
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa
File: ACFC76964A0E11EF91642A7AC4F9AE02.roa (raw, json)
Hash identifier: t0ohuFfdaakmzrww/Q0JMVR9B+akqFaPf0gzMitcQI0=
Subject key identifier: D6:A1:83:16:0C:91:48:C8:1E:1D:BC:00:24:23:F9:3D:84:CE:DE:CA
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 01F8
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa
Signing time: Wed 15 Apr 2026 04:36:27 +0000
ROA not before: Wed 15 Apr 2026 04:36:27 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152300
IP address blocks: 157.10.64.0/23 maxlen: 31
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Apr 15 04:36:27 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69df15cb-e5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:ef:65:4a:b9:23:b4:1b:6f:c6:74:f9:f9:
f5:e2:dc:f4:ff:d3:41:10:65:ae:03:da:be:b7:c5:
76:75:3a:39:c3:0f:1f:4e:e0:ba:bb:6f:56:74:39:
ac:a8:0f:41:17:ff:14:a2:86:6a:a7:56:12:4e:90:
13:bc:09:24:12:f3:d0:d1:07:1c:22:81:38:0d:d6:
cc:b2:f0:ec:eb:3c:20:3b:43:57:30:30:7f:7f:c5:
91:0c:02:38:47:3b:ca:ba:74:cc:c2:be:e7:89:dc:
81:ce:9b:f7:e3:24:5d:40:b6:7a:35:2c:d3:39:40:
4c:75:11:33:44:63:41:b1:c7:44:3e:a9:ad:46:07:
8e:90:65:b8:8d:5b:ea:24:a7:2c:5a:1d:67:28:cd:
98:a4:bb:e9:8c:28:be:fb:0e:2f:af:48:55:75:90:
2d:d1:d2:00:6e:9c:0c:07:69:2e:9b:20:04:10:96:
37:a0:06:42:69:20:2c:46:c2:fd:27:ee:22:03:11:
61:70:85:9f:47:ed:8e:dd:8b:57:50:46:7b:f9:54:
58:10:9c:6a:f5:ca:46:5a:38:05:e6:87:0a:85:04:
d2:4e:e6:bf:81:87:df:6b:b0:f8:61:96:91:7e:7f:
3b:79:32:79:ee:de:98:22:81:06:5d:50:2c:2d:ca:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A1:83:16:0C:91:48:C8:1E:1D:BC:00:24:23:F9:3D:84:CE:DE:CA
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.64.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:47:fd:64:ae:fa:ae:bf:52:80:50:2b:3c:8c:19:71:4f:56:
85:4f:13:3d:ed:17:4b:30:90:77:08:a8:0a:83:23:26:ae:02:
a8:9d:f8:83:e7:55:d0:7e:c1:06:b2:a3:bc:e8:ab:2a:d4:9b:
e6:e1:d3:bc:49:35:4a:1a:00:7a:60:22:70:1b:f8:7a:fe:de:
a3:6e:c9:36:2b:26:50:90:d2:e7:34:d7:f2:47:97:64:5a:43:
4f:84:18:77:96:c0:a0:04:4e:d6:2b:14:79:e6:6a:37:3c:bf:
8f:d4:e6:49:5f:6e:c2:9b:85:38:2f:ff:98:b4:71:00:64:74:
23:a1:4f:58:18:82:40:b9:9b:1a:15:38:48:77:55:50:a6:23:
b2:6d:49:19:b9:72:51:0c:39:f6:73:70:ec:97:77:c3:27:72:
25:9d:29:a5:c6:bf:74:f9:30:fb:55:d4:7b:20:06:d9:59:95:
4a:52:18:a0:0b:6d:56:a1:e4:13:be:b6:ba:a7:90:31:6e:c4:
27:5a:77:55:43:5e:7c:93:b4:57:64:ba:a9:56:c5:da:6c:07:
55:75:65:40:e7:24:af:e7:3e:f0:b9:a3:18:4e:9b:4e:6c:32:
c9:5d:e1:b2:4a:0e:f8:60:3d:bb:82:0c:9a:0a:4a:ab:5f:3a:
24:97:0c:94
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFEQzQxMTAvBgNVBAUTKEMzRDg5M0IyMjkxQjNBMUUxQkY1RjRGMDQxRDEwNTJF
MkNDQkIyNUEwHhcNMjYwNDE1MDQzNjI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRmMTVjYi1lNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUnvZUq5I7Qbb8Z0+fn14tz0/9NBEGWuA9q+t8V2dTo5ww8fTuC6u29WdDms
qA9BF/8UooZqp1YSTpATvAkkEvPQ0QccIoE4DdbMsvDs6zwgO0NXMDB/f8WRDAI4
RzvKunTMwr7nidyBzpv34yRdQLZ6NSzTOUBMdREzRGNBscdEPqmtRgeOkGW4jVvq
JKcsWh1nKM2YpLvpjCi++w4vr0hVdZAt0dIAbpwMB2kumyAEEJY3oAZCaSAsRsL9
J+4iAxFhcIWfR+2O3YtXUEZ7+VRYEJxq9cpGWjgF5ocKhQTSTua/gYffa7D4YZaR
fn87eTJ57t6YIoEGXVAsLcqWZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNahgxYM
kUjIHh28ACQj+T2Ezt7KMB8GA1UdIwQYMBaAFMPYk7IpGzoeG/X08EHRBS4sy7Ja
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QURDNC8yRkE0MzRDQUFB
QTYxMUVFOTYzQUE2M0FDNEY5QUUwMi93OWlUc2lrYk9oNGI5ZlR3UWRFRkxpekxz
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3c5aVRzaWtiT2g0YjlmVHdRZEVGTGl6THNsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUFEQzQvMkZBNDM0Q0FBQUE2MTFFRTk2M0FBNjNBQzRGOUFFMDIvQUNGQzc2OTY0
QTBFMTFFRjkxNjQyQTdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQpAMA0GCSqGSIb3DQEBCwUAA4IBAQC6R/1krvquv1KAUCs8jBlx
T1aFTxM97RdLMJB3CKgKgyMmrgKonfiD51XQfsEGsqO86Ksq1Jvm4dO8STVKGgB6
YCJwG/h6/t6jbsk2KyZQkNLnNNfyR5dkWkNPhBh3lsCgBE7WKxR55mo3PL+P1OZJ
X27Cm4U4L/+YtHEAZHQjoU9YGIJAuZsaFThId1VQpiOybUkZuXJRDDn2c3Dsl3fD
J3IlnSmlxr90+TD7VdR7IAbZWZVKUhigC21WoeQTvra6p5AxbsQnWndVQ158k7RX
ZLqpVsXabAdVdWVA5ySv5z7wuaMYTptObDLJXeGySg74YD27ggyaCkqrXzoklwyU
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:37 2026 by rpki-client