
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/29B85B52FDD011F0BDC391246C6F56BC.roa
File: 29B85B52FDD011F0BDC391246C6F56BC.roa (raw, json)
Hash identifier: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=
Subject key identifier: A4:44:91:F6:EE:AF:FC:BB:34:28:DB:52:5F:3E:47:75:35:EE:34:FE
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: 1C
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/29B85B52FDD011F0BDC391246C6F56BC.roa
Signing time: Sun 01 Mar 2026 05:44:15 +0000
ROA not before: Fri 30 Jan 2026 11:39:55 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142252
IP address blocks: 151.158.112.0/23 maxlen: 23
151.158.112.0/24 maxlen: 24
151.158.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Jan 30 11:39:55 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d22f-c6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:2c:70:9e:11:6e:4a:8e:23:68:c2:fa:ae:
6b:c4:49:da:70:aa:8b:e7:91:d1:30:8b:7d:78:ba:
b3:47:af:ef:3b:0c:09:25:ac:c0:fd:1e:27:0f:07:
67:92:d4:04:fc:3b:97:5c:73:06:6e:d1:ba:bd:1e:
28:28:10:92:93:84:e9:7c:bc:11:7a:80:26:48:b8:
e5:19:fe:4c:bb:3d:5c:32:e8:df:90:3e:ed:1a:a8:
98:a0:fb:cf:3f:f8:ad:3f:ce:fb:bc:79:80:3a:4c:
82:94:a2:6a:fe:8f:82:f0:bc:91:18:a8:be:54:26:
15:6a:37:c8:6e:a9:ac:f9:3a:22:1f:af:a3:cc:6e:
c3:3e:59:f8:f8:1e:b9:30:ab:de:bc:09:26:8a:f3:
94:a5:3a:9c:9b:fa:fb:62:ce:30:95:80:9d:92:4e:
24:bd:73:d8:81:a4:cc:35:15:51:e0:ec:72:c2:05:
2e:c2:66:72:f3:16:b7:cd:d7:45:1c:19:e7:49:b1:
fa:be:04:a1:28:ae:f1:a9:23:be:00:ad:15:f7:c5:
2d:29:ee:46:e3:da:52:36:f3:57:68:a2:fb:6b:04:
e4:d3:b3:e9:15:7f:99:e1:06:da:47:5a:f9:a5:dd:
41:a5:2d:fc:09:34:c6:8c:b5:04:92:eb:ff:f7:1a:
16:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:44:91:F6:EE:AF:FC:BB:34:28:DB:52:5F:3E:47:75:35:EE:34:FE
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/29B85B52FDD011F0BDC391246C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.112.0/23
Signature Algorithm: sha256WithRSAEncryption
12:96:9f:3f:d0:00:6b:b7:db:16:e8:0f:ff:ea:4c:c5:af:77:
63:9f:4e:4c:ad:4b:85:03:e2:33:b7:6f:ac:b7:47:1b:4b:52:
43:69:f9:e8:85:a9:12:ba:65:53:57:72:04:f3:29:c3:fd:dd:
d0:09:8d:d2:ea:a2:e0:b2:b1:1f:e6:af:a8:da:c4:ea:5c:f7:
60:5e:cb:7c:df:52:96:d5:81:5d:81:5f:ee:88:95:8a:7d:15:
59:d6:aa:a4:00:09:e4:81:a8:fb:8e:d3:fc:19:9d:8d:8a:7c:
2d:5d:1b:3d:7f:0c:f9:79:6d:5c:9c:65:6b:f2:ab:6f:01:72:
b9:5e:e2:90:0c:49:80:7d:a4:30:e0:c0:1d:f7:5c:87:25:24:
0c:c3:19:fb:5d:b5:6e:f3:9e:61:bd:cd:6f:70:66:15:59:8c:
fd:52:0a:2e:a7:b4:8c:a2:cf:7c:44:96:3c:33:23:25:48:65:
4c:6c:55:81:b7:0c:ac:80:54:10:a1:a6:65:de:c1:d5:ea:64:
5f:fa:9a:69:10:2d:60:9e:70:d5:5a:84:53:fa:e9:35:49:a5:
44:f8:61:85:27:f0:0a:2e:79:1b:dd:0c:15:aa:3b:9d:14:fd:
5c:f0:3c:c5:30:d0:e1:c0:5a:da:63:51:fa:23:0f:92:5b:33:
21:a8:9d:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:40 2026 by rpki-client