
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
File: D4BAE68E853311F0AC0D4852C4F9AE02.roa (raw, json)
Hash identifier: mkKRrEx4tGN1QjkcXuh0je4kn3RhkHgRAfuqQaJKd/w=
Subject key identifier: 15:96:7F:EF:72:AB:BF:9F:1E:73:6B:11:A2:22:D7:F2:DB:46:7C:1A
Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial: 01AA
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
Signing time: Thu 29 Oct 2026 05:52:48 +0000
ROA not before: Thu 29 Oct 2026 05:52:48 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 141342
IP address blocks: 160.30.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Validity
Not Before: Oct 29 05:52:48 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ae2df30-bab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:97:8c:c1:fc:fc:c2:84:a5:7d:67:13:5b:
02:6e:56:a7:2a:97:5a:89:72:15:44:94:28:d1:2b:
ba:91:8a:02:47:27:7d:bd:a4:51:ee:d8:61:c9:88:
1e:3b:6b:e0:3e:75:b6:0d:97:bb:39:07:3f:d5:7e:
8f:8a:9b:bb:7b:00:55:d2:9e:05:9f:1f:97:8a:f5:
42:ba:d7:da:b6:6f:f8:3e:64:df:0b:a9:cf:bc:0c:
10:de:57:0b:ac:ec:15:08:be:c9:41:fe:8d:65:8b:
35:2c:96:f8:66:30:f9:f0:75:e5:5d:a9:6b:69:c6:
d3:59:86:e2:08:e8:e7:fb:0b:ee:53:89:2c:15:1a:
e1:70:b9:07:23:6b:5f:42:89:51:ca:aa:71:5f:4c:
0d:02:3a:43:c1:91:45:07:80:b0:f6:5c:77:fc:9e:
a8:c2:59:78:45:df:99:0c:40:e3:c4:af:a6:ff:ab:
65:94:94:aa:92:fd:5b:09:bc:fa:4e:5a:66:ae:56:
0f:7a:78:81:4e:24:cd:7b:22:8a:be:44:8d:ce:32:
b2:2d:58:25:fe:fa:05:35:6b:99:c2:d5:22:d6:e7:
9c:39:c7:ae:4f:e2:e6:f2:a0:52:c6:d1:37:22:0e:
14:96:02:64:2f:54:ec:e4:a8:c7:09:9a:40:d3:29:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:7F:EF:72:AB:BF:9F:1E:73:6B:11:A2:22:D7:F2:DB:46:7C:1A
X509v3 Authority Key Identifier:
keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.237.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a9:b6:35:ec:62:18:db:1d:a5:50:e6:4f:df:27:74:c9:79:
9b:32:13:35:08:76:84:71:07:c2:5b:9d:6a:a3:43:a3:85:fe:
be:4e:3a:4a:b2:09:7b:db:08:17:13:48:81:58:13:5f:b4:63:
66:86:17:c5:65:14:1a:43:a2:f4:47:c1:74:2b:60:cf:15:ea:
11:f8:7d:e0:45:d0:6a:3f:1d:fe:f1:46:f5:3d:61:20:8c:13:
2d:35:23:26:70:16:f6:a1:a2:19:57:76:d8:86:9a:e8:0e:4c:
25:e0:69:da:97:eb:cd:af:b3:39:43:f6:a4:ce:d9:ed:f2:3c:
dc:14:e5:82:5c:6e:4b:4d:68:46:e2:55:99:f3:31:f2:fa:b8:
c0:25:d0:b0:cf:60:af:f5:2d:a7:26:2c:bb:d1:d8:ea:ce:5d:
55:c4:14:84:a9:68:0a:6a:23:89:4e:ed:cf:3c:d2:01:81:a6:
35:59:bd:c3:b7:5d:cb:fe:b9:d1:94:de:81:fa:5e:64:7a:bd:
6e:46:df:c5:20:b1:90:0b:e6:d1:41:8c:e4:26:4b:ed:73:80:
f9:2a:80:b5:6b:0b:fe:da:71:9d:cc:13:da:57:fc:ec:bd:77:
5b:79:2d:4c:05:6c:bb:70:6e:0d:ca:61:04:3b:cd:f6:0a:b9:
ee:41:ee:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:34:47 2026 by rpki-client