
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
File: 781637A8FADD11EE880BF37DC4F9AE02.roa (raw, json)
Hash identifier: 4a4u/xLVk8tTHuUdy65eUm/BUELFx7fyNoPG/ykC6/c=
Subject key identifier: 5F:EE:9F:F4:43:E0:A7:2A:42:DF:87:97:7E:D2:8B:C9:5C:44:C4:19
Certificate issuer: /CN=A915EBC8/serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Certificate serial: 0265
Authority key identifier: C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:19:27 +0000
ROA not before: Fri 11 Apr 2025 03:38:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 155.60.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:19:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613 (0x265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=C621848151F797BF723107F14D62C67A213A53E3
Validity
Not Before: Apr 11 03:38:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5aa7f-222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:b7:91:24:75:18:17:9e:95:34:11:71:9b:
b3:b7:c1:ce:d8:bf:f4:f3:11:5c:67:32:bf:89:e0:
18:a7:c6:b1:29:48:23:0b:ad:d7:de:fd:1a:e2:f2:
fa:e2:43:c8:6c:5d:7d:e0:1c:74:22:e8:46:bb:2c:
0f:32:f2:cd:a2:dc:1e:38:e5:18:c1:83:d9:27:96:
07:ee:50:32:d2:55:9d:8e:77:fc:fb:4a:87:89:59:
54:ba:61:3d:05:16:f3:ee:ce:a4:67:cb:8d:6b:5a:
07:57:e5:5c:a6:ba:1c:0a:11:4e:51:9d:82:8e:e0:
91:f4:e6:c6:71:17:21:1f:a4:f6:53:21:13:31:66:
05:ed:08:a1:b8:0e:16:77:f6:79:e1:10:4a:49:02:
a0:6b:d6:d6:ac:3d:84:23:b6:7e:fd:ff:3d:23:00:
ff:87:d6:b9:a9:7f:d6:b1:0e:d1:a8:05:87:00:02:
38:4b:1b:95:9a:f4:1e:eb:25:34:66:a7:11:8d:e4:
a1:94:dd:43:03:55:dc:e7:cb:e7:6f:a8:7a:7e:60:
4a:76:bd:17:f1:33:54:9e:6d:47:31:e7:5b:fd:67:
dd:8c:be:c5:3f:18:ab:32:24:7b:57:82:b6:c4:87:
bc:92:a4:54:dd:68:98:dd:54:3c:2b:94:1b:df:5c:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:9F:F4:43:E0:A7:2A:42:DF:87:97:7E:D2:8B:C9:5C:44:C4:19
X509v3 Authority Key Identifier:
keyid:C6:21:84:81:51:F7:97:BF:72:31:07:F1:4D:62:C6:7A:21:3A:53:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/xiGEgVH3l79yMQfxTWLGeiE6U-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiGEgVH3l79yMQfxTWLGeiE6U-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/589820C2EF0211ED8C2DD91FC4F9AE02/781637A8FADD11EE880BF37DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
155.60.128.0/19
Signature Algorithm: sha256WithRSAEncryption
71:2d:65:5b:f2:c9:d0:6c:71:30:09:7a:2e:57:22:f0:ea:53:
e1:6c:15:ee:be:7f:a9:8e:fd:32:d8:2b:a6:37:d9:62:db:4c:
c8:d2:57:95:fd:c2:60:1b:51:43:96:7c:9e:02:0b:b4:11:a2:
b9:5a:d6:ae:4e:46:6e:40:a9:eb:d0:84:1c:53:45:e4:5e:74:
9f:c9:ed:16:10:66:df:f5:5d:23:4c:f5:7f:34:b0:74:ab:eb:
87:e7:42:c7:31:11:7e:3f:09:57:97:20:d8:62:d9:d4:08:2b:
57:e0:3a:82:a7:9e:cd:1f:45:de:db:8b:c6:90:97:ac:60:5f:
97:93:b2:95:dd:3a:9c:3d:52:e6:13:0a:c4:0c:52:46:7e:d3:
57:08:a3:ce:28:1a:2a:51:0d:1e:62:99:da:81:08:bc:3d:89:
02:d4:a0:48:57:f3:25:59:69:a1:1b:f3:7b:f8:a0:5a:38:2b:
00:9f:8d:36:15:2b:a7:69:db:52:10:ee:32:f7:8a:27:c3:55:
4c:16:07:ac:42:ef:9e:d0:33:d1:3c:20:8b:ab:39:a2:2a:0f:
4d:c1:f9:89:07:bd:4e:72:71:f9:84:9c:3a:4e:bf:65:7f:e4:
b4:10:9e:6a:13:47:1c:0d:4b:e5:34:aa:01:70:03:e8:1c:4a:
1a:16:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:19 2026 by rpki-client