
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa
File: C662FB52399511EFA72CB43DC4F9AE02.roa (raw, json)
Hash identifier: Vu6Ylnp5QJO27OfFhpPdAAkG3ygyOHxDDRrQZwqyhN4=
Subject key identifier: 97:9F:25:9C:BA:D9:0D:7E:39:35:00:11:4F:37:C6:44:99:9B:79:00
Certificate issuer: /CN=A915EBC8/serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Certificate serial: 0264
Authority key identifier: 23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa
Signing time: Wed 15 Jul 2026 07:16:41 +0000
ROA not before: Wed 15 Jul 2026 07:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 10235
IP address blocks: 203.8.32.0/19 maxlen: 19
203.8.56.0/24 maxlen: 24
203.8.57.0/24 maxlen: 24
203.8.58.0/24 maxlen: 24
203.8.59.0/24 maxlen: 24
203.8.60.0/24 maxlen: 24
203.8.61.0/24 maxlen: 24
203.57.240.0/24 maxlen: 24
203.57.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 612 (0x264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EBC8, serialNumber=23F0DA697CAA1D9247A669DF8781BA30137D7A59
Validity
Not Before: Jul 15 07:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a5733d9-e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:5b:93:af:fe:c6:2c:bf:95:07:7b:65:09:
d2:d0:69:71:9c:5f:56:c5:a3:2b:46:b3:db:f5:bd:
92:1d:c7:60:1e:1a:46:f9:69:18:b3:4b:b5:88:0d:
04:9f:22:87:79:1f:d7:ad:18:50:2b:9e:04:c1:7a:
00:f5:79:7e:c8:37:09:87:bc:e5:e6:c6:ce:d4:7d:
63:ea:b4:37:5e:76:7b:3c:d9:0f:57:9f:d9:99:59:
24:65:1c:c0:d3:23:f7:61:55:30:cc:bc:bc:d7:d0:
70:e9:60:ba:0a:e4:97:4b:5f:42:30:6f:91:73:a1:
e3:17:3d:4d:7f:d9:08:15:bb:95:24:89:8d:e1:77:
85:e2:d1:64:bf:c6:77:02:25:de:5a:81:e1:93:a8:
dc:de:ef:38:53:74:f4:7b:1f:2b:95:c3:a2:51:ad:
dd:ca:f4:8f:64:95:a1:89:6b:a8:17:c8:11:f5:dc:
d2:db:38:b4:83:f0:45:86:30:31:96:25:b8:49:45:
e0:9e:ca:6b:d7:2e:ec:75:54:d5:6c:df:56:4a:84:
79:45:fe:52:d8:22:99:6b:92:16:6c:fb:e9:6c:76:
1a:c0:5f:6a:04:68:9b:99:54:c6:72:5e:f1:27:1c:
87:00:53:fe:d0:db:ff:cf:1f:39:6b:23:d5:14:a7:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:25:9C:BA:D9:0D:7E:39:35:00:11:4F:37:C6:44:99:9B:79:00
X509v3 Authority Key Identifier:
keyid:23:F0:DA:69:7C:AA:1D:92:47:A6:69:DF:87:81:BA:30:13:7D:7A:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/I_DaaXyqHZJHpmnfh4G6MBN9elk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I_DaaXyqHZJHpmnfh4G6MBN9elk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBC8/6262F6D6EF0211ED8C2DD91FC4F9AE02/C662FB52399511EFA72CB43DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.8.32.0/19
203.57.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:8a:27:b3:0d:86:9f:5f:9b:db:e2:46:ff:93:4e:22:fe:e1:
cf:5a:77:a3:aa:37:4f:d3:25:80:8c:a0:c6:c8:63:49:39:a1:
14:c5:d9:f3:c6:be:4b:e5:8a:ba:02:5c:66:2b:30:99:ce:8e:
7e:ce:8e:f0:89:66:49:39:9a:1f:a2:a2:66:f9:a4:4d:3b:c5:
6c:ec:0f:61:37:09:81:e8:6d:4c:47:38:25:3b:6f:a7:66:15:
db:f9:55:16:ae:a5:ad:63:02:3e:ce:e4:19:eb:b5:b2:f7:1b:
1d:8b:17:61:e0:b6:51:59:78:71:fb:3c:39:e4:ad:49:ab:1c:
eb:da:9f:2d:22:87:65:b3:74:26:95:78:8a:0c:f2:9f:0d:52:
64:00:85:c6:68:c7:4d:7c:bd:a0:ff:b6:47:6e:17:21:27:d0:
4a:a5:f6:6d:a6:a5:29:77:ae:da:ac:2d:d7:ed:12:81:76:65:
de:cb:85:18:be:a9:10:47:77:0b:cd:a6:e1:55:ad:7d:d2:61:
11:43:74:93:0d:50:be:f7:a0:7f:c4:e9:88:06:dc:ba:4c:bb:
3a:43:ae:81:f4:33:00:72:69:a5:20:82:5c:48:97:4f:f9:b4:
17:da:bb:37:11:6c:f5:b7:e6:4b:1c:09:17:ce:c4:d6:0c:ec:
92:55:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:48:48 2026 by rpki-client