
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa
File: CFF5A20078E011EC8357FA15C4F9AE02.roa (raw, json)
Hash identifier: Dg/YVoaAbQDeMOZ225L2eC6YXpKJAjiybrKz9YFG+0w=
Subject key identifier: C7:AC:A8:66:0B:3A:12:21:6D:61:1D:E2:1A:FB:2F:7F:17:60:4C:6D
Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Certificate serial: 2700
Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:16:35 +0000
ROA not before: Fri 04 Jul 2025 16:22:56 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140928
IP address blocks: 58.146.128.0/20 maxlen: 24
59.189.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9984 (0x2700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360
Validity
Not Before: Jul 4 16:22:56 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a51d33-9b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:58:91:07:a7:fb:2a:03:f5:b7:02:1b:98:
38:a2:45:ae:e8:e9:84:5d:37:93:35:d4:35:ec:14:
55:dd:7e:3b:f4:ab:ba:23:56:e9:cc:c1:f3:2c:c6:
9d:59:15:f2:8f:9b:74:10:e8:5f:85:b7:09:6d:fe:
10:69:a2:4b:20:f6:b2:f2:c2:1f:06:fd:b2:30:c6:
e3:c2:21:3c:48:b8:0e:92:e8:b6:b4:32:43:ae:dd:
01:85:ab:7e:da:a8:d6:95:08:ae:b5:e1:11:85:dc:
4c:8e:32:83:5d:98:59:1b:e7:c6:31:d1:7f:92:cd:
0a:0b:2f:56:25:6e:37:3b:43:18:81:41:ad:1e:9b:
56:37:60:e9:43:97:4e:e2:fa:88:00:95:a7:46:89:
82:03:45:0b:0b:b7:bc:43:15:bb:81:3a:6c:d1:b0:
6d:02:fe:6f:35:91:09:65:7e:60:2f:f2:11:10:04:
3c:39:f8:df:8d:d9:0f:c2:ac:79:0d:96:c0:d5:d0:
33:ad:23:d2:f9:b8:3e:1c:8e:16:97:c7:4c:0d:f9:
f1:50:9c:63:bc:20:e1:6b:c1:39:f6:52:c4:16:8e:
69:65:5a:ab:60:d7:2a:92:74:d8:e9:9b:e0:5f:f1:
37:6f:22:df:be:6d:90:d4:4e:04:39:d4:d3:7e:a7:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:A8:66:0B:3A:12:21:6D:61:1D:E2:1A:FB:2F:7F:17:60:4C:6D
X509v3 Authority Key Identifier:
keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/CFF5A20078E011EC8357FA15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.146.128.0/20
59.189.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:e9:c5:a6:e3:d1:fe:aa:bf:44:ad:25:99:8a:f0:b8:78:62:
40:41:a5:bd:82:54:4c:a7:b6:61:ee:2c:0b:ee:81:82:f3:c7:
12:14:74:3b:f6:fa:7d:4b:8d:22:32:a1:7f:fc:4d:f5:0c:36:
07:29:5e:de:65:2d:ee:83:a6:80:5d:82:78:39:b7:2a:bf:66:
1c:ce:57:af:7e:27:35:17:a5:8b:4b:d0:5f:7a:a9:55:3f:e0:
c5:ba:1a:c0:ba:52:af:6e:90:9e:ee:56:df:61:9f:be:20:cb:
09:a3:28:ff:a0:d3:d7:66:bc:9a:52:1f:74:7a:ff:02:26:7e:
94:7e:e4:52:94:f7:7e:67:fb:ac:7c:57:a1:ec:45:05:c0:8b:
6f:93:36:7f:d5:a7:52:69:66:3a:d9:2e:58:80:21:48:36:0f:
d3:2e:72:84:97:f9:98:da:b3:ac:e2:f2:b9:88:e2:49:f2:52:
64:ee:9f:62:e9:33:2b:2f:aa:2a:b7:58:83:28:d7:13:6a:6e:
c3:23:c3:c9:d2:2c:14:fe:09:2e:27:ed:ea:6a:b3:3c:ae:c8:
95:20:0a:a8:46:8f:dd:03:73:c5:67:d2:72:e7:c7:a1:15:8e:
79:8d:b9:7c:f9:fd:e3:3e:10:09:d8:e3:0d:1a:56:76:71:c6:
7a:b3:5f:81
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgICJwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy
NjI3RDczNjAwHhcNMjUwNzA0MTYyMjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWQzMy05Yjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/lYkQen+yoD9bcCG5g4okWu6OmEXTeTNdQ17BRV3X479Ku6I1bpzMHzLMad
WRXyj5t0EOhfhbcJbf4QaaJLIPay8sIfBv2yMMbjwiE8SLgOkui2tDJDrt0Bhat+
2qjWlQiuteERhdxMjjKDXZhZG+fGMdF/ks0KCy9WJW43O0MYgUGtHptWN2DpQ5dO
4vqIAJWnRomCA0ULC7e8QxW7gTps0bBtAv5vNZEJZX5gL/IREAQ8OfjfjdkPwqx5
DZbA1dAzrSPS+bg+HI4Wl8dMDfnxUJxjvCDha8E59lLEFo5pZVqrYNcqknTY6Zvg
X/E3byLfvm2Q1E4EOdTTfqf5ZwIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFMesqGYL
OhIhbWEd4hr7L38XYExtMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1
ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUVFNTMvMzg1MTE4NDA0NTg4MTFFNTlCMkQ4MzcxQzRGOUFFMDIvQ0ZGNUEyMDA3
OEUwMTFFQzgzNTdGQTE1QzRGOUFFMDIucm9hMCQGCCsGAQUFBwEHAQH/BBUwEzAR
BAIAATALAwQEOpKAAwMAO70wDQYJKoZIhvcNAQELBQADggEBAJzpxabj0f6qv0St
JZmK8Lh4YkBBpb2CVEyntmHuLAvugYLzxxIUdDv2+n1LjSIyoX/8TfUMNgcpXt5l
Le6DpoBdgng5tyq/ZhzOV69+JzUXpYtL0F96qVU/4MW6GsC6Uq9ukJ7uVt9hn74g
ywmjKP+g09dmvJpSH3R6/wImfpR+5FKU935n+6x8V6HsRQXAi2+TNn/Vp1JpZjrZ
LliAIUg2D9MucoSX+Zjas6zi8rmI4knyUmTun2LpMysvqiq3WIMo1xNqbsMjw8nS
LBT+CS4n7epqszyuyJUgCqhGj90Dc8Vn0nLnx6EVjnmNuXz5/eM+EAnY4w0aVnZx
xnqzX4E=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:35:13 2026 by rpki-client