
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/BA6555344DEE11F0B209371DC4F9AE02.roa
File: BA6555344DEE11F0B209371DC4F9AE02.roa (raw, json)
Hash identifier: EVXt3bTmFBpg7tvfSnoRf14VmLrxNNDyv7kNCjZE6JI=
Subject key identifier: E9:87:E2:F0:2F:B9:09:A7:BB:60:9D:27:71:33:00:37:C8:94:62:38
Certificate issuer: /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial: 0199
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/BA6555344DEE11F0B209371DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:57:05 +0000
ROA not before: Fri 20 Jun 2025 15:53:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152459
IP address blocks: 157.15.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Validity
Not Before: Jun 20 15:53:37 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a58921-b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c0:49:bb:68:98:37:e7:c4:60:c5:15:cc:8c:
06:78:30:28:38:0d:2a:4d:37:73:54:fd:18:ef:dc:
05:3c:90:0c:85:99:34:85:3c:2a:96:71:f0:ee:b9:
8b:a1:e2:b8:ce:bb:0a:df:fa:47:e8:33:2d:46:99:
0b:0b:60:93:64:1b:4c:8f:cd:a5:b8:13:7f:47:46:
60:33:14:2d:72:7a:a8:e1:08:1b:59:f5:ec:37:be:
52:af:81:3d:2e:50:3e:44:7b:ab:60:45:af:6f:6e:
67:07:52:fa:89:90:4d:e6:eb:02:f9:13:ca:6f:5e:
9b:74:9e:db:c3:f8:f0:b5:25:a5:d9:e6:34:17:8a:
3c:38:4e:05:d9:b4:94:e7:ca:e8:2d:28:bf:1d:af:
01:92:51:c9:f5:ef:ca:c6:3b:7d:ec:1b:95:3d:20:
30:d8:77:4c:cb:fd:15:29:2e:10:d9:70:47:7e:3d:
9f:15:c4:21:e8:38:4e:f4:e6:e2:a9:7d:f3:82:6b:
44:ff:c5:64:09:9d:48:db:9c:b2:0c:2e:00:e5:19:
99:09:d0:8e:bf:24:f7:d3:27:fe:51:9b:b9:c1:c5:
3d:b7:46:20:c0:62:1c:e9:02:4f:02:ef:e2:68:7e:
66:3d:2b:77:65:65:6b:c5:13:ff:2c:fb:1f:9b:15:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:E2:F0:2F:B9:09:A7:BB:60:9D:27:71:33:00:37:C8:94:62:38
X509v3 Authority Key Identifier:
keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/BA6555344DEE11F0B209371DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.142.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:02:4a:7f:f7:9f:f9:db:0c:24:0b:57:e0:78:66:e9:32:3b:
28:28:0e:c4:ee:2e:26:83:78:1c:e7:0c:34:f2:05:8d:31:9b:
7b:90:87:84:eb:ce:63:37:49:b4:da:1c:5f:9e:0b:9d:fb:3c:
bd:b8:ee:b9:7e:a6:b0:7a:9c:49:d5:f7:4c:3f:ef:bb:03:bd:
f1:39:34:1e:c5:71:b6:63:90:9d:fb:cc:6a:b9:e6:1e:2a:e2:
58:a8:fa:8c:a3:e5:29:1b:f7:af:b7:4a:57:2a:6d:c8:2e:d2:
40:b7:d9:1e:e6:24:34:00:28:4e:af:8b:71:95:c2:bf:26:b4:
42:d6:72:f4:31:42:eb:e5:ff:e4:41:26:10:bc:a4:45:44:7a:
91:c4:1f:9a:80:99:9b:37:64:22:5e:c8:6c:ca:46:9b:6d:87:
f7:56:6a:1a:6e:04:a4:1f:91:2e:1d:3e:3e:bd:0e:c0:b3:a2:
7b:0c:b4:f3:5f:7b:58:a5:4d:02:68:18:1f:93:74:2d:17:33:
c3:d0:03:41:63:db:70:4b:f6:11:c9:8a:14:c9:68:87:a1:47:
25:dc:6d:4a:20:3d:0f:bd:19:37:78:a9:d2:f5:6f:18:6c:99:
52:27:40:ce:0c:fa:7f:3b:1b:91:99:fe:9a:73:62:cd:89:af:
48:19:8e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:47 2026 by rpki-client