
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/0AAD710010B111F0A46DA723C4F9AE02.roa
File: 0AAD710010B111F0A46DA723C4F9AE02.roa (raw, json)
Hash identifier: 4vHzok/E524QlRcfSwftnk85HN/jHQnXadbkicvtcjY=
Subject key identifier: 9C:04:3C:41:01:8D:D1:C3:7C:B6:50:39:28:64:B0:71:FF:14:A7:9F
Certificate issuer: /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial: 0128
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/0AAD710010B111F0A46DA723C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:53:57 +0000
ROA not before: Thu 03 Apr 2025 17:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153725
IP address blocks: 163.223.178.0/24 maxlen: 24
163.223.179.0/24 maxlen: 24
2401:f860::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Validity
Not Before: Apr 3 17:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59675-e6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:e0:63:29:64:63:8c:d3:d5:31:ac:57:da:
89:82:69:58:a1:ff:d0:fb:09:ae:b6:a0:08:27:4b:
d9:2e:ce:e2:a1:bd:51:fa:08:ef:2e:aa:71:7e:60:
97:fc:5e:0c:9f:d6:20:b0:c3:32:52:6a:e6:09:25:
07:cc:51:c9:c8:22:cb:65:51:de:08:38:47:8f:15:
b6:60:0f:90:be:52:0b:66:df:cc:fd:9a:71:ae:c5:
5c:b1:07:0a:54:db:e4:19:f8:30:4c:a6:02:21:d1:
bf:56:c2:22:62:0a:3d:07:8f:91:86:68:b2:e9:27:
63:f9:41:a0:8e:b4:33:c6:c6:ab:df:1b:67:37:76:
82:96:6f:4a:92:47:30:74:ef:95:9e:8e:d0:99:3d:
58:f7:8d:53:54:27:b7:20:e6:c9:37:5f:be:58:2d:
83:62:1a:0e:77:d6:8c:71:f4:2d:3a:00:a9:15:96:
47:f8:c2:7e:70:23:8c:b6:5d:30:56:c6:80:ec:0b:
cf:cf:97:ad:33:0e:4b:7d:ce:77:49:22:5a:09:80:
12:47:86:f4:4c:de:54:89:05:89:49:71:11:d9:64:
45:a8:15:76:92:8f:97:01:65:b2:7e:80:53:b4:eb:
ec:0a:5d:e0:d5:9c:f4:78:98:7d:0d:ab:fa:4e:37:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:3C:41:01:8D:D1:C3:7C:B6:50:39:28:64:B0:71:FF:14:A7:9F
X509v3 Authority Key Identifier:
keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/0AAD710010B111F0A46DA723C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.178.0/23
IPv6:
2401:f860::/32
Signature Algorithm: sha256WithRSAEncryption
0d:a0:46:22:c5:63:d7:a0:91:2c:9b:7a:78:49:ff:76:8e:2d:
bc:a1:c9:49:f0:d4:67:24:9c:16:93:e9:1d:e3:37:7d:3e:54:
e4:2e:82:71:72:3c:85:34:78:d2:8c:ab:2e:71:6d:f4:ee:ba:
65:69:31:7b:16:d6:65:6b:32:c3:3c:cb:7b:3b:3f:6f:4b:3f:
8e:9b:97:be:1f:b5:a9:a1:15:7c:69:cf:15:d0:29:a5:3f:41:
1a:08:c6:c1:40:de:a7:19:f4:2b:50:8f:bd:e7:90:45:c7:34:
cb:74:21:fa:1c:2c:cf:18:20:75:ff:d2:4c:04:0b:b0:7a:5d:
0e:84:7e:74:47:b3:5d:65:a7:cc:7e:73:22:ce:4c:7b:f9:75:
fb:38:98:30:75:ec:35:0e:ac:0d:d3:de:fa:68:1f:17:11:fb:
62:5f:3b:b8:a4:2b:37:0a:8c:4c:d8:df:85:59:4e:22:76:03:
c5:48:a7:9a:3d:ad:67:27:1a:b3:d0:3a:f4:44:93:c1:30:2e:
2e:d4:d3:67:0b:53:c2:d7:30:55:df:9c:79:6e:38:da:ac:b6:
13:37:f1:6c:7f:8a:21:5e:af:62:87:cf:e1:1c:1a:54:79:03:
75:d4:f1:b6:57:0c:9a:f7:aa:c6:80:b0:d9:f0:a4:62:bd:87:
99:56:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:48 2026 by rpki-client