
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/6EA43FD8F1C311F0B949DD23396F56BC.roa
File: 6EA43FD8F1C311F0B949DD23396F56BC.roa (raw, json)
Hash identifier: f5n4m6nXywP280ii3RvUIrsXSPmcfdVHv8484hmnrW8=
Subject key identifier: C2:21:4F:EA:6A:A8:F5:08:4B:8D:6B:BE:38:B3:02:EA:4D:1F:C6:C6
Certificate issuer: /CN=A915B358/serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Certificate serial: 1D
Authority key identifier: 80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/6EA43FD8F1C311F0B949DD23396F56BC.roa
Signing time: Sun 01 Mar 2026 05:45:22 +0000
ROA not before: Thu 15 Jan 2026 03:36:52 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 142200
IP address blocks: 151.158.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B358, serialNumber=80C82B9D42661798D1A2E00BCEAB06F3E4E1A35E
Validity
Not Before: Jan 15 03:36:52 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d272-fd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:4e:40:94:f5:a5:32:7d:7e:59:60:c2:ec:
96:f9:85:40:dd:d9:73:3f:cb:8e:34:26:f1:b5:0a:
04:ec:23:8a:21:65:5f:6b:3c:a0:68:08:51:49:cf:
69:47:9a:ac:c5:33:31:10:c7:87:c1:ae:2c:82:aa:
a6:12:ca:50:e0:d2:33:9b:c8:85:7a:c8:cd:3b:9f:
cc:bf:e5:0e:d1:4d:8e:56:31:0b:d0:53:46:84:a8:
7b:ec:ef:f3:52:30:81:5d:fc:f1:fa:30:66:33:18:
79:e9:d3:28:55:6c:9a:c0:85:3f:f8:ed:e2:1b:f2:
94:f5:e1:a0:10:aa:c2:81:08:cf:a2:a7:07:e0:a5:
82:60:cc:8d:04:ca:73:f0:46:21:e1:35:4d:a3:0d:
b0:4e:64:94:7c:4a:93:1b:99:c3:3e:47:c7:bf:6d:
8c:75:8c:e3:85:73:1a:b2:df:03:bb:89:44:a9:bd:
db:b7:01:68:33:50:8f:d7:1b:51:1e:7d:bc:a2:27:
61:63:76:27:e0:e6:2c:d7:54:2a:34:2a:de:ed:0c:
51:c3:3e:b2:e3:47:a7:57:c7:94:06:20:f8:53:7e:
c7:bf:d3:7a:1f:a7:f8:c3:9c:2e:f6:83:7e:af:a9:
19:cf:c0:8b:4a:28:a9:bf:6b:19:2c:4f:9e:8a:23:
d5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:21:4F:EA:6A:A8:F5:08:4B:8D:6B:BE:38:B3:02:EA:4D:1F:C6:C6
X509v3 Authority Key Identifier:
keyid:80:C8:2B:9D:42:66:17:98:D1:A2:E0:0B:CE:AB:06:F3:E4:E1:A3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/gMgrnUJmF5jRouALzqsG8-Tho14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/gMgrnUJmF5jRouALzqsG8-Tho14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/E7E564C6F11411F096CD554D4B6F56BC/6EA43FD8F1C311F0B949DD23396F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.8.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:b2:b6:2c:cb:43:ff:45:3f:da:04:3c:a6:71:ca:aa:e4:ce:
9a:77:f5:d6:92:35:bf:52:81:9a:69:78:7e:ba:6b:01:bc:f1:
ca:32:62:47:2b:13:67:27:98:f5:61:db:7f:ac:77:09:d0:9a:
0e:9b:c1:bc:78:af:6f:83:80:b5:95:38:65:f2:de:14:7a:d5:
cb:84:2e:b6:52:8e:9a:f8:a5:b7:66:23:2c:68:bc:5c:36:6b:
cc:b9:63:35:17:1b:6b:40:40:98:2a:c1:8a:72:88:3a:5e:e2:
82:50:21:7b:f7:8b:b4:17:8b:ef:f2:e5:82:74:99:70:29:d8:
a8:5b:d5:05:7f:17:80:ad:0b:b2:77:83:5c:84:30:f7:ce:e4:
92:c9:09:c5:ed:de:a6:07:a0:90:75:9d:26:2f:b2:ee:4d:db:
8d:cc:c6:f3:51:7f:78:14:bd:3e:3e:a2:78:0d:ac:13:7e:84:
7c:39:71:3c:ff:d4:fd:b7:52:0e:88:7a:f2:ec:4b:72:b4:9d:
91:7c:25:cb:13:3b:82:26:ee:3f:4a:7f:cf:9d:d6:bd:94:a4:
fd:12:1a:79:c0:70:c9:52:51:a4:28:ab:83:c6:6b:36:8a:37:
c3:33:7c:da:9d:e8:0f:fd:8e:e4:03:6d:9b:58:9b:24:d5:b9:
a4:ed:91:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:38 2026 by rpki-client