
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/BEB06ADA944211F08A761970C4F9AE02.roa
File: BEB06ADA944211F08A761970C4F9AE02.roa (raw, json)
Hash identifier: kk5sjyLutQjUsbYJim6fXXwfLma+mT+CCDWR+53e7jc=
Subject key identifier: A5:72:6B:B0:5E:D3:C3:12:FC:90:0C:84:AE:AE:A5:46:72:19:31:29
Certificate issuer: /CN=A915E1F9/serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Certificate serial: 65
Authority key identifier: B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/BEB06ADA944211F08A761970C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:16:28 +0000
ROA not before: Fri 13 Feb 2026 07:29:26 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 18108
IP address blocks: 137.172.192.0/24 maxlen: 24
137.172.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E1F9, serialNumber=B38ED16132DCB9789676771A8B09E4509B9ED4F9
Validity
Not Before: Feb 13 07:29:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a4584c-76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:3b:bb:d8:e7:87:96:3e:35:3e:18:23:be:
53:87:3b:86:52:4e:09:cb:fc:85:62:63:28:ac:dd:
23:d7:92:db:05:43:d4:a4:e6:0c:d8:bc:65:4c:8e:
77:7c:ae:b2:64:dd:8b:5d:d1:e5:b0:3a:6f:11:7b:
7b:12:08:64:79:ef:c8:61:d6:1f:cd:25:3b:cf:30:
9c:32:ac:31:e8:75:78:7a:a0:44:27:d4:e8:73:f1:
98:e0:bc:65:55:46:8a:ec:3c:4c:23:48:c2:44:7e:
28:54:56:8c:3c:46:cf:27:46:7f:4b:38:9a:46:ec:
0e:e8:aa:0f:a8:54:17:dc:b4:12:4f:c4:9d:12:d1:
87:98:81:07:6c:82:f9:20:33:25:31:be:a6:77:ad:
61:c1:f8:74:cb:c0:14:ca:e6:87:fe:a3:20:4e:11:
de:26:90:92:74:ca:de:d1:6a:69:c0:60:d0:69:2b:
9b:f2:14:09:a0:4e:17:04:cd:4f:80:fc:1a:ae:bc:
64:3e:ff:a1:98:84:7f:5e:b2:1b:04:3a:02:d7:67:
56:9f:5d:c9:96:8a:be:7d:c8:1d:9c:6e:1f:a9:b2:
f1:d2:81:af:b9:f2:11:66:63:4f:da:95:4d:0c:5e:
d2:51:c7:1d:fb:94:85:e4:b3:32:39:e5:09:bb:0c:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:6B:B0:5E:D3:C3:12:FC:90:0C:84:AE:AE:A5:46:72:19:31:29
X509v3 Authority Key Identifier:
keyid:B3:8E:D1:61:32:DC:B9:78:96:76:77:1A:8B:09:E4:50:9B:9E:D4:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/s47RYTLcuXiWdncaiwnkUJue1Pk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s47RYTLcuXiWdncaiwnkUJue1Pk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/A6BA6C8E8DE211F0A308AC7CC4F9AE02/BEB06ADA944211F08A761970C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
137.172.192.0/23
Signature Algorithm: sha256WithRSAEncryption
38:6e:d6:c8:db:34:ab:53:31:d3:f6:05:5a:ad:fa:db:73:fa:
e0:5f:e6:ac:af:a5:8b:55:5d:4d:1e:59:44:b6:5a:54:44:c1:
42:3e:51:56:b2:90:ac:b6:86:f6:02:c0:c8:48:80:33:dd:ca:
aa:24:74:ad:3b:37:17:9c:ff:24:c9:ee:30:fa:6d:d5:eb:83:
1b:90:4a:14:77:d7:a9:20:fd:76:86:1d:04:34:e5:3e:79:27:
3b:37:78:5b:9a:e7:59:af:22:ed:90:be:9e:d1:11:a7:14:78:
c7:8c:b0:9f:c6:b2:d4:3b:76:8f:5b:7a:6b:e3:17:5f:b5:8b:
f3:17:cd:86:b7:a5:6c:79:9a:db:25:2b:2a:00:7b:b9:d6:d3:
95:f4:ca:94:58:7e:18:43:c8:3c:37:5b:98:42:0c:51:b6:db:
16:88:7f:52:e7:ad:16:d9:26:33:37:2a:21:2f:9e:2b:ed:9b:
12:9d:31:f3:ca:28:83:a1:bc:f4:24:c9:cf:8c:c7:cb:da:93:
dd:26:a5:77:9e:3b:ce:5c:82:d5:ee:47:5a:b3:5d:c2:d4:31:
48:04:af:6b:a7:1b:ae:f6:4b:83:8a:a6:40:ab:fd:61:45:a8:
6c:59:f1:52:11:6c:13:54:94:4a:4a:74:da:e5:21:47:e5:6d:
d8:c1:9e:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:15 2026 by rpki-client