
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/158B72F480FB11ED9B35954DC4F9AE02.roa
File: 158B72F480FB11ED9B35954DC4F9AE02.roa (raw, json)
Hash identifier: vCFJH0y2zLT6RtNl1fKrvOFGF6otZx/dSySN5y76muE=
Subject key identifier: FE:7A:32:CB:0C:A8:64:95:DD:05:C4:8B:81:17:19:A1:13:66:FF:2E
Certificate issuer: /CN=A919EA40/serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Certificate serial: 0269
Authority key identifier: B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/158B72F480FB11ED9B35954DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:56:54 +0000
ROA not before: Thu 27 Nov 2025 00:47:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 58611
IP address blocks: 192.94.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EA40, serialNumber=B6CA74E0175D67E1AEBE86BFE38C5C898F262B8C
Validity
Not Before: Nov 27 00:47:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43795-3196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:fa:67:ef:f1:b3:e2:25:cd:07:17:a4:63:
b7:e8:25:d4:05:d5:85:91:0b:0a:e3:f4:57:4c:59:
29:09:17:09:70:a3:f5:13:df:22:1e:4c:ea:bb:5e:
a9:6e:46:2b:f9:a6:a1:52:9d:19:07:ae:ee:1a:db:
38:5a:4c:89:4c:6a:30:74:07:bd:8c:91:1e:9a:e3:
f8:75:96:68:e0:03:8e:6c:67:c5:4e:d5:ed:26:ef:
6a:56:9d:3f:9c:27:38:b1:cc:b9:1c:e8:b0:af:97:
e1:4d:8a:1a:93:9f:80:d4:93:01:2e:3c:51:cc:90:
31:f7:b1:0b:9f:4b:71:8c:8a:54:f6:c1:01:02:e1:
3d:1d:8d:bd:e7:a3:a2:f4:b1:d8:dc:23:b6:e2:dd:
81:78:1f:33:58:70:37:88:e1:d1:73:6d:a9:ee:b6:
40:4d:70:5f:b2:b1:7b:84:6e:33:a1:b4:94:60:53:
d8:96:ef:46:86:11:00:0e:d9:98:7d:aa:7b:3a:64:
a0:9f:e2:2f:d4:f3:3f:48:81:a7:9e:d3:26:31:f6:
67:b7:38:27:53:62:58:ee:7b:f3:50:c5:63:16:b7:
0d:e2:e4:ca:60:ac:8e:bc:69:fc:52:3c:00:75:7a:
04:10:f2:47:c1:44:da:fc:7a:2d:0a:bd:5d:2f:54:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:32:CB:0C:A8:64:95:DD:05:C4:8B:81:17:19:A1:13:66:FF:2E
X509v3 Authority Key Identifier:
keyid:B6:CA:74:E0:17:5D:67:E1:AE:BE:86:BF:E3:8C:5C:89:8F:26:2B:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/tsp04BddZ-Guvoa_44xciY8mK4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tsp04BddZ-Guvoa_44xciY8mK4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA40/4906F2A880F011EDAAE48F7BC4F9AE02/158B72F480FB11ED9B35954DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.94.208.0/24
Signature Algorithm: sha256WithRSAEncryption
33:63:33:06:a0:79:f5:18:4b:82:d1:80:3d:e4:61:a6:28:1a:
ec:97:04:6e:ad:35:82:5a:e0:8a:82:c4:02:c9:a5:5d:66:75:
15:ba:03:2b:ef:47:86:78:fb:31:65:3d:2b:aa:c0:98:23:76:
fe:93:26:74:f4:7f:3f:f7:ad:2e:7b:2d:1f:d3:22:b1:02:81:
c2:46:09:fc:15:8f:7b:bd:52:d6:57:23:3d:cf:80:04:12:91:
1f:f5:c2:2b:f5:02:4a:ae:75:85:1f:b2:1e:96:03:c0:e8:22:
36:53:7c:a8:ce:08:f2:f9:14:a2:53:47:56:f0:99:4c:64:32:
75:85:55:30:6f:2a:bc:dd:cc:77:a2:44:46:1a:09:f7:79:ac:
db:2a:26:47:26:61:24:9a:c2:41:21:f5:9b:18:fe:b0:57:21:
6a:80:64:5c:b8:31:de:66:0f:80:1a:47:3d:8d:59:84:3f:4f:
66:23:e8:00:50:75:f1:81:3e:76:67:4d:0f:76:84:35:6a:3b:
16:b5:d5:9d:2b:f8:6b:6c:bc:75:09:47:4a:fe:66:91:a1:75:
85:a4:8b:40:43:72:7e:47:de:a0:8e:c1:76:dc:38:03:a9:fb:
94:51:4c:db:ab:63:35:73:f1:cf:b0:8c:be:05:34:b1:25:d2:
4c:a7:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:10:41 2026 by rpki-client