
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
File: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (raw, json)
Hash identifier: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=
Subject key identifier: 6C:EF:9C:55:66:B4:7E:FB:CC:5D:10:22:BC:FC:39:1B:72:17:E6:41
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: 1E
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
Signing time: Sun 01 Mar 2026 05:44:17 +0000
ROA not before: Fri 30 Jan 2026 11:41:59 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138043
IP address blocks: 151.158.112.0/24 maxlen: 24
151.158.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Jan 30 11:41:59 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d231-aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:fc:ff:70:ad:6f:4f:06:e8:2c:a2:26:b0:
fd:1c:cb:8f:63:8c:36:c4:60:15:9f:19:ba:f3:cd:
95:e1:70:ca:fb:a0:1e:4b:f1:df:da:16:98:55:60:
cd:07:ad:e1:69:a8:3d:46:77:9d:3f:20:99:2c:5e:
76:aa:b4:2f:85:2e:94:f6:3d:ef:f6:ca:64:18:4a:
b5:e8:b0:2b:ea:80:ba:1b:49:b0:68:25:7a:e1:10:
dd:92:92:3c:47:9a:e7:25:9c:e8:d5:e2:89:03:f2:
e6:78:4f:87:be:0c:27:1b:fe:86:38:69:76:29:d4:
d6:df:8c:ec:73:89:8e:af:b7:d1:8f:89:47:ec:f4:
29:4a:12:92:35:66:46:12:1f:e1:1c:47:21:9e:03:
a1:e0:49:f4:ce:1c:e6:22:84:05:2d:79:57:0b:b4:
39:4f:c5:31:c3:bc:f8:8c:43:cb:65:4a:43:55:a6:
3a:68:28:38:4e:85:9b:97:c7:f0:21:80:e7:2d:c9:
7f:7d:1b:28:f9:03:ab:92:e2:8d:06:d7:a1:07:9b:
55:d1:54:b0:f0:c6:b4:ed:5a:1c:45:f8:c2:50:d5:
9a:27:66:06:86:f6:f7:90:6a:c8:b9:a3:21:bf:d1:
f1:eb:76:7d:d5:c9:15:b5:29:02:d9:9a:56:88:b4:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:9C:55:66:B4:7E:FB:CC:5D:10:22:BC:FC:39:1B:72:17:E6:41
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.112.0/23
Signature Algorithm: sha256WithRSAEncryption
42:04:85:7a:28:9d:2e:38:f0:81:e1:6f:10:0a:64:78:58:68:
e8:8f:be:7e:22:6a:37:e8:97:2e:75:5e:d3:4b:24:93:62:6b:
43:bf:f3:d7:e9:fa:e0:fa:7b:8d:a0:a6:bb:3b:22:9e:41:49:
fd:e9:e0:2e:0a:d9:85:2f:4d:97:9d:6f:33:4b:7f:66:db:a0:
d8:6a:df:13:4d:5a:56:5f:67:3a:52:c1:cd:fe:37:11:ce:5a:
28:df:c1:f7:dd:47:d1:71:b3:cb:c9:a0:23:e2:16:20:71:c6:
27:2d:74:d0:aa:4a:9b:91:a4:6d:2b:25:32:3e:9d:86:d1:b8:
97:f4:36:18:55:55:96:08:cc:ee:0b:9a:fb:bd:9e:73:bf:67:
c9:0e:4f:bb:80:3c:2b:0a:50:21:ca:cb:3e:56:aa:14:3b:a6:
0f:b3:27:39:a1:75:b9:7f:d6:50:6c:29:cf:21:ca:0b:41:e2:
19:03:45:d1:e2:da:d1:26:d1:ef:eb:11:87:e0:bd:fe:c2:41:
36:c6:36:66:97:a4:49:d7:d9:d5:e8:2b:72:1a:2a:cd:3a:d1:
98:ef:a7:bf:dc:2a:5d:37:7e:6b:e3:4b:f8:aa:d2:7b:1a:7d:
cd:70:f8:b5:36:42:88:7c:dd:67:b1:e0:33:83:0f:26:f8:67:
70:a4:a3:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:10 2026 by rpki-client