
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/C19C2720CA2711EE82C12B0CC4F9AE02.roa
File: C19C2720CA2711EE82C12B0CC4F9AE02.roa (raw, json)
Hash identifier: umLP2ipjzrn27HsxfsR6cmYxOOEjkmgBD9Z5UkidCXY=
Subject key identifier: 3F:C9:8D:62:CD:63:E2:29:E6:14:0A:03:2D:F2:33:4F:98:00:7C:B9
Certificate issuer: /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Certificate serial: 01F7
Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/C19C2720CA2711EE82C12B0CC4F9AE02.roa
Signing time: Thu 01 Oct 2026 04:52:31 +0000
ROA not before: Thu 01 Oct 2026 04:52:31 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136582
IP address blocks: 157.15.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl
rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Validity
Not Before: Oct 1 04:52:31 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abde70f-aed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:ed:f0:02:f1:38:e6:0a:16:ad:50:18:a4:
55:14:ab:b5:a3:c0:20:37:15:41:90:06:e6:55:fe:
ed:e9:6a:99:d3:38:3e:c0:bd:43:45:5f:ea:25:0d:
2c:18:2b:b8:54:78:19:b5:20:8b:c1:77:97:d1:73:
48:69:da:4d:05:ba:cf:2a:f5:8a:7b:72:e8:9d:e8:
0c:1c:6b:93:6f:1b:65:60:3b:1f:b2:c3:78:90:65:
8d:15:24:fc:bb:9d:8c:60:16:e6:db:6d:69:55:de:
ce:aa:a4:04:93:82:f7:13:ea:91:a0:89:fe:c4:64:
15:c2:23:72:22:a5:dd:e2:4f:b5:ec:6c:d4:cb:04:
e8:62:96:11:82:b1:3e:28:7f:41:7d:d6:c9:91:70:
3c:5d:c8:d1:63:31:a2:9c:32:2a:54:22:8e:88:2a:
37:37:28:cc:4e:67:f2:66:e7:6e:66:08:e5:3d:91:
39:98:39:20:dd:cf:0f:71:8c:d5:1a:4c:5f:1f:f6:
c4:2f:b0:1b:97:87:28:e9:f6:a0:51:ce:fc:6f:f5:
90:d5:59:b1:3c:49:d2:b6:08:94:2b:8a:3b:dd:50:
0b:83:87:75:e1:4b:a0:49:94:1d:3f:10:5c:7d:61:
36:da:4d:8e:be:da:d0:21:d3:bb:1a:77:98:d6:52:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:8D:62:CD:63:E2:29:E6:14:0A:03:2D:F2:33:4F:98:00:7C:B9
X509v3 Authority Key Identifier:
keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/C19C2720CA2711EE82C12B0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:29:99:f9:bf:d8:22:3b:c3:18:1b:7b:aa:42:14:80:6c:66:
e3:f5:fc:94:14:7c:79:57:45:84:8d:45:77:f7:2d:96:61:75:
2d:c9:d7:af:d8:76:af:23:b5:48:0a:42:62:bc:55:84:1c:04:
25:70:25:c8:ab:c2:fb:16:22:a7:be:4b:96:b1:d6:b2:33:d6:
e4:8a:df:83:9d:4a:2d:d6:32:54:7b:60:f8:0a:17:40:f1:f3:
a4:28:48:7a:38:dd:d0:1e:99:2e:f2:ad:02:3e:de:3a:36:96:
0c:1f:2f:7d:3d:06:10:29:12:e4:43:55:03:69:f4:d8:78:e0:
d6:c5:27:7a:b9:ff:49:72:d6:90:29:63:7f:d0:7f:d6:dc:9a:
e1:f5:e0:6e:34:93:fc:5f:ce:6f:fd:43:c3:13:48:e3:f3:2c:
67:31:36:b5:22:5e:e4:a5:d3:34:83:c1:3b:33:4a:dd:89:73:
5c:e1:d2:13:fb:43:61:78:ff:b3:cb:21:89:ef:16:fc:83:30:
2d:5d:6f:9e:1b:a1:ba:30:00:09:c1:d9:46:64:05:34:95:bf:
c0:ec:3c:70:c3:32:6c:c0:88:61:71:a0:35:7d:3b:d6:05:82:
15:f4:73:44:07:31:73:77:dc:3a:94:f4:d1:21:d0:19:d5:e8:
fc:38:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:16:13 2026 by rpki-client