
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CC5EE982BE7D11EE8F88D929C4F9AE02.roa
File: CC5EE982BE7D11EE8F88D929C4F9AE02.roa (raw, json)
Hash identifier: F/ChW4YMtJlLbVt9QiYBeM767cFmTgjgjnI4MRe/GJg=
Subject key identifier: 91:1D:7C:64:D6:21:1B:CC:CC:11:0F:4E:FE:76:54:5F:E2:0C:97:AF
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2BF7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CC5EE982BE7D11EE8F88D929C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:44:46 +0000
ROA not before: Thu 08 May 2025 15:53:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151737
IP address blocks: 157.15.24.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11255 (0x2bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:53:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c15e-1efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:f5:c0:38:5b:43:6c:84:d9:69:e9:ee:8a:
70:ba:02:96:3f:cd:d2:fa:d4:47:f6:c3:a6:49:66:
cb:0d:d1:d7:af:c9:c7:2b:1f:3d:e0:4d:e8:90:27:
72:60:1d:ba:19:be:b5:7f:27:0c:ed:d7:26:41:97:
f6:c3:d1:8d:85:e4:9f:7c:12:7b:0b:e4:a3:ef:ae:
f1:a3:c3:c9:b4:9f:d9:f4:90:2e:de:ce:2e:6e:6b:
bc:a3:80:5e:cd:16:7b:8d:03:63:be:04:e6:b8:74:
7a:57:33:38:5e:f1:35:f0:88:fe:ac:60:11:98:a4:
3e:b3:0e:23:58:9a:3b:e9:94:c3:40:08:19:3d:c5:
62:93:ca:4c:4c:a0:91:9a:90:7f:aa:74:60:72:a8:
d7:13:c8:67:07:64:6e:1f:10:1e:32:52:2f:9d:b6:
ad:ef:87:60:d3:51:21:4a:43:ba:b4:dc:ad:6c:ed:
cf:8d:80:49:fb:b3:ad:ea:3f:a9:70:0a:27:de:b5:
9a:2c:cb:8a:3b:2f:b6:ea:b7:cf:db:b1:2b:51:be:
45:46:f8:8a:55:aa:70:a8:62:7d:fa:3e:02:a9:29:
1c:d4:5c:7d:48:49:10:7e:0a:19:fe:70:f4:6f:19:
64:61:57:98:4f:f2:30:8a:ec:25:fd:3f:7e:1f:8e:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1D:7C:64:D6:21:1B:CC:CC:11:0F:4E:FE:76:54:5F:E2:0C:97:AF
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CC5EE982BE7D11EE8F88D929C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.24.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a2:54:ef:34:b1:e2:45:01:09:d2:6c:0b:97:b2:6d:31:cb:
11:4f:71:a5:c1:6e:08:ba:e1:a7:cf:fb:7f:00:18:4b:d6:5a:
fc:ac:b8:3b:9c:fd:12:5b:d0:bb:57:1a:b3:73:48:d7:c1:0b:
90:0c:fe:57:cf:2e:3c:a5:0a:c0:1a:68:50:8f:61:1a:c5:44:
1f:55:bb:78:1c:1c:01:5e:bc:be:d4:da:8d:d7:08:7f:bf:20:
92:6e:24:52:c6:90:79:29:e4:16:2c:de:8f:32:13:a0:27:7a:
b0:9b:0d:b8:54:01:85:e9:ea:4e:89:82:8c:6a:d5:95:50:9d:
bd:8b:ce:cb:82:c9:37:97:46:3f:f1:7c:c9:3a:62:f2:3a:a8:
ff:80:34:6e:c6:c7:bc:9c:ea:62:05:a3:d2:f2:4c:3e:b4:88:
d5:b5:da:98:6d:1d:a2:21:ed:46:b0:96:aa:0f:86:ee:c7:f3:
2d:ea:70:18:5a:65:6c:53:98:01:ec:b7:00:d8:9b:3e:f5:07:
57:cc:72:38:0c:53:c1:fe:ba:f1:92:48:c3:2d:15:57:49:f3:
5c:4e:6a:7d:66:f7:b0:21:da:5b:c7:b2:02:5a:b1:b4:43:3f:
18:23:fc:fb:db:9a:e0:71:b7:5a:f7:f4:95:1a:ba:43:69:b9:
df:20:67:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:49 2026 by rpki-client