
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/1D74CCE2BB6D11EEB670B00CC4F9AE02.roa
File: 1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (raw, json)
Hash identifier: KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=
Subject key identifier: 25:94:CE:EC:D7:14:8B:A6:B3:3C:7E:4B:86:7F:4D:FB:A1:42:3D:C3
Certificate issuer: /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial: 018D
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/1D74CCE2BB6D11EEB670B00CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:32:04 +0000
ROA not before: Fri 27 Feb 2026 04:22:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152341
IP address blocks: 157.15.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Validity
Not Before: Feb 27 04:22:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a415a3-7450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7d:5a:f6:46:6b:a1:04:3c:cd:ae:45:20:53:
6a:01:7a:c2:7c:d3:29:cd:7e:5c:2b:aa:ea:91:3b:
36:6d:74:04:17:d4:b9:f7:e4:36:7b:61:9f:52:6f:
b2:e2:d9:78:19:cc:a6:29:e8:f0:d9:e7:e7:91:fa:
af:2c:72:49:91:26:78:81:15:b2:32:4d:7c:9e:b5:
70:9c:40:fd:b6:bf:13:fc:8a:72:fd:89:4b:13:27:
da:76:65:c7:b1:86:62:f3:76:27:d8:35:95:04:a3:
f1:f2:f0:36:46:1e:7b:9d:66:77:3a:6a:74:17:29:
d7:14:f3:f8:54:ac:33:49:d3:2b:b6:19:84:a0:25:
03:0a:cd:85:0a:6f:a5:dc:75:f0:e2:b9:47:af:4e:
63:d5:2a:35:38:0a:ff:f7:bb:fc:06:9a:4f:8e:7b:
05:d0:af:95:b2:36:96:5e:a9:c7:e7:8a:e2:52:64:
7a:68:25:f3:83:3d:a9:49:ed:f4:92:79:46:23:69:
74:7f:d3:a0:d0:5d:95:51:4f:69:30:9d:99:1f:b7:
77:e7:4b:f9:dc:57:4e:28:97:26:2c:74:80:39:2c:
9d:b9:e6:89:b9:d0:64:2e:1f:bc:2d:0b:1d:ee:cc:
fb:59:05:38:56:7a:e8:c1:6e:fb:0f:c9:b5:ab:7a:
35:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:94:CE:EC:D7:14:8B:A6:B3:3C:7E:4B:86:7F:4D:FB:A1:42:3D:C3
X509v3 Authority Key Identifier:
keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/1D74CCE2BB6D11EEB670B00CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:22:e2:d1:b9:5f:f6:80:32:a1:39:50:72:e4:dc:cc:33:06:
58:20:f9:f6:14:97:97:02:fd:53:4f:e0:b2:13:86:45:50:22:
e4:63:33:93:7a:79:c5:c2:ca:25:e1:12:18:a0:61:b2:52:c2:
7c:19:ff:71:85:2f:3d:7c:9f:a9:6f:85:0c:50:1f:67:3c:e7:
c7:1a:6a:b9:d6:af:b7:6f:ae:80:72:62:52:74:27:f4:dd:53:
c4:9c:19:77:3f:50:7f:5a:20:39:da:d1:96:28:46:73:34:d4:
56:da:02:84:e5:e7:64:52:91:41:6a:9e:9a:ce:e9:ec:51:63:
00:87:72:24:66:90:06:22:f1:41:f7:84:a4:f1:e2:0c:7f:22:
04:d5:03:7b:77:b8:d9:69:f8:10:ce:b3:4e:00:d7:40:ac:7d:
07:0a:a7:cd:3e:4d:f4:cb:b8:db:b2:b2:f2:48:89:b3:f9:4d:
7d:2d:1c:a4:0d:a6:cc:f6:0e:d0:1d:7d:d3:ee:18:a6:20:7c:
17:0b:8f:eb:26:17:52:e0:9d:11:ad:ec:51:bb:d9:3b:06:37:
0f:1b:d1:70:b9:95:8c:96:ac:30:9c:97:b4:e4:b0:c0:e7:15:
d1:83:ce:01:11:1f:cf:66:ec:b2:f3:07:df:22:76:70:39:d9:
a4:86:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:59 2026 by rpki-client