
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/D0EBD7924E6511F18436303FA8833773.roa
File: D0EBD7924E6511F18436303FA8833773.roa (raw, json)
Hash identifier: WaOvPQhMfI1dSiyB+qCZ5EIn4a5MAxRVB+Oa9t04E0M=
Subject key identifier: 46:46:31:E4:5D:2F:CF:D6:AE:31:47:45:5B:2E:D5:72:B6:FB:3B:79
Certificate issuer: /CN=A915D0AC/serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Certificate serial: 023E
Authority key identifier: 86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/D0EBD7924E6511F18436303FA8833773.roa
Signing time: Wed 13 May 2026 00:51:03 +0000
ROA not before: Wed 13 May 2026 00:51:03 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 15830
IP address blocks: 168.168.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D0AC, serialNumber=86CAEF96739EF49A514FE9F90B6FE9509D3CC953
Validity
Not Before: May 13 00:51:03 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a03caf7-e354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:27:d4:db:b0:10:9a:2f:a0:31:6b:fa:9a:
fe:4b:cb:58:23:25:0f:12:5a:0e:a8:c6:a1:88:f5:
6f:15:12:02:db:28:ba:9d:dc:96:08:bc:19:2c:b1:
b4:30:5a:68:f7:41:e1:54:62:f6:21:af:8e:fc:3d:
b8:db:ec:7a:1e:3d:99:f7:81:13:06:79:5a:0e:35:
1a:af:ee:0d:ff:20:f7:c1:c5:a3:db:67:e0:63:03:
fd:4a:cb:81:9c:0a:f3:98:8a:7b:0c:90:f3:7a:72:
ab:e5:3f:c8:63:60:4b:9d:7e:23:28:64:3e:5a:c6:
f8:30:f1:85:2b:f0:e9:d5:9d:b2:2a:b7:66:53:e4:
5a:30:b7:d0:c7:b1:ed:78:86:7b:ab:e4:09:c5:20:
b2:23:02:8a:0b:6e:e2:93:46:17:94:48:5c:0b:e8:
47:4c:66:44:81:ba:54:b0:66:de:0a:16:e6:0e:27:
7c:c0:80:be:fd:2a:a6:73:6a:6b:d7:8c:82:26:a4:
ec:e4:c8:b5:5e:c4:ae:3a:3c:73:70:29:6a:08:9d:
15:5d:21:73:c4:78:68:dd:26:03:d0:84:72:26:54:
31:7f:f5:94:80:ea:6e:65:9a:b5:2a:2b:63:8d:b6:
9e:45:cf:27:36:0a:3a:92:46:bf:ee:12:75:2f:d3:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:46:31:E4:5D:2F:CF:D6:AE:31:47:45:5B:2E:D5:72:B6:FB:3B:79
X509v3 Authority Key Identifier:
keyid:86:CA:EF:96:73:9E:F4:9A:51:4F:E9:F9:0B:6F:E9:50:9D:3C:C9:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/hsrvlnOe9JpRT-n5C2_pUJ08yVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hsrvlnOe9JpRT-n5C2_pUJ08yVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/9A5F0E1A152411EE9D70C968C4F9AE02/D0EBD7924E6511F18436303FA8833773.roa
sbgp-ipAddrBlock: critical
IPv4:
168.168.252.0/22
Signature Algorithm: sha256WithRSAEncryption
02:74:f2:59:b7:79:ce:b2:dd:a9:0f:d4:66:4c:ff:2e:c2:9d:
80:22:1f:56:a6:c4:9f:41:fd:58:c4:9c:2a:14:0d:57:29:50:
91:f9:bc:f6:2e:86:bd:fc:d6:fc:9f:f1:65:94:ab:5f:75:b5:
83:89:23:22:15:f8:c0:36:93:59:6d:6b:82:0e:5d:c3:a3:6f:
6a:ae:1a:87:12:ce:a3:ca:dc:8b:df:50:5a:e1:2a:da:87:6c:
74:03:81:1d:7e:28:71:ab:2e:08:9a:b2:93:a3:a9:c6:5d:2b:
31:d0:09:8a:89:c6:a2:dc:bc:39:ae:f8:c1:9d:6b:56:1f:eb:
88:46:59:ef:19:89:d7:99:66:3d:c4:57:fe:e5:8f:be:fd:4d:
5e:fe:5c:b6:a4:5f:5f:4e:da:ff:9c:ae:ec:12:57:2f:e6:9f:
69:fe:ce:d4:d2:65:c6:bf:cf:e0:8e:ed:1c:f0:62:4e:ae:85:
9e:66:44:61:23:29:25:e6:85:60:7a:d6:dd:d1:ed:52:18:19:
01:d2:3b:94:15:ca:8c:fd:e7:55:3e:29:0b:d6:82:88:9d:5e:
e7:65:b7:74:82:05:f9:eb:dd:1d:12:20:24:51:ee:e8:fb:ac:
c4:32:72:1a:57:22:c2:a8:8a:b7:11:c7:4b:6a:ff:0d:ac:c7:
8b:a2:1e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:05 2026 by rpki-client