
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa
File: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (raw, json)
Hash identifier: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=
Subject key identifier: 01:63:66:76:76:B4:26:F6:39:BC:E6:20:32:8D:51:60:58:A3:BB:94
Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial: 01A5
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa
Signing time: Thu 09 Apr 2026 04:37:46 +0000
ROA not before: Thu 09 Apr 2026 04:37:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151630
IP address blocks: 103.149.152.0/24 maxlen: 24
103.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Validity
Not Before: Apr 9 04:37:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d72d1a-2797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f3:d2:d9:5e:59:22:7c:2a:6b:49:f9:9f:cc:
7c:bb:16:91:93:82:ca:76:ac:a5:c8:51:85:0e:92:
dc:62:9d:0f:7d:88:71:12:91:9d:71:04:1c:db:ca:
1e:94:de:9f:f5:5f:ce:6e:9b:90:22:25:0d:6a:28:
1a:b1:e9:84:20:15:b2:b3:3f:aa:b2:2d:9c:ed:7a:
8c:1d:7f:65:ee:fc:41:fd:b6:45:e5:d7:da:c1:ad:
c8:9a:43:fe:19:c1:88:64:c7:ee:54:3c:a2:61:95:
4a:04:25:25:a0:fc:07:8e:c1:96:70:32:fa:4d:4f:
29:cb:25:29:0c:5b:28:e3:49:a5:10:76:61:a5:bd:
90:0b:fd:f8:b8:b7:27:8b:ec:31:16:39:4a:8e:56:
98:3f:11:88:cb:19:e5:65:de:99:dd:cf:82:73:ae:
46:d9:b9:40:eb:cc:e1:20:fd:02:97:07:c5:d3:c5:
21:c3:1a:3f:30:75:4b:ac:8a:54:0f:7a:7b:ad:6d:
43:73:79:4c:87:ba:b6:55:10:ca:5f:67:50:bf:14:
d8:6c:28:9a:ab:a6:6f:6d:8f:fb:f8:f0:c8:8b:1d:
17:16:52:1e:da:5a:d6:81:12:c1:79:36:ee:57:9f:
cf:1c:d1:8e:d3:df:aa:6c:a5:ae:ff:16:3e:1b:51:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:66:76:76:B4:26:F6:39:BC:E6:20:32:8D:51:60:58:A3:BB:94
X509v3 Authority Key Identifier:
keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/1577D3D4CEED11EEAD68A169C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.152.0/23
Signature Algorithm: sha256WithRSAEncryption
09:b8:10:f5:f2:fe:f0:85:8e:46:45:56:0f:15:53:3b:0f:97:
9b:9f:d5:12:65:88:5c:35:23:63:a0:fd:1c:69:25:0d:d7:6c:
cd:25:53:fc:52:80:ec:b7:62:94:ee:c6:c5:e8:fd:e6:57:67:
69:87:e8:42:66:14:bd:72:f9:b1:d6:4d:40:30:3d:77:f6:12:
f6:e0:f5:19:08:1b:af:f9:17:94:08:54:fe:32:54:62:4d:95:
49:b2:62:5d:fd:d7:e7:c4:a8:8c:db:3c:99:55:43:30:6e:e2:
fb:aa:f8:00:fc:5d:9f:50:f4:99:d7:7a:5b:55:a0:8e:58:45:
22:c1:20:cf:b5:d6:d6:e1:91:b7:a6:dd:22:d5:26:52:c9:f7:
54:02:01:82:2b:02:c0:35:0d:2d:f3:08:13:5e:fc:c4:d2:e7:
b8:04:c7:71:ae:7c:b0:39:53:16:b5:3b:fa:ec:0e:23:8c:8d:
a1:c3:81:23:cc:42:62:4e:ed:2c:56:75:09:8f:9e:a3:d9:1f:
54:2c:a4:e9:4e:de:a0:d2:4b:9b:de:e3:a8:c8:4b:e6:3f:b7:
20:43:3c:99:39:df:ca:12:f2:47:30:64:de:d8:8b:c0:0e:10:
bf:7c:fd:ff:df:4a:f3:87:ea:f2:b9:03:82:1c:f3:cf:37:27:
4e:98:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:13 2026 by rpki-client