
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa
File: ACFC76964A0E11EF91642A7AC4F9AE02.roa (raw, json)
Hash identifier: fy25uYGOBqAopUBfqaQ8eRizW0jfQRIrb63fi4fchGM=
Subject key identifier: C7:F1:02:4B:DB:BB:96:3C:57:F3:A1:00:71:EA:3B:BA:C9:64:D0:36
Certificate issuer: /CN=A915ADC4/serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Certificate serial: 01DA
Authority key identifier: C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:41:07 +0000
ROA not before: Mon 07 Apr 2025 04:41:43 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152300
IP address blocks: 157.10.64.0/23 maxlen: 31
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ADC4, serialNumber=C3D893B2291B3A1E1BF5F4F041D1052E2CCBB25A
Validity
Not Before: Apr 7 04:41:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3df82-75fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:42:ff:f7:de:59:28:72:1a:e4:e5:44:03:
d6:b5:23:54:db:da:70:40:fe:c0:d7:53:e9:b3:f9:
1b:49:97:cd:e1:a8:d3:89:7e:df:a7:a2:03:bc:6d:
9d:1b:ce:b9:f2:92:56:c3:e2:6a:c9:b3:fc:40:67:
6a:1b:39:c0:96:57:97:36:4e:f7:f1:2d:14:f7:1d:
2f:ad:42:46:9c:fe:73:ce:7f:85:4d:15:b7:d0:35:
a0:4e:00:f9:cf:55:d6:a2:76:26:7e:91:a4:fe:df:
49:d6:93:b8:55:3e:e1:b4:f9:83:0e:56:2e:3e:f3:
66:81:33:16:76:6c:33:5d:98:0c:9d:d7:c1:d2:43:
e7:d5:9f:19:c8:43:a9:ad:0f:43:2b:0a:06:bf:a7:
21:10:8c:c1:ea:9f:f9:c3:76:92:83:56:aa:bf:80:
3a:32:b1:23:65:bd:90:52:0e:f9:c8:28:c6:2b:f4:
b3:fa:4d:8e:0a:a1:30:db:c9:a2:ad:cf:c0:7e:e7:
78:74:82:02:df:98:97:90:ce:0d:59:ca:03:58:65:
8a:0a:64:32:15:d0:6c:57:fb:83:b6:7d:b7:e7:0e:
f3:85:cb:85:b6:b2:8e:c4:a9:20:b3:73:06:17:bf:
5f:d3:53:83:94:7d:d4:26:eb:4a:fe:48:8b:a4:4e:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:02:4B:DB:BB:96:3C:57:F3:A1:00:71:EA:3B:BA:C9:64:D0:36
X509v3 Authority Key Identifier:
keyid:C3:D8:93:B2:29:1B:3A:1E:1B:F5:F4:F0:41:D1:05:2E:2C:CB:B2:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/w9iTsikbOh4b9fTwQdEFLizLslo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w9iTsikbOh4b9fTwQdEFLizLslo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ADC4/2FA434CAAAA611EE963AA63AC4F9AE02/ACFC76964A0E11EF91642A7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.64.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8a:60:74:29:94:fd:10:33:3a:b8:1a:57:bc:c6:50:64:5a:
14:98:b8:1b:05:5f:2d:bb:81:2f:80:94:e8:68:55:e7:7e:59:
ae:65:7b:5d:89:b9:b2:ea:07:55:bf:80:3c:0d:14:0f:2c:5c:
5f:30:bd:b9:02:ac:01:16:2b:29:e4:fb:1e:bd:52:d2:a0:dc:
3c:aa:c1:44:3e:e0:79:23:f7:80:63:f2:5d:6a:44:0c:65:9c:
32:d8:b5:77:47:78:db:be:82:c8:10:da:26:bf:d1:88:d4:52:
06:ec:47:21:7f:97:d1:bf:02:b1:aa:ec:9c:67:a9:6e:26:84:
6b:70:a3:67:e7:17:46:5f:d4:4f:a6:11:49:65:02:49:e8:6d:
d4:77:97:b9:02:a0:73:86:bf:f1:2c:98:31:39:58:0d:3e:6b:
b8:cf:14:15:ff:47:ce:b9:96:14:e7:3e:32:38:bf:59:ed:0d:
39:78:79:cd:4e:de:43:97:88:ed:8e:39:fc:b2:94:0f:10:76:
22:53:36:0d:ec:9b:a3:cf:07:86:69:5f:dc:cb:8a:be:8c:5b:
9a:8f:1e:10:6f:54:08:b5:3e:15:f7:63:05:3c:2d:ed:55:8c:
ee:ff:a0:fe:ea:b7:5d:ab:c7:8b:35:94:41:ec:30:bb:40:10:
c6:56:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:38 2026 by rpki-client