
$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/C6E2CBD4558011EDA4773D7FC4F9AE02.roa
File: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (raw, json)
Hash identifier: /Dqt2HwM0BcWGAoWSpStXJi+r1CLDF1wY9noSpki7qg=
Subject key identifier: B8:48:24:93:D4:95:A0:E3:91:B5:00:6E:58:EE:00:10:4F:1F:05:BC
Certificate issuer: /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
Certificate serial: 0638
Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/C6E2CBD4558011EDA4773D7FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:15:54 +0000
ROA not before: Wed 04 Feb 2026 22:19:26 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 141468
IP address blocks: 156.16.0.0/16 maxlen: 16
158.40.0.0/16 maxlen: 17
158.40.0.0/24 maxlen: 24
158.40.1.0/24 maxlen: 24
158.40.2.0/23 maxlen: 24
158.40.4.0/23 maxlen: 24
158.40.6.0/23 maxlen: 24
158.40.8.0/23 maxlen: 24
158.40.10.0/23 maxlen: 23
158.40.12.0/22 maxlen: 22
158.40.16.0/20 maxlen: 20
158.40.32.0/19 maxlen: 19
158.40.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl
rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914284F, serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3
Validity
Not Before: Feb 4 22:19:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44a1a-f55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:a9:bd:d5:5b:bd:80:f7:cd:3d:7d:5b:38:
5d:31:d4:4e:79:e5:db:8e:8f:f6:86:26:05:79:de:
67:09:9f:fb:42:10:9a:94:fd:7a:35:f9:f3:73:fd:
53:08:f5:6e:5c:c1:8a:5b:73:1b:4d:da:22:1d:e4:
50:4a:14:41:bc:de:21:2b:87:98:46:89:c4:d2:4f:
80:6b:70:ad:97:7f:6c:a5:31:b0:c9:c2:50:4b:5c:
5f:43:fa:87:10:93:b6:90:f4:27:94:3d:87:9a:02:
60:b6:df:53:53:11:14:ce:1b:81:a5:40:61:7f:ef:
6c:08:9d:e9:5e:62:67:21:79:37:73:35:3c:fd:32:
8d:2a:13:d3:70:6c:b4:98:69:b1:3b:6c:1d:3b:d0:
fd:5b:71:bc:af:a7:69:bd:96:60:8f:f5:8b:01:db:
ff:f6:f6:a6:d5:9e:95:7b:ce:51:ce:4f:9a:65:aa:
8a:f9:01:4d:53:b9:00:21:eb:85:84:3e:f8:c2:e6:
9b:bd:d9:48:e3:36:41:22:4e:c0:4c:03:87:89:e8:
93:92:bb:7c:76:d3:a3:96:6a:6a:0a:92:be:cb:a1:
25:d9:45:9c:63:57:14:5c:72:db:a6:de:1f:6f:80:
cf:c2:53:c7:c2:88:18:1a:1b:73:fe:84:2a:92:c1:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:24:93:D4:95:A0:E3:91:B5:00:6E:58:EE:00:10:4F:1F:05:BC
X509v3 Authority Key Identifier:
keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/C6E2CBD4558011EDA4773D7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
156.16.0.0/16
158.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
97:07:e6:b3:11:6f:23:75:a2:8c:af:34:48:ab:f3:de:33:b9:
87:0c:45:2f:a2:e9:ce:c7:5a:e4:de:87:3d:b6:16:ff:0a:23:
cb:81:79:fe:af:53:2b:4e:f9:84:07:39:c4:0b:4f:61:c6:0e:
bd:5b:d5:f4:bf:c7:38:40:dc:f3:72:50:6b:7d:ec:5a:47:90:
98:c2:0c:30:80:79:de:20:a7:b8:b3:b8:22:1a:92:36:c2:ae:
fb:18:f3:1e:f2:b1:7d:a5:8f:3d:b1:e1:72:ee:f6:85:ce:35:
69:9a:36:ff:6a:02:49:1e:d6:d8:87:8b:99:84:99:77:37:51:
3a:7d:81:6f:0b:d4:e4:9e:9b:db:90:c2:55:1c:b2:b5:aa:70:
75:19:b6:3a:36:dd:af:f1:a3:cd:24:47:a7:fc:e7:41:20:92:
e3:01:63:96:fa:cb:f5:de:e1:7b:60:cd:93:23:4b:56:e2:f2:
d5:b3:72:5a:75:d9:a0:e9:be:ba:70:52:d6:47:17:72:b5:09:
e4:b6:48:f6:b7:21:ee:95:69:e9:51:12:32:5f:67:dd:de:06:
72:ce:44:ff:e9:66:f6:1d:bc:56:23:84:da:29:74:8c:ab:dc:
03:c0:18:4a:1d:65:90:73:13:61:c6:b9:19:b6:11:0d:d8:c0:
34:7c:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:49 2026 by rpki-client