
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/C7FCC7D210DE11F18FBC6D5B083D8C67.roa
File: C7FCC7D210DE11F18FBC6D5B083D8C67.roa (raw, json)
Hash identifier: ZJ2mGof4d8TGjIUSjiSJIxX88gLNKzRhctZ8YiDrvqI=
Subject key identifier: BF:86:B1:97:D8:75:8F:6D:A0:18:1A:6E:1B:89:F7:62:49:DB:9E:4E
Certificate issuer: /CN=A912C770/serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Certificate serial: 0A
Authority key identifier: 1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/C7FCC7D210DE11F18FBC6D5B083D8C67.roa
Signing time: Sun 01 Mar 2026 05:34:23 +0000
ROA not before: Mon 23 Feb 2026 17:43:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 131275
IP address blocks: 151.158.214.0/24 maxlen: 24
151.158.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C770, serialNumber=1EBF8788247645F9AAF016D020F4CFC2E213C296
Validity
Not Before: Feb 23 17:43:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a3cfde-2618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:18:09:18:5b:08:7b:ba:cc:29:48:8e:bd:
f0:35:ce:3a:22:7d:f9:79:86:49:51:b5:70:c8:5d:
63:0d:10:51:74:68:46:57:94:7c:59:c3:32:4a:0c:
31:dd:49:e6:49:c8:14:1d:1b:f3:53:90:93:b4:0f:
2b:ff:67:6c:0a:f7:e8:88:87:97:80:e7:ef:9e:16:
00:ca:40:ab:91:3b:19:29:81:73:8c:e8:fb:c1:91:
a3:af:9e:41:92:d7:bc:eb:37:c0:a7:8c:51:ae:c5:
f6:a0:46:6a:f6:ed:19:73:fc:48:a8:30:90:5c:10:
08:44:61:26:7d:ff:6d:33:27:59:6d:f3:ce:71:4d:
d5:b6:a3:e7:9f:04:e5:63:85:96:d4:cc:94:73:da:
f1:db:3c:9d:ed:b1:67:fc:95:17:eb:09:b1:a6:d5:
ee:fd:00:1c:be:1a:5a:90:33:6a:ae:0f:c8:d6:83:
0c:ca:66:a3:99:e0:75:5f:ec:35:ff:38:ab:62:3f:
62:f5:c6:da:dd:c9:ac:09:a1:62:40:f3:16:30:71:
31:31:41:9a:11:7f:55:c6:77:49:c1:8b:d4:88:77:
0b:5c:11:8c:a4:ff:4d:46:9e:c0:98:cc:69:ab:29:
52:d5:8f:77:10:66:aa:b8:9f:e0:d1:bd:f7:e3:b9:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:86:B1:97:D8:75:8F:6D:A0:18:1A:6E:1B:89:F7:62:49:DB:9E:4E
X509v3 Authority Key Identifier:
keyid:1E:BF:87:88:24:76:45:F9:AA:F0:16:D0:20:F4:CF:C2:E2:13:C2:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Hr-HiCR2Rfmq8BbQIPTPwuITwpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C770/4ACF96D610DE11F181719257083D8C67/C7FCC7D210DE11F18FBC6D5B083D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.214.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:be:ba:aa:b8:71:04:c4:16:79:4a:19:3e:8b:69:3e:a3:d1:
e0:41:2c:6c:f9:c8:05:65:a0:50:b8:25:55:e1:3c:5c:2b:f5:
17:95:f5:83:88:dd:cc:4c:df:35:ad:f9:26:24:67:2e:63:f9:
6e:49:12:c0:f9:29:2e:fa:9f:d1:d0:cf:70:d0:ef:22:e2:10:
e6:22:97:07:06:65:78:87:13:eb:b1:30:cb:44:ae:eb:ff:2d:
54:d8:1c:91:62:c5:ed:38:0d:de:d7:b3:f4:82:a9:ba:5c:6e:
7e:fe:1b:18:af:8f:23:e0:01:1b:38:ea:f5:04:42:3f:b6:d8:
f4:f5:fe:1f:cf:4a:8d:5e:cb:7a:48:fb:76:42:92:aa:2e:b8:
ed:7b:13:bc:b0:bc:4a:87:a5:48:4a:bc:ad:bc:7e:5c:28:e6:
30:ae:44:93:d2:eb:12:fa:4e:80:11:74:2f:0e:21:65:1c:38:
8d:52:50:1f:49:04:8d:04:eb:ad:14:f4:60:20:73:36:32:f6:
99:97:1a:e3:42:33:b9:cf:04:e6:b3:0b:ac:0a:a5:c7:06:2c:
5b:f3:0e:65:f2:6c:d1:9b:b6:fb:9d:f2:39:1e:86:bc:02:8b:
90:b2:5a:df:f5:37:4e:f1:c3:7e:14:f9:25:26:e3:77:fc:25:
42:40:c6:09
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
Qzc3MDExMC8GA1UEBRMoMUVCRjg3ODgyNDc2NDVGOUFBRjAxNkQwMjBGNENGQzJF
MjEzQzI5NjAeFw0yNjAyMjMxNzQzMTRaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNjZmRlLTI2MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrNBgJGFsIe7rMKUiOvfA1zjoiffl5hklRtXDIXWMNEFF0aEZXlHxZwzJKDDHd
SeZJyBQdG/NTkJO0Dyv/Z2wK9+iIh5eA5++eFgDKQKuROxkpgXOM6PvBkaOvnkGS
17zrN8CnjFGuxfagRmr27Rlz/EioMJBcEAhEYSZ9/20zJ1lt885xTdW2o+efBOVj
hZbUzJRz2vHbPJ3tsWf8lRfrCbGm1e79ABy+GlqQM2quD8jWgwzKZqOZ4HVf7DX/
OKtiP2L1xtrdyawJoWJA8xYwcTExQZoRf1XGd0nBi9SIdwtcEYyk/01GnsCYzGmr
KVLVj3cQZqq4n+DRvffjuUlvAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUv4axl9h1
j22gGBpuG4n3Yknbnk4wHwYDVR0jBBgwFoAUHr+HiCR2Rfmq8BbQIPTPwuITwpYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJDNzcwLzRBQ0Y5NkQ2MTBE
RTExRjE4MTcxOTI1NzA4M0Q4QzY3L0hyLUhpQ1IyUmZtcThCYlFJUFRQd3VJVHdw
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvSHItSGlDUjJSZm1xOEJiUUlQVFB3dUlUd3BZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Qzc3MC80QUNGOTZENjEwREUxMUYxODE3MTkyNTcwODNEOEM2Ny9DN0ZDQzdEMjEw
REUxMUYxOEZCQzZENUIwODNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGXntYwDQYJKoZIhvcNAQELBQADggEBAKC+uqq4cQTEFnlKGT6LaT6j
0eBBLGz5yAVloFC4JVXhPFwr9ReV9YOI3cxM3zWt+SYkZy5j+W5JEsD5KS76n9HQ
z3DQ7yLiEOYilwcGZXiHE+uxMMtEruv/LVTYHJFixe04Dd7Xs/SCqbpcbn7+Gxiv
jyPgARs46vUEQj+22PT1/h/PSo1ey3pI+3ZCkqouuO17E7ywvEqHpUhKvK28flwo
5jCuRJPS6xL6ToARdC8OIWUcOI1SUB9JBI0E660U9GAgczYy9pmXGuNCM7nPBOaz
C6wKpccGLFvzDmXybNGbtvud8jkehrwCi5CyWt/1N07xw34U+SUm43f8JUJAxgk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:17:05 2026 by rpki-client