
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/C028C06E18E211F081A75558C4F9AE02.roa
File: C028C06E18E211F081A75558C4F9AE02.roa (raw, json)
Hash identifier: mUs4fgM8VrVj+tu77XrkYII8tafnRQVMrP9/4PhdyvE=
Subject key identifier: 89:E7:D2:44:7D:2D:2F:5F:6A:F1:F0:AD:99:1A:FE:10:EA:BE:6B:DF
Certificate issuer: /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial: A4
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/C028C06E18E211F081A75558C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:02:47 +0000
ROA not before: Mon 14 Apr 2025 03:44:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151366
IP address blocks: 163.223.115.0/24 maxlen: 24
2401:fde0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Validity
Not Before: Apr 14 03:44:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e497-4756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c5:2b:a1:1a:f0:2e:bd:7b:1e:7f:ba:d5:01:
cb:5c:d2:85:7e:d8:97:88:8e:c4:fc:57:6d:ee:b6:
c3:a6:cb:bd:8b:e5:9a:1a:b4:6d:f8:49:04:36:ea:
49:ae:92:af:78:ff:32:30:c9:88:0b:bf:7a:a6:e0:
af:9c:dc:1e:24:8d:ce:19:b1:25:2c:d8:bb:74:d0:
05:79:06:e9:49:f7:12:9c:c7:35:a8:7c:8f:a2:e2:
5a:ba:3e:dc:92:19:ee:b1:9d:c9:f3:c7:74:ab:dc:
48:15:01:89:8d:03:07:e6:1f:4e:d3:34:c0:ce:6b:
79:a4:a6:40:77:5a:43:d7:29:a4:34:a0:4e:70:36:
2f:ff:eb:de:72:eb:f2:ed:8e:9d:96:3b:e0:7e:c0:
f2:d6:81:51:0d:50:ea:0d:38:2a:7c:c9:03:8d:8e:
8b:3c:55:ef:53:2b:66:94:15:2e:74:c5:82:32:7b:
57:d0:06:76:5a:91:24:c5:c7:8b:a1:46:67:64:05:
6e:c8:2f:10:87:6a:78:5f:e1:09:0c:a2:44:f5:0e:
2c:c7:63:c6:37:c6:fe:27:6c:40:6e:ad:45:6b:b6:
33:a4:b1:6f:67:b5:2f:81:aa:66:b4:7e:de:5f:27:
80:1f:21:ed:d0:d6:c8:06:c6:17:9d:72:49:c8:71:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:D2:44:7D:2D:2F:5F:6A:F1:F0:AD:99:1A:FE:10:EA:BE:6B:DF
X509v3 Authority Key Identifier:
keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/C028C06E18E211F081A75558C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.115.0/24
IPv6:
2401:fde0::/32
Signature Algorithm: sha256WithRSAEncryption
05:0b:d3:72:64:c2:0c:9c:db:2c:c5:e1:3f:2f:d3:36:74:fb:
6e:c3:d1:15:50:1b:c6:e8:cd:33:ed:0d:f0:fb:de:c2:58:e0:
d6:6e:44:fd:32:95:28:da:00:6f:7c:ea:79:6b:9a:f9:80:83:
fc:71:a2:ce:b1:77:ae:46:b6:07:8d:83:6f:09:d5:e9:9a:f3:
fa:a6:2e:1f:84:4d:e4:25:45:3f:47:fa:47:e2:18:19:d2:76:
35:ac:bb:6a:e8:f0:4e:c9:4f:9f:0f:89:3f:3f:07:41:1c:b3:
8d:1c:d3:df:c3:4d:d0:ca:42:1b:b9:5c:d5:66:e4:e5:f7:1a:
df:9a:ac:ee:85:5a:ad:94:3f:b0:fa:24:83:7b:cd:5d:9a:a5:
ec:99:28:d1:fc:47:74:39:3d:af:50:71:90:0e:2c:3b:31:00:
79:5d:9b:cb:15:44:41:da:62:4c:e7:dd:62:85:49:c6:3a:95:
d9:7a:ab:d6:c7:65:bd:ea:0d:7b:26:47:e2:f8:85:1a:cc:6d:
fd:7f:db:09:0f:f2:42:22:ae:09:0a:c3:b0:e7:11:11:a4:57:
1d:8f:86:62:15:b4:d6:0b:e9:ec:e4:03:15:38:04:bc:cc:5a:
28:eb:9c:42:40:1c:73:59:10:7f:5d:82:29:27:32:cb:8d:89:
a3:13:8f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:39 2026 by rpki-client