
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/872AD682B01011F1B04156A36C11F970.roa
File: 872AD682B01011F1B04156A36C11F970.roa (raw, json)
Hash identifier: jm/+G31po+MJ2sktkg8jDrLvytQSl9uDM6fJdHyue+U=
Subject key identifier: 80:50:ED:6C:73:99:3F:58:C9:1D:1A:AA:35:78:7F:4A:09:5A:9E:20
Certificate issuer: /CN=A915D584/serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844
Certificate serial: 04
Authority key identifier: 0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/872AD682B01011F1B04156A36C11F970.roa
Signing time: Mon 14 Sep 2026 07:59:38 +0000
ROA not before: Mon 14 Sep 2026 07:59:38 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 154911
IP address blocks: 163.52.168.0/24 maxlen: 24
2001:df7:81c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl
rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:46:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D584, serialNumber=0ECE33F3C281666D01E28B927895C2DDF6ACD844
Validity
Not Before: Sep 14 07:59:38 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa7a96a-cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:27:5b:54:d0:3e:6d:89:ed:66:81:bc:2d:
64:8b:7a:0c:26:e6:a8:34:43:64:c7:99:57:b7:26:
50:13:44:7d:ca:47:4d:6c:61:ae:35:16:fa:7b:fe:
fb:97:59:cd:07:d5:c6:41:25:b5:ad:39:c1:12:3d:
2c:ff:f1:0b:91:4b:86:56:a9:97:a0:c3:b5:75:94:
e0:fb:5c:70:aa:47:12:b9:22:da:92:6a:31:fa:f0:
94:08:5d:e2:3d:e3:36:29:fd:83:36:dc:03:bb:4c:
28:4a:6a:5d:42:41:a2:9b:83:dd:51:51:1e:ee:82:
95:01:94:4c:1f:b8:e2:33:dc:87:f2:9d:6a:cb:42:
6b:c6:81:ce:bf:d5:ce:c4:53:6b:a0:de:25:b3:7a:
0c:76:53:d3:24:9a:2b:5c:8e:bc:e1:f7:6d:c4:88:
e3:a2:62:b3:64:0a:c1:a6:26:29:2f:35:bc:de:bd:
bb:d5:95:c6:e5:28:19:23:87:45:d4:33:54:cc:b7:
7c:d3:bb:16:62:91:fd:58:1d:56:a1:e3:ef:79:a8:
80:ca:7e:9e:42:43:6c:79:c6:db:1d:31:e4:b7:55:
c3:6a:e4:61:34:93:19:8e:22:42:af:55:00:c6:bf:
3c:60:d5:c3:f9:b2:59:88:ee:47:96:9e:7b:08:a4:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:ED:6C:73:99:3F:58:C9:1D:1A:AA:35:78:7F:4A:09:5A:9E:20
X509v3 Authority Key Identifier:
keyid:0E:CE:33:F3:C2:81:66:6D:01:E2:8B:92:78:95:C2:DD:F6:AC:D8:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/Ds4z88KBZm0B4ouSeJXC3fas2EQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ds4z88KBZm0B4ouSeJXC3fas2EQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D584/36687F8EB00F11F1AC3501026C11F970/872AD682B01011F1B04156A36C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.168.0/24
IPv6:
2001:df7:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
6a:44:3a:a3:d0:d4:62:5b:01:cc:ac:6e:f5:e3:78:8c:af:82:
09:39:ba:a0:75:f3:80:7a:26:e5:fb:5b:e9:ea:db:58:6c:e1:
99:7f:3e:ec:89:8e:c4:a5:e6:31:02:49:99:e2:68:80:4c:e1:
a0:0d:72:c4:3e:e8:e4:47:d3:5c:ff:61:54:75:6c:94:45:6e:
1e:c8:79:c9:e1:2f:ad:e1:51:85:2d:ce:2d:64:ce:bd:72:5b:
31:95:e6:47:7a:6e:36:96:f5:fd:a4:bb:2a:fb:fb:81:77:97:
35:a3:d6:59:6e:76:88:8a:a6:2f:28:a4:02:57:84:ff:37:81:
ce:dc:05:59:92:e4:02:97:28:39:f0:22:96:5c:30:df:0f:4f:
2e:1f:31:4b:86:90:01:8b:a0:26:df:76:0f:9d:83:21:56:77:
35:6c:93:fe:f0:e2:24:13:c7:13:66:77:9e:29:c3:56:12:8d:
1f:30:88:54:c6:f1:46:49:e5:a3:70:cf:fd:de:01:e3:21:7d:
8e:e3:10:31:31:a4:5b:34:d9:5b:68:68:9b:80:52:0d:ea:a2:
ca:ee:82:0b:99:03:7a:4c:76:e3:ff:5a:72:95:e6:fe:fc:fe:
01:81:7b:26:4c:b1:61:5f:94:56:88:52:52:f9:d0:44:46:cc:
31:1f:1d:a7
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RDU4NDExMC8GA1UEBRMoMEVDRTMzRjNDMjgxNjY2RDAxRTI4QjkyNzg5NUMyRERG
NkFDRDg0NDAeFw0yNjA5MTQwNzU5MzhaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYTdhOTZhLWNkMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMWidbVNA+bYntZoG8LWSLegwm5qg0Q2THmVe3JlATRH3KR01sYa41Fvp7/vuX
Wc0H1cZBJbWtOcESPSz/8QuRS4ZWqZegw7V1lOD7XHCqRxK5ItqSajH68JQIXeI9
4zYp/YM23AO7TChKal1CQaKbg91RUR7ugpUBlEwfuOIz3IfynWrLQmvGgc6/1c7E
U2ug3iWzegx2U9Mkmitcjrzh923EiOOiYrNkCsGmJikvNbzevbvVlcblKBkjh0XU
M1TMt3zTuxZikf1YHVah4+95qIDKfp5CQ2x5xtsdMeS3VcNq5GE0kxmOIkKvVQDG
vzxg1cP5slmI7keWnnsIpM7jAgMBAAGjggJxMIICbTAdBgNVHQ4EFgQUgFDtbHOZ
P1jJHRqqNXh/SglaniAwHwYDVR0jBBgwFoAUDs4z88KBZm0B4ouSeJXC3fas2EQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVENTg0LzM2Njg3RjhFQjAw
RjExRjFBQzM1MDEwMjZDMTFGOTcwL0RzNHo4OEtCWm0wQjRvdVNlSlhDM2ZhczJF
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRHM0ejg4S0JabTBCNG91U2VKWEMzZmFzMkVRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDU4NC8zNjY4N0Y4RUIwMEYxMUYxQUMzNTAxMDI2QzExRjk3MC84NzJBRDY4MkIw
MTAxMUYxQjA0MTU2QTM2QzExRjk3MC5yb2EwMAYIKwYBBQUHAQcBAf8EITAfMAwE
AgABMAYDBACjNKgwDwQCAAIwCQMHACABDfeBwDANBgkqhkiG9w0BAQsFAAOCAQEA
akQ6o9DUYlsBzKxu9eN4jK+CCTm6oHXzgHom5ftb6erbWGzhmX8+7ImOxKXmMQJJ
meJogEzhoA1yxD7o5EfTXP9hVHVslEVuHsh5yeEvreFRhS3OLWTOvXJbMZXmR3pu
Npb1/aS7Kvv7gXeXNaPWWW52iIqmLyikAleE/zeBztwFWZLkApcoOfAillww3w9P
Lh8xS4aQAYugJt92D52DIVZ3NWyT/vDiJBPHE2Z3ninDVhKNHzCIVMbxRknlo3DP
/d4B4yF9juMQMTGkWzTZW2hom4BSDeqiyu6CC5kDekx24/9acpXm/vz+AYF7Jkyx
YV+UVohSUvnQREbMMR8dpw==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:21:44 2026 by rpki-client