
$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/9C6F77784A3211EFBDBCEB2FC4F9AE02.roa
File: 9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (raw, json)
Hash identifier: Nc9DSQfoP8lp71rB/yIzwnzaLGPXE+pUgVZdrBLN3aQ=
Subject key identifier: 16:5D:E2:74:86:03:E5:E7:B3:B5:10:31:FE:D0:89:5A:6D:93:DE:C5
Certificate issuer: /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial: 0136
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/9C6F77784A3211EFBDBCEB2FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:41:29 +0000
ROA not before: Tue 25 Mar 2025 05:42:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141153
IP address blocks: 157.15.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 12:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 310 (0x136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Validity
Not Before: Mar 25 05:42:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a58579-5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:d0:53:6c:d5:a7:87:2c:7a:cf:f4:a0:65:
4e:2b:4e:1b:b9:c6:5a:1b:83:25:be:9d:be:99:3e:
08:18:42:e1:4f:96:ca:28:26:de:0b:af:b5:5e:bd:
01:66:9d:85:73:6e:f9:b9:cf:9b:03:5a:b8:be:d4:
38:2f:6a:0d:ab:5b:2c:bb:dd:bf:20:db:b9:cf:54:
57:30:47:64:52:6e:dc:a3:10:35:cc:e5:43:d5:4a:
fb:db:b9:9a:7f:18:9d:4f:c8:68:89:35:9e:51:01:
1c:5d:32:b3:b6:00:74:d5:20:af:56:38:a0:b1:f4:
ef:e2:1e:61:b6:e1:35:c9:94:c7:68:e6:2f:ca:c3:
f2:58:cb:18:6f:87:63:76:ed:c1:a5:f6:64:7c:69:
b6:ce:2b:86:74:b2:71:9c:e5:37:12:ca:fd:3c:ad:
fb:8f:83:6b:9a:32:c3:4c:16:ec:20:00:c2:05:47:
02:cf:99:df:cc:4d:0a:a4:3b:d7:45:98:ef:a7:06:
24:76:92:0d:d7:9a:37:e1:07:68:a9:fe:85:e7:c5:
d9:a5:1a:5b:db:bc:a2:e9:9a:7e:78:ae:1a:a0:47:
c2:25:87:1c:fe:39:6e:e2:6c:d8:f0:8e:43:ad:fd:
42:b6:f6:92:46:be:31:b2:cb:16:90:a4:c0:8a:50:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5D:E2:74:86:03:E5:E7:B3:B5:10:31:FE:D0:89:5A:6D:93:DE:C5
X509v3 Authority Key Identifier:
keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/9C6F77784A3211EFBDBCEB2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:22:df:7f:f1:f8:0a:b5:a5:e5:b6:56:d2:b4:09:20:49:a2:
be:4e:be:04:0d:ab:ab:bb:8f:60:65:b5:ba:69:ea:d3:83:d3:
ce:9c:ff:42:f5:d9:d1:2a:6c:8a:5e:40:d5:7f:48:23:ca:ab:
c4:e0:65:54:e8:52:fa:d1:1c:54:5b:f0:f9:5b:70:78:34:5c:
9c:7a:27:54:d1:d7:9e:cc:eb:42:ab:77:16:15:0d:d9:6a:a9:
4c:46:d2:b0:03:b9:09:09:62:49:79:c6:28:4c:e9:db:df:78:
81:30:ff:95:82:26:af:8a:0d:13:1d:a0:bd:68:2b:79:6e:0c:
eb:56:24:36:b6:56:f5:c2:b3:8c:53:d4:6f:40:36:3a:b5:2b:
8e:f9:7c:1f:10:84:00:34:f2:8d:4a:f9:74:60:00:f7:85:9f:
bf:72:0f:9c:b7:0f:a8:67:e2:7a:56:57:2a:aa:e0:7c:ef:d9:
e3:5f:a9:72:ab:21:a5:1b:68:94:20:66:2a:2a:5b:13:69:55:
1d:87:97:24:61:28:e3:e3:a7:ad:ee:c1:f1:1b:ce:c1:b7:02:
0d:75:51:46:d1:99:bc:5f:4b:36:21:61:d0:93:68:d0:a3:b7:
2d:6c:0e:97:74:b0:82:9c:16:bc:c1:7f:29:0e:73:0a:c6:39:
c1:d2:0e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:27:57 2026 by rpki-client