
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/59B3485028C111E7A885571AC4F9AE02.roa
File: 59B3485028C111E7A885571AC4F9AE02.roa (raw, json)
Hash identifier: F1bHZVCAAlM5R2hu8xgkHlsSjuo7aB5QEMEkptThpJg=
Subject key identifier: 81:92:39:64:B1:6D:62:FF:02:B4:8B:38:3D:1F:AA:4F:22:43:B6:2C
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 2562
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/59B3485028C111E7A885571AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:18:41 +0000
ROA not before: Tue 16 Sep 2025 15:53:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24493
IP address blocks: 117.18.32.0/20 maxlen: 20
117.18.33.0/24 maxlen: 24
117.18.34.0/24 maxlen: 24
117.18.35.0/24 maxlen: 24
117.18.36.0/24 maxlen: 24
117.18.37.0/24 maxlen: 24
117.18.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9570 (0x2562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Sep 16 15:53:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48301-bc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:08:37:e2:f9:1f:1f:cb:7c:c0:5f:88:9e:
a7:b5:75:c4:84:c1:67:53:67:27:14:f6:ef:e5:e0:
89:0e:66:16:5b:17:28:52:e3:ec:ef:8f:69:74:2a:
d6:68:e7:6a:dc:c2:2d:6c:b8:47:6a:65:cf:58:64:
5c:f8:2d:be:e9:89:66:d7:6a:e7:cd:8c:c6:0a:4c:
d6:30:ba:ed:76:4f:1a:b1:41:9e:a1:20:76:58:ff:
af:ee:91:ae:23:26:36:c8:52:6c:d1:d7:c7:a2:fa:
04:11:5b:d6:d0:e4:d9:b3:c6:83:c9:86:dd:50:81:
87:47:32:22:f7:80:2c:3b:bc:74:4c:d2:fe:53:4c:
d0:b9:02:a2:b0:88:8b:79:1b:ad:ca:41:7d:2a:f2:
23:b8:ae:07:03:88:90:bc:2f:c1:47:39:45:86:a4:
fc:14:99:f9:ce:21:1d:e7:fe:bb:db:1b:7c:e3:b4:
8d:d7:06:7f:2f:ca:97:99:f8:68:8a:9d:3f:ae:4e:
c5:e5:c9:8e:f3:59:a8:ea:22:6d:68:d7:65:8e:ca:
65:1a:07:9b:b0:d1:77:d4:23:26:dc:1d:d7:80:cd:
36:c6:01:ef:32:a1:07:10:0a:01:41:98:d6:9b:b4:
50:b5:a2:04:1b:87:70:d4:ed:c7:66:69:1d:9e:e9:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:92:39:64:B1:6D:62:FF:02:B4:8B:38:3D:1F:AA:4F:22:43:B6:2C
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/59B3485028C111E7A885571AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.32.0/20
Signature Algorithm: sha256WithRSAEncryption
43:50:27:a7:f8:bc:b0:3a:36:5c:47:18:1a:d6:86:04:48:19:
e0:1d:e6:93:28:5e:26:95:d7:1a:6b:cd:9e:ec:2a:82:24:e4:
c7:8e:f0:94:da:61:dc:df:2b:ba:12:17:ad:39:7e:d1:e1:63:
7f:ca:24:0c:9c:12:92:34:be:cd:2e:dd:02:a9:2c:25:36:7f:
16:bb:6a:91:33:20:3e:77:52:d8:80:b3:b7:fd:b6:5a:f5:3d:
06:b6:b2:d2:5f:e1:f7:7c:6a:44:45:5e:39:11:1c:ad:3e:34:
b5:f9:aa:ea:b2:3e:18:d2:58:c5:9f:76:b9:52:36:00:b0:dd:
ec:f4:ea:e2:44:fd:0b:f1:e0:e2:36:11:6c:eb:40:9a:4f:98:
50:e3:fc:f5:4b:bb:84:35:a1:8e:58:a5:32:7c:8f:1c:e8:56:
76:72:9e:41:ac:64:38:db:cc:ca:44:5e:c8:21:1b:02:6c:8d:
0a:12:a3:44:99:99:3a:01:75:9c:28:86:b9:47:43:d6:e8:ef:
36:d6:f6:36:17:ae:20:39:59:8b:67:14:38:15:67:dc:ba:69:
84:35:b3:2b:8e:a7:52:3d:f6:73:fd:de:3f:72:05:60:e2:1f:
bc:49:0c:c8:98:35:be:9f:57:4b:c4:55:7a:d3:3b:ad:ce:2f:
54:1f:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:40 2026 by rpki-client