
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
File: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (raw, json)
Hash identifier: WHnFAG70JawqBzlnEo6WtvfDMead1qbEaY3qu5N7lXM=
Subject key identifier: 64:09:DE:01:04:5E:0F:27:B0:36:25:57:DB:DE:9D:03:F5:23:61:6F
Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial: 0B23
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:30:46 +0000
ROA not before: Wed 20 Aug 2025 20:00:00 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139190
IP address blocks: 2404:f340:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2851 (0xb23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Validity
Not Before: Aug 20 20:00:00 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a469b6-0dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:a1:b9:7d:b9:be:d9:94:13:b7:4b:4a:13:
02:02:5b:e0:36:d9:ff:8f:2c:06:3d:f9:31:83:1f:
0d:74:94:04:b2:eb:05:55:0b:ba:4f:8d:ec:e0:c0:
38:22:f2:f3:89:9a:cc:2b:0c:ae:8d:7b:25:76:8b:
dc:0c:8f:c8:9f:3f:31:03:80:ef:a7:90:ce:b0:fa:
5b:16:3d:11:4b:e9:f9:71:ea:80:69:1f:f2:93:25:
1d:90:d9:13:ce:72:54:22:23:cb:be:7b:87:31:fd:
02:92:f5:80:da:81:a9:63:c8:8f:6a:f3:7c:3b:ed:
73:98:87:f0:cd:2e:ea:5d:94:d9:0e:8b:da:f5:91:
99:be:bf:94:be:3e:fa:6f:74:d4:db:47:2d:d6:99:
1f:6f:9c:dc:49:7f:cb:ab:fe:4f:32:54:f3:a7:f6:
30:b1:34:86:6e:77:21:81:8d:ac:54:64:e0:3e:9e:
ce:16:4e:25:c4:1b:47:c1:e1:a9:c1:09:5f:32:2f:
60:11:de:c4:ce:32:21:15:8c:45:85:27:c8:44:bc:
62:2d:84:1e:3e:cd:a1:8d:ea:67:a1:93:8a:fc:cd:
13:b5:9d:b0:65:7a:f7:4e:9d:4b:09:49:73:3e:6c:
09:a3:77:75:ec:21:70:74:e2:be:f0:69:a0:cd:51:
2a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:DE:01:04:5E:0F:27:B0:36:25:57:DB:DE:9D:03:F5:23:61:6F
X509v3 Authority Key Identifier:
keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2404:f340:4000::/34
Signature Algorithm: sha256WithRSAEncryption
1f:4e:fb:78:b6:c8:50:75:0a:04:66:56:08:a5:4f:0e:29:2c:
09:97:58:d0:28:96:66:2f:82:74:01:bd:c4:bf:a1:b6:dc:ab:
64:bb:5c:34:57:fe:33:b6:18:95:e2:20:ae:92:7b:10:ab:cd:
13:cb:fd:af:53:80:74:e9:00:13:7e:a7:53:1d:7e:dc:68:30:
80:16:9c:64:b8:34:2d:52:48:d4:ed:4d:2c:07:3f:08:1e:b9:
0b:b0:7a:c3:b1:d8:57:68:c8:90:83:21:6a:d8:b3:8d:94:fb:
6a:bc:ab:8b:98:21:45:81:ae:9f:85:da:1f:65:09:6d:93:7a:
62:d1:7c:69:62:5a:7c:92:3e:cf:a7:d6:e8:fc:5f:20:c2:e3:
94:13:6a:39:c5:55:a4:36:ea:31:6a:1b:05:f8:d1:57:06:da:
fa:cf:be:37:21:fd:95:be:4c:53:9b:3b:2c:8d:c8:8c:4d:be:
84:0a:67:70:9c:78:79:ed:17:4e:85:72:c9:c1:1c:9b:cb:ee:
b8:bc:a8:7e:db:9c:78:cc:1c:3c:2b:53:4e:35:7a:d6:bf:57:
b9:79:09:c3:83:bd:2e:6e:f7:cc:66:61:bb:bc:88:5c:50:57:
b3:d0:54:38:58:0c:26:67:03:40:82:aa:1f:4f:b9:67:7d:75:
15:42:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:10 2026 by rpki-client