
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/31B5D564824311EF9C69B985C4F9AE02.roa
File: 31B5D564824311EF9C69B985C4F9AE02.roa (raw, json)
Hash identifier: Knq7mPgwxf1HL8ot5q7Zkq7MLTldBY8X68prOBrPHwU=
Subject key identifier: F2:C5:F8:3C:F7:59:6F:A6:0A:3E:E3:02:D1:BE:B1:9C:5B:E2:63:B3
Certificate issuer: /CN=A9142E1E/serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A
Certificate serial: 011D
Authority key identifier: 1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/31B5D564824311EF9C69B985C4F9AE02.roa
Signing time: Mon 23 Mar 2026 05:42:01 +0000
ROA not before: Mon 23 Mar 2026 05:42:01 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152465
IP address blocks: 157.15.188.0/24 maxlen: 24
157.15.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl
rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142E1E, serialNumber=1BDEB0C275C90E81BFA3AAFE213E4E7121EB734A
Validity
Not Before: Mar 23 05:42:01 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c0d2a9-cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:ec:4f:ea:32:b0:a8:fe:44:bc:6c:4c:c6:
c8:eb:bd:a8:ea:c8:8c:6f:01:2c:41:63:23:65:ff:
47:9f:cb:24:62:32:15:e6:a9:6d:ff:3c:04:1c:88:
0d:08:7b:4a:31:02:c9:58:06:58:5e:84:8a:14:59:
0a:6e:be:d4:98:44:fd:d9:a0:ff:63:3e:53:3c:78:
b5:62:53:89:fc:7c:43:e9:66:7d:0a:a1:31:32:e2:
aa:36:51:0a:27:d7:0f:ad:4f:85:ef:0b:76:7b:61:
73:4f:bf:b1:90:58:d0:ea:92:ed:61:80:be:8a:1a:
c9:cd:a8:6b:28:49:15:32:be:cc:b3:c5:d3:99:5d:
bc:4e:5d:9c:c5:ca:16:97:44:00:cf:8c:78:04:be:
5a:e7:81:24:d3:64:34:ba:83:81:d9:5f:d0:49:e7:
16:aa:d1:b6:a9:12:dd:cb:dd:b1:bb:f9:6a:61:8f:
90:29:9d:9c:f4:07:98:9a:f3:b5:9b:18:4f:a0:f1:
68:62:3b:3d:74:9e:d2:56:45:d2:0b:61:03:b6:10:
a9:ca:12:06:64:0a:ef:25:1e:c6:f8:08:8f:cb:32:
6c:e4:81:72:8f:94:d2:c5:5d:eb:30:48:4e:59:a0:
41:6e:64:3a:3a:e8:34:07:9a:ce:ab:56:b0:5e:b2:
84:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:F8:3C:F7:59:6F:A6:0A:3E:E3:02:D1:BE:B1:9C:5B:E2:63:B3
X509v3 Authority Key Identifier:
keyid:1B:DE:B0:C2:75:C9:0E:81:BF:A3:AA:FE:21:3E:4E:71:21:EB:73:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/G96wwnXJDoG_o6r-IT5OcSHrc0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G96wwnXJDoG_o6r-IT5OcSHrc0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142E1E/13D80608824211EFAD3D8181C4F9AE02/31B5D564824311EF9C69B985C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.188.0/23
Signature Algorithm: sha256WithRSAEncryption
91:0b:60:ed:48:22:33:3a:7b:c1:4b:fa:9f:8c:c9:57:50:ce:
43:11:47:45:ed:db:99:0b:0a:f1:09:f3:e9:f4:b9:46:3f:84:
d2:03:bb:81:0f:d2:f3:62:f2:ef:97:0c:50:96:50:b4:1c:ba:
f1:d9:fc:b9:2d:d6:ce:74:6f:07:72:37:ec:a0:cb:aa:fa:90:
98:7e:c8:e7:b8:db:32:18:41:a6:3d:33:4f:09:2b:ca:63:47:
36:25:00:19:68:0e:80:7d:47:f4:4e:28:20:cd:5b:1c:65:8f:
96:ca:5c:90:58:da:a3:00:4e:da:fa:5b:8c:56:e3:f6:1f:fa:
4f:44:a5:e4:20:68:26:51:80:33:92:80:f5:98:c0:a5:e2:bb:
00:ec:90:f7:d6:c3:66:dd:d0:b7:6b:ff:c2:12:e9:ba:f4:21:
aa:65:e2:c1:d4:7d:57:32:72:1d:03:6d:f0:b3:41:fa:6f:4a:
0d:18:a2:b8:94:2c:4f:4b:7e:bc:7f:91:bc:ba:a3:d0:2f:41:
74:b4:0e:77:ef:ac:73:88:e7:47:78:11:a6:0c:be:f1:0e:0e:
5d:3b:79:a7:45:14:20:da:dc:25:b2:8c:bc:05:61:40:a2:b6:
55:98:18:c4:6a:77:28:79:84:1d:a8:e9:a3:03:97:8e:b9:b2:
f0:7a:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:27 2026 by rpki-client