/A885DC48100411F1A3563A300F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.153.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:02:26:aa:5e:3b:c1:fb:f2:2e:73:90:e0:3b:4a:d3:4b:
03:ce:ab:b0:ed:d3:d3:68:ad:2a:25:76:21:47:86:83:9c:88:
6b:b6:ca:91:50:73:9c:52:ee:07:18:d4:d5:ed:a5:4c:8b:3a:
56:c3:3a:a0:59:dc:a6:e2:e0:c3:3f:9a:0a:08:fc:1d:a3:ab:
c8:02:22:c9:6d:a0:0e:66:b1:f8:33:11:bf:03:7f:e9:ff:d4:
ba:d9:1d:c2:ee:cc:75:f1:88:8c:c7:98:ff:c1:4b:5d:26:0d:
8c:8b:39:72:10:4b:75:ad:a3:f7:7c:00:6d:0d:da:1c:63:07:
96:57:49:99:8d:2f:f6:19:93:18:b7:e5:5d:5d:af:62:6e:94:
65:79:82:e1:8e:87:72:b9:aa:5c:3e:fe:d5:23:ab:c1:a3:28:
c8:e0:66:3b:01:13:bc:96:2f:2b:03:27:61:11:7e:1a:0c:7d:
a9:7c:c3:cc:8e:87:1f:49:db:67:08:b6:84:be:fd:f9:82:58:
46:ec:6f:93:ed:44:54:c4:68:bf:d8:16:c0:77:b1:c8:b0:93:
47:54:1c:79:a4:06:40:81:32:00:63:1f:2b:bd:80:1b:96:db:
c3:ab:4f:80:6d:b5:0c:eb:a8:0b:d0:38:d3:82:9d:92:33:95:
8b:8f:9b:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:28:25 2026 by rpki-client