
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/515DD9629A8811F08FD4A810C4F9AE02.roa
File: 515DD9629A8811F08FD4A810C4F9AE02.roa (raw, json)
Hash identifier: Pc2Gm0El6C7yNRFdvtcnQRtp9swqk0Qn5OUm8Fjkbqw=
Subject key identifier: 04:BB:7C:63:37:B3:DE:08:27:71:1E:F3:25:C7:A7:F2:A2:AA:37:0A
Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Certificate serial: 55
Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/515DD9629A8811F08FD4A810C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:18:50 +0000
ROA not before: Sun 28 Sep 2025 13:27:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154260
IP address blocks: 27.126.158.0/23 maxlen: 23
27.126.158.0/24 maxlen: 24
27.126.159.0/24 maxlen: 24
2402:2de0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679
Validity
Not Before: Sep 28 13:27:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3da4a-8202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fe:b7:a7:ad:d3:6e:a6:c7:9d:71:43:8e:e4:
7c:6d:f2:3b:38:d1:fd:9e:ab:99:33:3f:61:ca:89:
73:b5:ad:76:9e:4d:40:9d:6e:12:2d:5e:11:bf:dd:
2f:33:13:2c:89:ba:1b:b3:97:d9:9c:22:92:45:b2:
12:f2:e7:3f:cf:c5:84:0b:a2:0f:90:f7:9a:d3:01:
79:95:2a:eb:dd:f7:00:5b:b7:1f:ba:b3:fe:84:cb:
a7:88:63:96:c5:d4:c4:de:d9:d9:8e:aa:b3:9c:7a:
64:0a:76:16:e0:69:03:08:17:9b:26:03:71:84:ba:
5d:f7:22:99:da:c0:e1:9e:72:76:8a:5d:f2:76:83:
7b:ec:a7:60:a6:a6:92:c7:5c:34:e9:0b:24:ae:00:
26:82:43:d2:12:ae:14:3c:a7:93:b4:8e:8b:cf:8e:
74:4d:2b:f8:43:11:5a:7c:53:f8:24:57:08:95:18:
d8:38:a9:fd:6e:42:d6:58:b4:c4:3b:f5:9b:52:dd:
42:ef:17:36:6b:d5:23:3b:f1:60:cb:f9:69:ad:cb:
c6:21:ca:89:cd:a7:98:cc:be:db:ca:91:dc:17:d2:
1e:16:77:28:bd:17:c8:2c:79:73:87:17:4c:83:d6:
0e:6b:20:ab:8b:fd:18:21:4b:47:bf:55:28:4b:11:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:7C:63:37:B3:DE:08:27:71:1E:F3:25:C7:A7:F2:A2:AA:37:0A
X509v3 Authority Key Identifier:
keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/515DD9629A8811F08FD4A810C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.126.158.0/23
IPv6:
2402:2de0::/32
Signature Algorithm: sha256WithRSAEncryption
20:9e:c3:59:83:7f:05:fa:14:42:1f:71:97:8b:b7:f7:ee:c6:
2f:97:f4:7c:a7:e8:af:bc:ee:db:16:ac:71:64:9a:d2:43:9b:
17:49:06:3d:42:34:4f:91:6a:a7:6a:3b:f8:76:75:e7:d1:fd:
ce:b4:9e:56:0d:16:a7:9d:ce:a9:78:a0:4d:b3:21:cc:7a:af:
74:59:88:3d:20:db:0d:5e:d5:ba:8e:2a:dd:ce:cc:3d:da:75:
af:2f:8c:51:dd:44:73:5a:ee:12:fb:17:41:ec:9d:ec:1e:cb:
04:36:53:c2:0c:b3:90:44:65:05:05:0c:e4:57:0a:90:f6:82:
34:df:aa:49:5a:d9:cc:d3:a0:5d:3d:6c:93:39:cc:17:a6:4a:
43:2c:35:e6:76:31:c4:78:0a:e1:32:0b:39:3f:67:89:75:46:
7c:67:30:26:74:45:a4:c7:21:50:7c:78:e0:ae:c0:bf:7e:3f:
0c:e0:4f:80:05:b0:1d:43:1b:f3:5c:e2:25:6a:29:d0:51:17:
c2:0d:ed:0d:ab:68:2f:99:91:4b:b3:4b:5b:17:87:4c:de:e8:
22:c7:53:80:b0:8e:71:04:62:42:7f:e1:80:56:2d:76:25:72:
a7:68:dc:ee:97:dc:cd:4d:91:7c:fc:51:c0:a6:2b:93:4b:da:
73:bd:85:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:41 2026 by rpki-client