
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/4FF63D680FE911F1BED32952083D8C67.roa
File: 4FF63D680FE911F1BED32952083D8C67.roa (raw, json)
Hash identifier: 6IzPnI4tAt0K3ECmTRW8kww4HZlafQx4SrWFoUJ/Q8s=
Subject key identifier: 64:76:57:7B:48:08:67:65:75:8A:0B:2B:AB:03:4D:A7:E4:E2:D1:66
Certificate issuer: /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial: 05
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/4FF63D680FE911F1BED32952083D8C67.roa
Signing time: Sun 22 Feb 2026 12:23:37 +0000
ROA not before: Sun 22 Feb 2026 12:23:37 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153739
IP address blocks: 151.158.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Validity
Not Before: Feb 22 12:23:37 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=699af549-9161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:a5:db:c5:07:ff:b8:66:08:00:17:50:50:
4a:a5:5e:84:8d:9f:bb:9c:d9:24:8b:64:cf:8f:18:
ab:7b:1a:05:53:a8:8a:fa:d0:a0:74:f7:fe:65:b0:
d5:25:65:be:71:66:d5:c7:4a:96:90:77:5e:43:d5:
2c:f3:e8:61:2d:d2:09:72:d2:b2:53:8f:99:fa:f9:
5d:6b:f0:b8:10:1a:3a:7b:53:f2:af:8b:bf:1d:5c:
98:f3:1e:6b:f2:91:30:33:07:c2:2c:a2:94:5a:b0:
36:db:b4:06:1e:77:61:ba:e4:4d:40:3b:f5:f7:b9:
17:69:1f:dc:73:6d:55:a0:69:e5:18:cc:43:6d:7a:
a6:12:ea:9e:61:df:ee:ec:bb:53:32:c2:50:7b:e6:
ad:a6:7e:b6:e2:7e:b3:33:0f:e3:8c:85:c9:0b:c2:
b8:fd:f4:ab:8a:9e:b2:bf:8c:e0:7c:84:0c:e8:00:
26:f7:e4:f6:c4:05:fc:e4:d3:b1:fd:9c:72:64:73:
94:61:a3:1f:70:91:d3:fc:36:89:88:68:c4:81:f0:
19:ed:68:b9:c5:31:c1:70:08:d3:a5:ef:8e:fc:99:
6f:e6:a3:51:c4:e0:51:c1:e1:27:b3:f5:94:c6:66:
0b:52:d6:2d:b7:93:9a:8a:e6:3d:ff:5a:22:90:25:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:57:7B:48:08:67:65:75:8A:0B:2B:AB:03:4D:A7:E4:E2:D1:66
X509v3 Authority Key Identifier:
keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/4FF63D680FE911F1BED32952083D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ba:92:56:f0:ac:28:fd:4c:22:91:ec:f4:36:c9:8e:c6:ae:
88:91:7e:6e:9a:c6:93:a1:70:09:69:89:1d:53:94:36:b2:fd:
18:55:41:fb:e9:d9:d7:fe:b6:1c:5f:7b:a9:08:b7:53:54:a6:
bf:de:0a:de:44:83:98:c5:c5:5a:26:cf:98:4c:b0:d5:43:16:
49:2d:25:cf:36:a6:ba:38:a6:53:46:15:7a:92:ae:23:90:8d:
14:c1:b2:1d:d4:35:c2:b1:cd:8d:77:ec:80:d1:04:18:7d:6b:
05:7b:db:03:3e:4d:54:d2:bf:78:99:7a:20:96:7a:4b:f0:58:
05:57:77:a4:9e:9f:4a:3f:03:4c:05:b0:41:f4:07:32:7e:bc:
d6:5d:7b:26:9b:9e:33:a8:11:91:55:14:f2:10:65:90:74:9e:
14:d1:a3:f8:fe:4e:83:a6:02:76:1d:36:3d:ae:5c:d1:07:db:
e9:40:7f:d8:f1:d6:7f:40:bd:ca:13:c3:ce:56:50:eb:94:ac:
29:80:90:9a:53:9c:9f:01:d0:16:f3:7d:2d:9b:64:e8:40:b5:
75:c5:4a:cd:6e:33:86:fd:66:a3:16:9e:50:41:e7:75:cc:0c:
1e:b7:a2:02:43:6b:1d:ab:46:6f:bb:b6:66:67:88:dc:45:ed:
43:01:1f:37
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx
NjM3MjExMC8GA1UEBRMoNTM1RTc0MzQzOUY0OUNGQkZENDhFMEVGNTdFNkZBN0Q0
QjMxMUFBRjAeFw0yNjAyMjIxMjIzMzdaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5OWFmNTQ5LTkxNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfgaXbxQf/uGYIABdQUEqlXoSNn7uc2SSLZM+PGKt7GgVTqIr60KB09/5lsNUl
Zb5xZtXHSpaQd15D1Szz6GEt0gly0rJTj5n6+V1r8LgQGjp7U/Kvi78dXJjzHmvy
kTAzB8IsopRasDbbtAYed2G65E1AO/X3uRdpH9xzbVWgaeUYzENteqYS6p5h3+7s
u1MywlB75q2mfrbifrMzD+OMhckLwrj99KuKnrK/jOB8hAzoACb35PbEBfzk07H9
nHJkc5Rhox9wkdP8NomIaMSB8BntaLnFMcFwCNOl7478mW/mo1HE4FHB4Sez9ZTG
ZgtS1i23k5qK5j3/WiKQJdZXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZHZXe0gI
Z2V1igsrqwNNp+Ti0WYwHwYDVR0jBBgwFoAUU150NDn0nPv9SODvV+b6fUsxGq8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2MzcyL0UwQzVFQUU2MEM1
NjExRjE5OUUyNTM4QjEyM0Q4QzY3L1UxNTBORG4wblB2OVNPRHZWLWI2ZlVzeEdx
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvVTE1ME5EbjBuUHY5U09EdlYtYjZmVXN4R3E4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjM3Mi9FMEM1RUFFNjBDNTYxMUYxOTlFMjUzOEIxMjNEOEM2Ny80RkY2M0Q2ODBG
RTkxMUYxQkVEMzI5NTIwODNEOEM2Ny5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAJeevjANBgkqhkiG9w0BAQsFAAOCAQEAT7qSVvCsKP1MIpHs
9DbJjsauiJF+bprGk6FwCWmJHVOUNrL9GFVB++nZ1/62HF97qQi3U1Smv94K3kSD
mMXFWibPmEyw1UMWSS0lzzamujimU0YVepKuI5CNFMGyHdQ1wrHNjXfsgNEEGH1r
BXvbAz5NVNK/eJl6IJZ6S/BYBVd3pJ6fSj8DTAWwQfQHMn681l17JpueM6gRkVUU
8hBlkHSeFNGj+P5Og6YCdh02Pa5c0Qfb6UB/2PHWf0C9yhPDzlZQ65SsKYCQmlOc
nwHQFvN9LZtk6EC1dcVKzW4zhv1moxaeUEHndcwMHreiAkNrHatGb7u2ZmeI3EXt
QwEfNw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:35:34 2026 by rpki-client