
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
File: 395803C8CDD011EEB4E50681C4F9AE02.roa (raw, json)
Hash identifier: yp4A2ISsOVYuTmO6d9hWCCMDfhvrp6UrWBSAOlQdSqQ=
Subject key identifier: 09:4B:85:6B:4F:02:A9:AC:13:ED:78:32:16:73:BB:2C:95:68:95:29
Certificate issuer: /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Certificate serial: 01A1
Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
Signing time: Fri 17 Apr 2026 04:37:24 +0000
ROA not before: Fri 17 Apr 2026 04:37:24 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 63801
IP address blocks: 157.15.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Validity
Not Before: Apr 17 04:37:24 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e1b903-dc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:84:bf:4b:3f:4a:2e:33:bf:5d:c9:da:40:
70:36:b6:78:1b:3b:d8:9a:8a:b4:76:d9:df:5a:d4:
05:e4:c7:1e:7d:df:86:b8:fb:69:7f:f0:f9:93:74:
c0:ac:f6:9d:5c:ea:f5:ac:35:52:e3:28:d9:dc:7f:
e9:01:20:ab:08:fd:6c:d0:da:70:04:f7:28:f3:b1:
f1:9d:6b:c6:a6:90:4d:02:84:9e:32:67:03:56:b8:
49:a9:92:bb:41:4a:99:32:34:64:1e:e9:38:fb:05:
70:a1:2b:b2:0c:52:62:dd:40:15:2e:4f:d2:49:e8:
a3:88:06:da:cf:e1:06:f6:88:2d:28:ca:e5:ba:b6:
d1:3f:42:20:ee:2a:28:dc:d1:19:96:c2:8e:79:f5:
d4:bd:c8:c7:86:66:f7:7f:ad:4c:28:3f:26:9c:23:
3c:d2:d5:b1:63:66:ec:1d:e4:40:a5:9d:95:17:e8:
dc:9e:47:41:68:02:db:0e:76:8b:13:22:90:b3:f2:
26:fb:11:28:b0:cc:42:f7:55:c8:8e:c5:5d:fe:1f:
8f:ea:60:8a:1d:ca:5c:94:01:fe:af:bc:b5:90:e7:
40:47:70:d6:95:52:e8:ff:ef:9c:8f:e7:9a:b0:09:
b1:8b:28:2c:af:a9:c7:b4:59:23:a8:c3:9a:36:0d:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4B:85:6B:4F:02:A9:AC:13:ED:78:32:16:73:BB:2C:95:68:95:29
X509v3 Authority Key Identifier:
keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.126.0/23
Signature Algorithm: sha256WithRSAEncryption
19:af:80:8d:07:0e:be:39:78:f4:be:cf:ca:ac:e6:cd:d2:a9:
ba:ff:9d:73:98:8a:07:8f:27:3d:22:c5:b3:92:f1:fe:fd:45:
c2:93:88:29:dd:b5:d0:ba:95:30:f4:75:39:13:da:ed:6e:02:
0d:dc:06:e8:d9:92:0c:c8:0e:95:50:30:03:e4:26:e3:8f:43:
be:57:42:be:49:25:7b:ca:e9:67:70:87:03:d7:fa:35:94:e5:
f2:07:ff:50:db:2e:47:38:f4:6b:2b:37:49:bc:fe:ed:a1:8d:
bc:e4:5c:1d:6e:52:a7:88:2f:0f:ea:27:61:c6:de:1d:64:b0:
51:c7:30:c4:ec:5a:e6:02:ca:b1:3b:f0:9a:89:2c:18:58:10:
a1:8d:ff:5e:83:a8:36:13:fb:03:84:7c:d9:08:e2:e2:43:a9:
0d:4a:1f:9d:7a:95:7a:48:00:f7:a7:4f:dc:6b:5d:a5:88:ca:
61:fd:57:cf:1e:7b:0d:61:10:21:98:ce:2b:26:d5:a8:e5:01:
bb:72:53:c4:0e:1f:32:f7:4e:39:df:2c:ff:3e:34:c8:e9:f6:
4b:77:4a:45:dd:28:95:ea:3b:c6:24:77:0c:98:12:a8:08:c1:
ab:3e:61:85:2f:5c:e6:79:55:fa:69:7b:d1:f2:c9:57:a0:7f:
fa:46:f4:e8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzhDMUUxMTAvBgNVBAUTKEY5M0VGQUE2QTZEMDU0QUU5OTdDOEEzQ0ZGMjVGMTY5
QzM2RjhBMEMwHhcNMjYwNDE3MDQzNzI0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWUxYjkwMy1kYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6OEv0s/Si4zv13J2kBwNrZ4GzvYmoq0dtnfWtQF5Mcefd+GuPtpf/D5k3TA
rPadXOr1rDVS4yjZ3H/pASCrCP1s0NpwBPco87HxnWvGppBNAoSeMmcDVrhJqZK7
QUqZMjRkHuk4+wVwoSuyDFJi3UAVLk/SSeijiAbaz+EG9ogtKMrlurbRP0Ig7ioo
3NEZlsKOefXUvcjHhmb3f61MKD8mnCM80tWxY2bsHeRApZ2VF+jcnkdBaALbDnaL
EyKQs/Im+xEosMxC91XIjsVd/h+P6mCKHcpclAH+r7y1kOdAR3DWlVLo/++cj+ea
sAmxiygsr6nHtFkjqMOaNg3sSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAlLhWtP
AqmsE+14MhZzuyyVaJUpMB8GA1UdIwQYMBaAFPk++qam0FSumXyKPP8l8WnDb4oM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9COTg5RjhBMkM2
NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi8tVDc2cHFiUVZLNlpmSW84X3lYeGFjTnZp
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy1UNzZwcWJRVks2WmZJbzhfeVh4YWNOdmlndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzhDMUUvQjk4OUY4QTJDNjQ3MTFFRTlENjhFQjdGQzRGOUFFMDIvMzk1ODAzQzhD
REQwMTFFRUI0RTUwNjgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQ9+MA0GCSqGSIb3DQEBCwUAA4IBAQAZr4CNBw6+OXj0vs/KrObN
0qm6/51zmIoHjyc9IsWzkvH+/UXCk4gp3bXQupUw9HU5E9rtbgIN3Abo2ZIMyA6V
UDAD5Cbjj0O+V0K+SSV7yulncIcD1/o1lOXyB/9Q2y5HOPRrKzdJvP7toY285Fwd
blKniC8P6idhxt4dZLBRxzDE7FrmAsqxO/CaiSwYWBChjf9eg6g2E/sDhHzZCOLi
Q6kNSh+depV6SAD3p0/ca12liMph/VfPHnsNYRAhmM4rJtWo5QG7clPEDh8y9045
3yz/PjTI6fZLd0pF3SiV6jvGJHcMmBKoCMGrPmGFL1zmeVX6aXvR8slXoH/6RvTo
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:13 2026 by rpki-client