
$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/25E1EFBE6EC511F1A3670E6068A30FBC.roa
File: 25E1EFBE6EC511F1A3670E6068A30FBC.roa (raw, json)
Hash identifier: KYF6dD70RTWq4NYrTSdRtMjFqIz6MKhrvVtS6feLY2k=
Subject key identifier: 61:CA:2F:73:78:01:64:97:9D:6E:C4:E1:C8:C0:98:F5:8D:30:15:45
Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial: 0101
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/25E1EFBE6EC511F1A3670E6068A30FBC.roa
Signing time: Tue 23 Jun 2026 05:34:05 +0000
ROA not before: Tue 23 Jun 2026 05:34:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 2764
IP address blocks: 203.21.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Validity
Not Before: Jun 23 05:34:05 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a3a1acd-7ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:13:98:5f:6b:f9:ee:77:eb:6f:70:cf:5f:
d7:b0:36:54:69:0b:15:49:f2:81:39:eb:16:a2:04:
f3:1c:55:75:e1:05:86:60:b9:4b:0a:a6:e2:4b:6a:
fc:88:86:40:a7:21:24:3c:20:35:69:6b:7d:59:29:
23:0d:df:7e:ab:d3:42:93:1f:29:5a:a0:02:fb:68:
c3:22:e8:04:c9:49:46:38:bf:0c:52:5d:98:01:4f:
42:58:51:ae:ec:b5:b5:7f:bb:98:1f:d4:3d:9f:1f:
81:06:b8:33:e7:4d:08:79:35:0d:07:30:eb:4a:1a:
55:29:cb:c1:6d:ad:ea:1f:bf:f6:0f:85:cd:7f:a7:
b7:c6:77:49:f0:5c:3b:47:46:6b:89:12:45:46:eb:
37:c7:92:66:c3:39:b4:87:5d:40:60:9f:ac:fe:b2:
12:fc:75:2c:c8:ce:7e:0b:e0:f1:b4:6b:3d:93:73:
c0:ce:52:91:8e:c9:fe:97:32:c7:6e:2e:1d:7f:89:
34:cb:6d:20:3b:fd:0e:13:c4:e6:7b:fa:b3:55:59:
1f:80:fa:34:20:66:10:8e:ee:90:86:5f:cb:7f:15:
1f:d5:18:df:a1:48:f8:8e:79:cd:19:d1:fc:e0:16:
75:29:b1:00:f6:3f:da:24:78:67:80:1b:18:8a:42:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:2F:73:78:01:64:97:9D:6E:C4:E1:C8:C0:98:F5:8D:30:15:45
X509v3 Authority Key Identifier:
keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/25E1EFBE6EC511F1A3670E6068A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.21.15.0/24
Signature Algorithm: sha256WithRSAEncryption
70:04:dd:41:3b:0a:2d:63:ea:4c:40:6c:40:e9:1d:c3:cd:11:
80:d9:14:72:74:e7:a7:b3:b2:2c:00:5d:4a:1e:0a:32:57:e7:
8a:8e:01:05:41:79:d2:c2:d8:cc:48:d0:10:42:18:83:75:00:
df:97:51:5f:6b:34:d0:09:1f:9f:34:05:d5:25:74:f4:00:88:
ee:c0:13:99:65:1b:63:bc:5f:52:2d:c0:fd:03:d6:63:44:78:
17:a4:e9:70:8e:f4:ed:7d:aa:b7:b2:a5:e4:5f:85:09:dc:8e:
7b:f7:e7:c4:83:be:f3:38:6f:31:7e:9b:08:f4:71:b7:0c:88:
ce:64:55:0a:88:86:d9:e8:72:08:b5:70:39:6d:51:90:8f:90:
24:8d:54:1a:6f:8d:fb:66:18:c7:8f:b0:03:e0:1f:36:49:5c:
ae:b7:fa:f8:71:b1:28:72:91:3b:79:90:dd:40:99:61:7a:67:
21:ea:4c:c1:42:e0:57:7b:e5:63:74:8e:25:a9:3b:8d:f1:99:
4b:64:f3:d3:fd:2f:15:e8:3c:86:f0:72:56:39:af:e1:16:ae:
13:d1:58:83:bd:12:13:d9:67:b9:5a:c9:aa:62:5d:aa:42:07:
98:c1:3f:8c:f1:81:2e:1a:fd:28:3c:87:8c:53:4b:f3:32:2d:
8c:07:f9:36
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIwMUQxMTAvBgNVBAUTKERCMUI5NkUwNUE5OEQ4MjhCRjU3RUEwQTcxNTVBRjFE
MzMyMjNFMkMwHhcNMjYwNjIzMDUzNDA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNhMWFjZC03Y2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt5oTmF9r+e53629wz1/XsDZUaQsVSfKBOesWogTzHFV14QWGYLlLCqbiS2r8
iIZApyEkPCA1aWt9WSkjDd9+q9NCkx8pWqAC+2jDIugEyUlGOL8MUl2YAU9CWFGu
7LW1f7uYH9Q9nx+BBrgz500IeTUNBzDrShpVKcvBba3qH7/2D4XNf6e3xndJ8Fw7
R0ZriRJFRus3x5Jmwzm0h11AYJ+s/rIS/HUsyM5+C+DxtGs9k3PAzlKRjsn+lzLH
bi4df4k0y20gO/0OE8Tme/qzVVkfgPo0IGYQju6Qhl/LfxUf1RjfoUj4jnnNGdH8
4BZ1KbEA9j/aJHhngBsYikJNMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGHKL3N4
AWSXnW7E4cjAmPWNMBVFMB8GA1UdIwQYMBaAFNsbluBamNgov1fqCnFVrx0zIj4s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjAxRC84NUI4QzI5MDAz
RjExMUYwQUI4NUVDNTJDNEY5QUUwMi8yeHVXNEZxWTJDaV9WLW9LY1ZXdkhUTWlQ
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBpdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTIwMUQvODVCOEMyOTAwM0YxMTFGMEFCODVFQzUyQzRGOUFFMDIvMjVFMUVGQkU2
RUM1MTFGMUEzNjcwRTYwNjhBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxUPMA0GCSqGSIb3DQEBCwUAA4IBAQBwBN1BOwotY+pMQGxA6R3D
zRGA2RRydOens7IsAF1KHgoyV+eKjgEFQXnSwtjMSNAQQhiDdQDfl1FfazTQCR+f
NAXVJXT0AIjuwBOZZRtjvF9SLcD9A9ZjRHgXpOlwjvTtfaq3sqXkX4UJ3I579+fE
g77zOG8xfpsI9HG3DIjOZFUKiIbZ6HIItXA5bVGQj5AkjVQab437ZhjHj7AD4B82
SVyut/r4cbEocpE7eZDdQJlhemch6kzBQuBXe+VjdI4lqTuN8ZlLZPPT/S8V6DyG
8HJWOa/hFq4T0ViDvRIT2We5WsmqYl2qQgeYwT+M8YEuGv0oPIeMU0vzMi2MB/k2
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:57 2026 by rpki-client