
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa
File: 6E042EFCABF011EC92152E22C4F9AE02.roa (raw, json)
Hash identifier: Spot7p9zSNAAsEMFmZpLPx1zmvfxVQZv9xfzDFvYL6o=
Subject key identifier: FF:98:8F:41:9C:82:27:2C:91:B3:39:CA:0F:52:40:FA:9D:D7:8C:99
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 2702
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:16:37 +0000
ROA not before: Fri 04 Jul 2025 16:22:58 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 19905
IP address blocks: 58.146.128.0/20 maxlen: 24
58.146.144.0/21 maxlen: 24
59.189.0.0/16 maxlen: 24
222.165.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9986 (0x2702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jul 4 16:22:58 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a51d34-259a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:c5:55:fc:08:5a:f3:e2:9b:56:16:bd:ae:
3c:cb:60:67:7e:28:2a:e8:89:64:de:69:c3:b3:b1:
57:03:1b:2a:b1:b8:08:e7:f3:8f:9b:7d:a6:a5:d2:
c5:3a:2e:ad:c2:08:09:b4:ce:bf:fe:27:2b:51:79:
94:8c:d8:12:35:e1:60:61:d4:d3:2d:58:b6:a2:10:
db:d0:85:dc:8b:9a:d7:88:96:cd:28:64:0c:93:78:
42:7a:ee:c9:c3:07:bc:b5:1a:f4:ae:5d:05:3b:fd:
03:5c:0c:ab:75:a7:dd:19:42:59:a0:bb:5a:65:8f:
ee:d4:0f:55:31:6e:df:7d:5b:c5:01:41:da:d2:ef:
1c:5a:ea:9d:ab:dd:af:19:47:8b:3f:3c:df:2a:54:
e5:2d:91:6b:1d:67:fa:45:21:7a:f4:df:e2:22:82:
90:68:bf:0e:58:88:8b:60:5b:7c:b4:b3:d2:93:d9:
6e:62:85:5b:90:8f:8f:8c:4f:7e:76:21:62:dd:62:
c5:3c:a2:64:92:81:c7:f3:93:28:03:94:14:5e:cb:
a1:af:14:72:a3:d9:35:c6:50:00:76:54:29:39:66:
da:8e:7f:33:36:87:1a:bd:4d:36:a4:05:49:81:ed:
d5:27:19:1c:ae:2f:5c:49:fc:c6:ed:d0:32:98:39:
c4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:98:8F:41:9C:82:27:2C:91:B3:39:CA:0F:52:40:FA:9D:D7:8C:99
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/6E042EFCABF011EC92152E22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.146.128.0-58.146.151.255
59.189.0.0/16
222.165.0.0/17
Signature Algorithm: sha256WithRSAEncryption
83:c3:49:54:78:db:a3:3a:aa:f2:0d:ff:31:1d:c9:dc:59:4e:
77:84:14:a6:a9:f6:1c:71:07:4f:b5:57:6a:7b:8d:d6:60:ef:
41:d0:36:f6:cc:5e:95:ee:d2:db:35:ea:31:83:06:56:c0:39:
e0:7c:11:bf:22:83:56:0e:4f:0b:62:47:27:38:d0:fc:cd:24:
2b:20:34:90:08:ae:c9:5f:ba:8a:5e:77:9e:f0:23:2c:e8:05:
69:79:7f:f5:74:75:9e:14:22:c7:b2:ea:14:1c:e6:a4:50:39:
4c:81:27:73:aa:93:d3:8d:e3:a0:5f:95:15:76:54:b4:5c:85:
e6:73:a5:8a:8b:ac:45:47:28:e7:a1:30:32:87:3d:10:76:0b:
e2:88:56:27:0f:75:2d:af:f5:73:14:b6:bd:03:57:94:52:6e:
52:8c:d9:75:f9:5d:78:c7:4d:fa:fe:a9:22:99:2f:5b:96:45:
91:af:f4:7f:4a:a6:5d:ee:07:86:cf:27:b5:9d:58:41:7e:aa:
88:23:2e:01:26:d5:04:7f:e9:bf:05:99:ab:ea:88:84:65:f0:
8e:9d:4e:60:4f:39:eb:92:aa:18:1c:a1:7f:d9:98:7d:88:6c:
d7:df:3d:92:65:40:08:2a:94:c6:79:59:19:bf:c4:7b:93:3e:
0a:a0:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:00:20 2026 by rpki-client