
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/489B8430DE8911EEB21B9B45C4F9AE02.roa
File: 489B8430DE8911EEB21B9B45C4F9AE02.roa (raw, json)
Hash identifier: vwcrZ1SGBkaJ2kyGRhD2GJh0M50ZL2LU1y3g3XzM/4I=
Subject key identifier: BA:30:8F:63:ED:6F:A2:29:18:2D:C3:66:C9:A0:F5:4D:2B:25:6D:7C
Certificate issuer: /CN=A916DAC0/serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Certificate serial: 0173
Authority key identifier: BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/489B8430DE8911EEB21B9B45C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:52:10 +0000
ROA not before: Thu 03 Apr 2025 05:03:22 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152464
IP address blocks: 157.15.178.0/24 maxlen: 24
157.15.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DAC0, serialNumber=BFF5815118C3BCDD8D5AC2317DBBCFA3997E35F6
Validity
Not Before: Apr 3 05:03:22 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a5960a-7019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:06:24:8d:4f:b3:39:79:6f:e2:f9:01:7b:
19:cb:4c:02:ba:30:ef:51:9b:29:65:d0:76:a4:34:
61:8c:25:31:79:26:85:71:ff:7f:14:1b:d7:95:67:
9e:6d:18:14:75:b3:9d:3b:04:aa:b7:35:cd:b9:c5:
5f:6b:ab:22:d4:f0:77:37:c3:9a:3f:05:4c:cb:15:
66:7d:55:37:9d:4c:5f:37:46:44:69:c7:c0:29:42:
8e:7a:2d:25:09:40:1a:33:b5:a3:57:0b:6f:c3:36:
9e:4b:14:e4:60:b6:c7:fd:86:e9:f4:28:a3:f5:ce:
43:23:6b:1e:62:4c:fa:b8:1e:8c:06:51:64:6c:bc:
28:15:4a:f4:18:83:11:d6:9e:69:32:08:19:1b:2c:
6d:ac:55:0c:1a:75:a6:a3:d9:b1:0e:92:83:57:4e:
d3:6f:64:66:08:fd:96:bd:59:af:24:7e:73:cb:ca:
04:82:09:a5:cb:d6:ab:d2:a6:6b:f2:6b:dc:3b:38:
47:d2:b2:5f:a1:c2:88:82:0d:16:51:f7:0f:7b:3b:
df:d7:7d:c4:02:1c:a8:2f:d8:43:69:ba:09:75:a5:
2b:b3:f5:f2:1a:9d:5f:21:0a:3f:92:b9:3f:b2:c3:
39:01:11:a2:ba:ba:44:ec:db:ff:9b:29:7a:f6:cf:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:30:8F:63:ED:6F:A2:29:18:2D:C3:66:C9:A0:F5:4D:2B:25:6D:7C
X509v3 Authority Key Identifier:
keyid:BF:F5:81:51:18:C3:BC:DD:8D:5A:C2:31:7D:BB:CF:A3:99:7E:35:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/v_WBURjDvN2NWsIxfbvPo5l-NfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v_WBURjDvN2NWsIxfbvPo5l-NfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DAC0/DDC942AADE8811EE93D9A744C4F9AE02/489B8430DE8911EEB21B9B45C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.178.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ad:b5:79:eb:9f:94:39:0a:34:b9:ed:b0:64:5d:57:03:96:
c1:43:4e:71:ee:60:8a:b7:a3:31:cc:2c:f0:6b:a3:52:c8:1b:
1d:05:b4:02:91:24:f0:ed:40:82:db:65:9d:75:02:69:09:9a:
47:dd:98:a4:a5:0a:09:b8:4c:f9:a9:41:4f:7c:19:c0:d8:38:
b9:73:0f:c7:e3:38:ff:e5:66:c7:c5:f7:20:0d:16:c3:62:ad:
4c:51:55:38:5b:8c:aa:f4:49:99:3a:51:7e:02:70:0d:87:73:
0b:35:69:d5:f3:01:fd:dd:c9:80:15:96:09:da:b1:bf:3b:e1:
ad:84:2a:b6:9d:53:37:5a:50:90:c0:7e:07:5f:ae:b2:71:2c:
d9:ed:f4:41:af:39:9c:33:a9:a4:5b:c8:cb:69:9a:75:e5:38:
b7:33:f6:ac:7a:69:22:75:6c:fc:bd:e9:06:be:2d:e8:7e:d4:
17:c0:2f:99:25:b9:73:71:83:c2:6e:79:28:ca:b1:ae:c2:2d:
e4:2a:69:30:03:67:2e:7c:8b:bf:15:d9:92:90:52:b3:33:5b:
94:fc:08:71:ac:96:06:a9:59:33:bc:9d:06:fb:5c:ed:db:46:
70:1a:7a:9c:6a:33:e1:75:ae:c6:2e:7c:ad:c8:ca:24:f9:03:
aa:ff:b0:6f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRBQzAxMTAvBgNVBAUTKEJGRjU4MTUxMThDM0JDREQ4RDVBQzIzMTdEQkJDRkEz
OTk3RTM1RjYwHhcNMjUwNDAzMDUwMzIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTYwYS03MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0LcGJI1Pszl5b+L5AXsZy0wCujDvUZspZdB2pDRhjCUxeSaFcf9/FBvXlWee
bRgUdbOdOwSqtzXNucVfa6si1PB3N8OaPwVMyxVmfVU3nUxfN0ZEacfAKUKOei0l
CUAaM7WjVwtvwzaeSxTkYLbH/Ybp9Cij9c5DI2seYkz6uB6MBlFkbLwoFUr0GIMR
1p5pMggZGyxtrFUMGnWmo9mxDpKDV07Tb2RmCP2WvVmvJH5zy8oEggmly9ar0qZr
8mvcOzhH0rJfocKIgg0WUfcPezvf133EAhyoL9hDaboJdaUrs/XyGp1fIQo/krk/
ssM5ARGiurpE7Nv/myl69s9y6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLowj2Pt
b6IpGC3DZsmg9U0rJW18MB8GA1UdIwQYMBaAFL/1gVEYw7zdjVrCMX27z6OZfjX2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REFDMC9EREM5NDJBQURF
ODgxMUVFOTNEOUE3NDRDNEY5QUUwMi92X1dCVVJqRHZOMk5Xc0l4ZmJ2UG81bC1O
ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZfV0JVUmpEdk4yTldzSXhmYnZQbzVsLU5mWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkRBQzAvRERDOTQyQUFERTg4MTFFRTkzRDlBNzQ0QzRGOUFFMDIvNDg5Qjg0MzBE
RTg5MTFFRUIyMUI5QjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQ+yMA0GCSqGSIb3DQEBCwUAA4IBAQA4rbV565+UOQo0ue2wZF1X
A5bBQ05x7mCKt6MxzCzwa6NSyBsdBbQCkSTw7UCC22WddQJpCZpH3ZikpQoJuEz5
qUFPfBnA2Di5cw/H4zj/5WbHxfcgDRbDYq1MUVU4W4yq9EmZOlF+AnANh3MLNWnV
8wH93cmAFZYJ2rG/O+GthCq2nVM3WlCQwH4HX66ycSzZ7fRBrzmcM6mkW8jLaZp1
5Ti3M/asemkidWz8vekGvi3oftQXwC+ZJblzcYPCbnkoyrGuwi3kKmkwA2cufIu/
FdmSkFKzM1uU/AhxrJYGqVkzvJ0G+1zt20ZwGnqcajPhda7GLnytyMok+QOq/7Bv
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:47 2026 by rpki-client