
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
File: A1456A4CBE6811EEBFF35870C4F9AE02.roa (raw, json)
Hash identifier: bmD/DsE+tY3JlHkV3Sz9uaxYc6XsX1W6cL8D8Zq/OGo=
Subject key identifier: 25:DB:D7:35:CC:10:AF:C7:92:EF:80:3B:0D:C7:0F:2E:32:6E:0B:4D
Certificate issuer: /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial: 0202
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
Signing time: Sat 03 Oct 2026 04:52:10 +0000
ROA not before: Sat 03 Oct 2026 04:52:10 +0000
ROA not after: Mon 01 Feb 2027 00:00:00 +0000
asID: 152447
IP address blocks: 157.15.52.0/23 maxlen: 23
157.15.52.0/24 maxlen: 24
157.15.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Validity
Not Before: Oct 3 04:52:10 2026 GMT
Not After : Feb 1 00:00:00 2027 GMT
Subject: CN=6ac089f9-73ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:be:a8:17:8a:4f:dc:53:26:d1:bd:22:81:
45:2b:fe:cf:df:37:2c:b2:69:90:eb:bd:a6:7e:f3:
95:e5:e8:73:3a:fc:b0:18:9a:92:c3:93:a5:41:8e:
af:84:ce:f0:55:35:df:32:42:5d:ec:cb:6a:12:2f:
63:1a:82:90:38:33:7b:03:69:6d:3b:6b:c0:84:a9:
09:87:3d:78:db:f5:f0:81:39:ea:b9:17:b3:4e:41:
ab:f4:57:83:6f:a3:d6:10:ee:ec:56:d0:c6:7b:d2:
fa:62:23:13:74:6b:41:c8:e3:a7:d3:99:2b:be:cc:
da:d4:bc:e8:98:ad:6a:1a:b7:d9:82:d3:17:a2:d7:
21:a9:c3:b2:57:90:c5:ad:d8:a2:19:8e:fb:48:11:
e0:c6:94:61:14:90:b9:97:c8:72:06:d2:7f:d2:a8:
a3:1e:5c:c1:9e:26:d0:af:90:c0:3e:ab:2d:95:54:
5e:ee:bf:4e:8a:34:da:d3:f8:77:ad:db:c7:d3:b8:
4d:d0:f3:7b:76:18:3d:06:94:74:93:d6:b2:3c:be:
b8:ad:94:fe:e9:f1:a8:0f:1b:d5:31:fc:f2:6b:28:
b0:a5:12:b6:a4:eb:92:ae:df:73:91:f0:cc:64:a0:
a7:2b:6f:3e:34:fd:53:63:34:f8:2a:e3:56:ca:6d:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:D7:35:CC:10:AF:C7:92:EF:80:3B:0D:C7:0F:2E:32:6E:0B:4D
X509v3 Authority Key Identifier:
keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c9:4d:20:d3:ba:08:eb:18:a3:e1:63:f3:e9:28:bb:1e:b9:
cb:78:8b:0e:ad:af:22:59:ed:a2:e3:d4:60:42:4b:f3:fb:6d:
38:e9:ca:7b:a0:c5:53:75:68:65:a3:09:c7:d7:3d:be:48:a1:
a8:48:63:0c:80:31:72:e9:45:39:11:86:d9:a4:13:5c:6a:40:
8a:d2:e9:d4:3f:2c:6d:f0:ac:dc:33:05:00:f0:3d:33:b1:0a:
c7:7b:93:9c:6d:41:3d:76:fa:ae:f5:88:94:e4:79:5e:fc:6a:
17:74:9d:f3:b7:c7:ee:fc:8f:a1:f1:ea:17:97:5f:7f:02:76:
1e:46:4a:65:07:0d:8a:dd:63:74:c9:b3:b3:c6:76:df:eb:61:
3f:69:34:b7:31:99:b9:62:29:42:2d:4d:0c:28:dd:bc:3b:80:
fa:47:9c:be:ea:a3:d1:b9:9b:4b:3a:6c:9c:fa:b3:5f:72:9c:
33:43:1b:75:a0:ef:2e:47:56:13:1b:de:b7:a4:cc:30:e5:fd:
b0:6d:02:49:95:e4:21:b3:72:5b:cb:74:7b:33:7c:03:a7:66:
33:3c:ec:64:2a:99:e3:b2:50:df:76:30:d5:1b:37:d1:dd:01:
50:6c:8a:25:ac:f9:67:32:2f:b9:81:0b:09:12:50:7f:e3:3b:
df:99:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:33:48 2026 by rpki-client