
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
File: 15F2CAD0D0AD11F08058D727C4F9AE02.roa (raw, json)
Hash identifier: YLMA9nTAlWfeJbokNuZSOeyCNtPrV//prQQ6jsVgAzw=
Subject key identifier: 4A:C6:E2:09:A8:EC:B1:00:B7:8A:56:37:A0:B7:17:38:49:76:F4:17
Certificate issuer: /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial: 0222
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:57:42 +0000
ROA not before: Thu 04 Dec 2025 01:03:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134143
IP address blocks: 157.85.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Validity
Not Before: Dec 4 01:03:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a453e6-56b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:40:ae:e0:cf:88:34:5b:85:f9:9d:fa:b7:
cb:cf:b6:46:99:9c:fc:9a:c9:b7:b2:71:fe:ac:b3:
bd:8d:7a:86:9e:ad:bb:fd:94:f2:29:c4:4d:f7:8d:
a8:02:1b:90:77:7b:64:4d:a2:3c:22:72:16:1a:e1:
b1:be:7d:b0:69:8b:25:66:f4:3a:fd:24:04:63:bc:
0b:6d:21:e0:6f:1f:37:bd:a6:36:60:49:b0:76:5f:
c9:b3:0a:de:6a:46:ed:79:e4:f4:a2:04:d6:35:f6:
e1:d7:4b:ab:18:a4:36:aa:65:de:a8:34:2c:a6:0a:
3f:04:57:e9:66:b3:67:fa:45:5d:8b:32:55:38:3d:
77:f0:bd:70:26:ec:85:df:46:4f:ea:74:66:9a:a9:
3b:ef:94:7c:27:04:3b:7d:f7:3b:10:72:77:b2:4f:
85:b8:45:07:b2:03:06:7c:0a:5b:4c:10:5a:e9:74:
44:17:f3:8f:ef:bf:96:53:3e:a4:d8:2d:5b:c1:1e:
3c:bb:69:3e:28:eb:d9:c7:c8:7e:89:1a:6c:69:18:
5f:29:e4:95:da:a7:a9:df:38:32:b4:7b:9b:2a:95:
1a:95:f3:cb:10:69:d9:64:4d:d7:21:32:0e:a3:cd:
df:6f:80:47:e5:90:4a:8c:77:f6:f6:12:83:01:d9:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C6:E2:09:A8:EC:B1:00:B7:8A:56:37:A0:B7:17:38:49:76:F4:17
X509v3 Authority Key Identifier:
keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.85.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:f8:2f:52:be:1e:a2:0c:1a:7b:2d:39:c6:21:bc:f0:d9:1b:
30:e5:3c:6f:ff:5d:5d:3b:8d:31:f9:26:df:ba:aa:58:8b:9b:
db:16:86:4a:36:4b:a9:e6:20:37:bf:b2:53:c1:5f:4e:5d:ae:
97:8f:15:60:ca:b5:d1:04:f9:cc:d7:59:87:33:d1:96:6f:0f:
ac:ff:90:d2:c4:3f:87:57:36:6c:b2:d3:5d:62:6d:40:00:f8:
6f:8e:be:62:98:4a:28:53:2c:7b:ce:a8:a4:4e:00:9d:1a:bb:
c3:f1:0b:6f:42:27:e3:60:b7:9f:27:7f:96:0b:da:82:31:56:
d2:2d:a4:55:5a:ba:c2:81:c9:6d:1b:7e:99:65:59:24:a1:56:
62:65:4f:6f:24:0c:ae:bc:d2:8a:b5:1c:60:b1:b2:11:fd:4c:
1c:4f:b7:c6:19:d2:3b:38:af:1b:79:41:12:4e:a0:86:d4:e3:
30:f0:3a:0c:20:a0:aa:d6:48:ad:31:fa:a3:87:66:e8:fe:6f:
40:f0:04:4d:70:34:96:82:d6:fa:be:8a:ac:53:e7:5f:2f:8a:
51:5a:43:c4:09:cd:b4:34:f0:5a:7c:be:83:5d:34:79:d8:ef:
f3:3a:e7:75:b4:9c:63:cb:89:11:26:11:6f:8b:57:d5:e2:a5:
77:dd:55:0e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc1NzgxMTAvBgNVBAUTKDlGRTAwQzE5Q0UwQjhGOTZFQ0Y4OUEzNTdGN0QxQUY1
NThGOTZGRjUwHhcNMjUxMjA0MDEwMzQ3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTNlNi01NmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1uFAruDPiDRbhfmd+rfLz7ZGmZz8msm3snH+rLO9jXqGnq27/ZTyKcRN942o
AhuQd3tkTaI8InIWGuGxvn2waYslZvQ6/SQEY7wLbSHgbx83vaY2YEmwdl/Jswre
akbteeT0ogTWNfbh10urGKQ2qmXeqDQspgo/BFfpZrNn+kVdizJVOD138L1wJuyF
30ZP6nRmmqk775R8JwQ7ffc7EHJ3sk+FuEUHsgMGfApbTBBa6XREF/OP77+WUz6k
2C1bwR48u2k+KOvZx8h+iRpsaRhfKeSV2qep3zgytHubKpUalfPLEGnZZE3XITIO
o83fb4BH5ZBKjHf29hKDAdmirQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFErG4gmo
7LEAt4pWN6C3FzhJdvQXMB8GA1UdIwQYMBaAFJ/gDBnOC4+W7PiaNX99GvVY+W/1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC82NzAwNThCNERG
RjgxMUVEOTUxNTNEMzFDNEY5QUUwMi9uLUFNR2M0TGo1YnMtSm8xZjMwYTlWajVi
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL24tQU1HYzRMajVicy1KbzFmMzBhOVZqNWJfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDc1NzgvNjcwMDU4QjRERkY4MTFFRDk1MTUzRDMxQzRGOUFFMDIvMTVGMkNBRDBE
MEFEMTFGMDgwNThENzI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDnVVIMA0GCSqGSIb3DQEBCwUAA4IBAQCn+C9Svh6iDBp7LTnGIbzw
2Rsw5Txv/11dO40x+SbfuqpYi5vbFoZKNkup5iA3v7JTwV9OXa6XjxVgyrXRBPnM
11mHM9GWbw+s/5DSxD+HVzZsstNdYm1AAPhvjr5imEooUyx7zqikTgCdGrvD8Qtv
QifjYLefJ3+WC9qCMVbSLaRVWrrCgcltG36ZZVkkoVZiZU9vJAyuvNKKtRxgsbIR
/UwcT7fGGdI7OK8beUESTqCG1OMw8DoMIKCq1kitMfqjh2bo/m9A8ARNcDSWgtb6
voqsU+dfL4pRWkPECc20NPBafL6DXTR52O/zOud1tJxjy4kRJhFvi1fV4qV33VUO
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:53 2026 by rpki-client