
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
File: DE917E7016C511F085B4FF6FC4F9AE02.roa (raw, json)
Hash identifier: 92OvboQnu0AfbGHnNVWc8k1x0nqYtBas1dH8qeWSNlE=
Subject key identifier: 7D:46:A4:53:52:33:E9:DA:56:8E:E1:54:AC:A4:8D:18:A7:C6:23:B5
Certificate issuer: /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial: A5
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:02:37 +0000
ROA not before: Fri 11 Apr 2025 11:12:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153738
IP address blocks: 163.223.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Validity
Not Before: Apr 11 11:12:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3e48d-19ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:de:af:25:94:39:eb:92:0b:3b:27:d8:d3:
2a:db:ae:95:6f:f3:93:67:d1:92:aa:27:6c:99:13:
b0:c6:3a:e5:e9:c6:2b:26:50:a7:cf:1f:f3:88:93:
29:4b:79:a2:6e:4e:4e:83:9a:56:f7:8f:a9:b7:96:
10:f8:9c:7c:de:60:97:a0:0a:96:2d:d4:75:96:a8:
9b:58:f0:7d:e2:b9:93:63:cb:da:6f:ec:9d:dd:e9:
f8:98:41:a0:89:47:2d:57:d0:34:48:82:ac:bc:87:
16:17:53:95:6d:42:ca:7d:32:20:c4:e7:3f:b2:36:
e1:ce:a0:dd:e6:c5:a6:8d:49:d2:b6:b1:b0:97:58:
29:65:97:db:7a:ba:03:b9:1c:00:2a:95:62:c8:65:
42:28:78:a4:49:80:6e:be:02:46:ff:2b:b2:21:a5:
f3:f9:07:14:67:b3:eb:fc:72:dc:6a:99:a8:b8:66:
fb:dc:5b:cb:16:52:4f:26:4b:2e:63:68:e5:27:89:
45:2c:09:c2:5f:a3:e7:3a:5d:7f:3d:a3:7f:ab:f5:
9b:ac:53:6e:ca:16:a1:7e:b9:a7:5b:75:b0:69:7f:
0b:8e:4f:46:b7:09:3b:75:b3:36:7e:4a:34:22:aa:
af:2f:92:e1:2e:cc:dd:0c:47:13:26:92:63:cd:ed:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:A4:53:52:33:E9:DA:56:8E:E1:54:AC:A4:8D:18:A7:C6:23:B5
X509v3 Authority Key Identifier:
keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bb:f5:bb:56:27:f3:0b:c4:4c:e3:26:55:b5:bf:db:e7:61:
a1:a9:7c:c5:7e:7f:4a:71:82:a9:e6:59:e0:5b:4e:98:8a:0c:
36:ff:ee:c7:8e:a7:ca:c6:82:ab:10:0f:c8:97:2d:50:a2:4b:
88:51:03:35:a1:69:e6:d1:cd:44:7f:d5:cd:f7:e9:bd:24:93:
31:b6:c0:05:23:21:7e:54:5c:c1:20:f6:3d:1a:82:92:f9:65:
79:7c:27:d0:c0:dc:77:a1:f5:8d:f1:e3:25:ad:29:b2:99:30:
3a:94:0a:98:b4:72:90:31:6c:91:f4:0c:35:fe:bf:b8:a6:86:
6c:d6:55:f1:5e:18:d6:b5:fd:ff:d1:ee:f0:61:11:cb:e8:b7:
2c:3a:ef:9e:ec:17:95:3c:e0:6b:f3:d0:7e:8d:b0:40:97:2f:
8e:b6:db:cf:e9:d0:12:5b:9d:d1:c0:78:c0:40:9b:30:8b:d2:
cb:c6:60:02:ab:68:2b:2c:7e:38:ca:c8:e1:31:df:b4:d3:b7:
4f:cd:f2:32:cc:a3:fa:a1:fa:f0:23:68:2b:2b:39:b1:bd:1c:
f4:01:0b:0b:4d:b0:c9:c5:f3:4e:44:5e:07:76:0a:eb:e0:a4:
88:53:48:5d:80:8d:42:5b:0a:56:2d:6c:72:a3:f2:0c:8f:68:
e2:9d:36:ef
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1NTExMTAvBgNVBAUTKDJGREQzODA0RDY0NThFQUYxQ0IzOTE3QjVFMzMyRkJB
NUM3MTVGOTEwHhcNMjUwNDExMTExMjM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTQ4ZC0xOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2lreryWUOeuSCzsn2NMq266Vb/OTZ9GSqidsmROwxjrl6cYrJlCnzx/ziJMp
S3mibk5Og5pW94+pt5YQ+Jx83mCXoAqWLdR1lqibWPB94rmTY8vab+yd3en4mEGg
iUctV9A0SIKsvIcWF1OVbULKfTIgxOc/sjbhzqDd5sWmjUnStrGwl1gpZZfberoD
uRwAKpViyGVCKHikSYBuvgJG/yuyIaXz+QcUZ7Pr/HLcapmouGb73FvLFlJPJksu
Y2jlJ4lFLAnCX6PnOl1/PaN/q/WbrFNuyhahfrmnW3WwaX8Ljk9Gtwk7dbM2fko0
IqqvL5LhLszdDEcTJpJjze046wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH1GpFNS
M+naVo7hVKykjRinxiO1MB8GA1UdIwQYMBaAFC/dOATWRY6vHLORe14zL7pccV+R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1MS81QUIxOTIwMjE2
QzUxMUYwODgxNUY0NkVDNEY5QUUwMi9MOTA0Qk5aRmpxOGNzNUY3WGpNdnVseHhY
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI1NTEvNUFCMTkyMDIxNkM1MTFGMDg4MTVGNDZFQzRGOUFFMDIvREU5MTdFNzAx
NkM1MTFGMDg1QjRGRjZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo9/KMA0GCSqGSIb3DQEBCwUAA4IBAQCPu/W7VifzC8RM4yZVtb/b
52GhqXzFfn9KcYKp5lngW06Yigw2/+7HjqfKxoKrEA/Ily1QokuIUQM1oWnm0c1E
f9XN9+m9JJMxtsAFIyF+VFzBIPY9GoKS+WV5fCfQwNx3ofWN8eMlrSmymTA6lAqY
tHKQMWyR9Aw1/r+4poZs1lXxXhjWtf3/0e7wYRHL6LcsOu+e7BeVPOBr89B+jbBA
ly+OttvP6dASW53RwHjAQJswi9LLxmACq2grLH44ysjhMd+007dPzfIyzKP6ofrw
I2grKzmxvRz0AQsLTbDJxfNORF4Hdgrr4KSIU0hdgI1CWwpWLWxyo/IMj2jinTbv
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:25 2026 by rpki-client