
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/7E156BA0D46511EDBFC00C87C4F9AE02.roa
File: 7E156BA0D46511EDBFC00C87C4F9AE02.roa (raw, json)
Hash identifier: DebZuPdAl7SQycfcr6kWHE2/e62EM6VhFHs4/Z6NAFg=
Subject key identifier: 0D:08:89:B5:29:06:3F:C2:EA:2F:23:64:33:DC:BF:F8:E5:6A:C6:3C
Certificate issuer: /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
Certificate serial: 0225
Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/7E156BA0D46511EDBFC00C87C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:33:52 +0000
ROA not before: Thu 01 May 2025 03:09:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4739
IP address blocks: 203.15.107.0/24 maxlen: 24
203.15.107.0/26 maxlen: 26
203.15.107.64/26 maxlen: 26
203.15.107.128/26 maxlen: 26
203.15.107.192/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl
rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185456, serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252
Validity
Not Before: May 1 03:09:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ddd0-2959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:33:42:17:11:d0:7b:32:9e:13:80:3e:f3:
70:80:76:0a:bc:6d:a8:7f:70:e1:af:12:26:25:1f:
49:dd:79:77:a3:0f:3d:e5:a4:47:8a:5b:7d:90:33:
78:03:c5:c1:ef:20:d1:4a:0a:f8:ef:64:ad:4c:56:
5b:37:55:3b:da:a2:e4:2d:48:2e:3c:33:28:ac:98:
94:5b:e6:11:74:23:e2:75:d0:69:6d:7d:9e:7c:71:
b2:2b:1d:c3:fa:2d:e0:73:df:7f:a5:46:c8:45:54:
fd:09:b3:04:a6:f8:b3:81:00:17:52:56:b3:f7:bc:
7b:ca:3e:70:d4:96:25:4a:45:f8:3a:3c:ff:83:7d:
34:35:bc:f6:23:39:4f:06:98:31:68:35:00:39:6c:
a1:57:62:99:db:17:90:9e:59:e4:18:f5:3e:be:27:
28:a9:c8:dd:e2:df:bb:41:c1:f8:61:07:e4:f9:01:
0e:ec:6b:e5:d5:42:cc:a4:e0:ca:50:7d:12:d6:07:
5d:24:a7:d4:25:ba:3c:df:a5:25:8d:70:09:b8:c9:
68:c4:b4:43:c1:6d:14:50:ea:f1:a1:e8:81:d1:af:
3b:2c:cc:7c:89:d0:9b:9e:79:83:59:ee:ab:f6:d4:
36:a5:06:6e:ce:94:e4:78:6a:ec:ab:23:7e:05:de:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:89:B5:29:06:3F:C2:EA:2F:23:64:33:DC:BF:F8:E5:6A:C6:3C
X509v3 Authority Key Identifier:
keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/7E156BA0D46511EDBFC00C87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.15.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d1:2a:f2:5f:08:97:b4:e9:a9:a9:d6:51:3f:ac:ca:c7:c4:
fc:38:02:6b:bc:73:c4:13:1e:ae:47:36:6a:b2:c0:ee:71:9b:
18:fc:67:f0:18:07:c7:37:13:22:db:de:86:e4:cf:c7:04:2b:
39:fc:9e:81:5c:cd:c3:a4:16:07:3c:43:70:dd:fa:0e:41:3a:
ab:aa:4a:c3:38:6a:c9:f1:fb:1e:13:6f:c0:e7:09:78:5d:c9:
70:6b:3b:7f:b8:4a:d3:4c:00:4e:15:64:6b:fc:d1:5a:ab:42:
96:e0:ce:55:a2:f0:44:0b:91:94:03:ca:00:3b:16:9f:3b:65:
cd:7f:63:c8:1b:28:6d:44:d4:2d:45:03:51:0a:49:40:a6:9b:
c7:8d:11:e8:cd:3c:ba:84:1a:3a:3f:01:ab:2c:7a:e0:25:e3:
80:f9:3c:72:29:00:e7:e7:e7:fb:fb:7c:e2:a7:5d:e4:54:48:
47:05:f3:75:53:38:29:91:aa:97:f4:3c:d6:13:16:8d:60:14:
e9:17:7a:9f:55:ba:4b:51:70:26:ae:76:93:56:34:50:bb:e7:
4e:24:57:c4:bf:ea:c4:bc:02:77:05:a5:11:98:b2:24:46:fb:
8b:a6:a5:25:bc:40:5c:68:70:61:94:8b:2c:da:12:fc:51:84:
d7:5d:24:6d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0NTYxMTAvBgNVBAUTKEVCMjVGRUY4RkY4RkZDNzE0NDQwMzczNjlDQURBRkFG
NkNEODkyNTIwHhcNMjUwNTAxMDMwOTI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGRkMC0yOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmMwzQhcR0HsynhOAPvNwgHYKvG2of3DhrxImJR9J3Xl3ow895aRHilt9kDN4
A8XB7yDRSgr472StTFZbN1U72qLkLUguPDMorJiUW+YRdCPiddBpbX2efHGyKx3D
+i3gc99/pUbIRVT9CbMEpvizgQAXUlaz97x7yj5w1JYlSkX4Ojz/g300Nbz2IzlP
BpgxaDUAOWyhV2KZ2xeQnlnkGPU+vicoqcjd4t+7QcH4YQfk+QEO7Gvl1ULMpODK
UH0S1gddJKfUJbo836UljXAJuMloxLRDwW0UUOrxoeiB0a87LMx8idCbnnmDWe6r
9tQ2pQZuzpTkeGrsqyN+Bd7EKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA0IibUp
Bj/C6i8jZDPcv/jlasY8MB8GA1UdIwQYMBaAFOsl/vj/j/xxREA3Npytr69s2JJS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ1Ni8wNTJFMkM0OEQ0
NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9IRkVRRGMybksydnIyellr
bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ5WC0tUC1QX0hGRVFEYzJuSzJ2cjJ6WWtsSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU0NTYvMDUyRTJDNDhENDYyMTFFREE3REM2RTUxQzRGOUFFMDIvN0UxNTZCQTBE
NDY1MTFFREJGQzAwQzg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyw9rMA0GCSqGSIb3DQEBCwUAA4IBAQBr0SryXwiXtOmpqdZRP6zK
x8T8OAJrvHPEEx6uRzZqssDucZsY/GfwGAfHNxMi296G5M/HBCs5/J6BXM3DpBYH
PENw3foOQTqrqkrDOGrJ8fseE2/A5wl4Xclwazt/uErTTABOFWRr/NFaq0KW4M5V
ovBEC5GUA8oAOxafO2XNf2PIGyhtRNQtRQNRCklAppvHjRHozTy6hBo6PwGrLHrg
JeOA+TxyKQDn5+f7+3zip13kVEhHBfN1UzgpkaqX9DzWExaNYBTpF3qfVbpLUXAm
rnaTVjRQu+dOJFfEv+rEvAJ3BaURmLIkRvuLpqUlvEBcaHBhlIss2hL8UYTXXSRt
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:48 2026 by rpki-client