
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/297CBF60B1EA11F18F5B7C6E4811F970.roa
File: 297CBF60B1EA11F18F5B7C6E4811F970.roa (raw, json)
Hash identifier: psykWVtJiLn1Rn2o9xaTL8eXARdffRzlklonTvhkrRQ=
Subject key identifier: BB:2C:AE:E6:C3:D2:4B:FE:44:B6:5E:C2:A4:23:63:BC:38:98:B5:87
Certificate issuer: /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Certificate serial: 8D
Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/297CBF60B1EA11F18F5B7C6E4811F970.roa
Signing time: Wed 16 Sep 2026 16:17:50 +0000
ROA not before: Wed 16 Sep 2026 16:17:50 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 134562
IP address blocks: 151.158.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Validity
Not Before: Sep 16 16:17:50 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6aaac12e-1cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:85:b5:05:ec:a9:7d:e7:b8:59:8f:07:72:
5c:08:36:7c:de:04:f5:69:89:1e:47:6c:d6:10:6a:
2d:b1:57:49:2f:13:39:72:8b:ca:8b:eb:2a:9d:5e:
27:90:8b:7d:6f:23:b4:52:04:b9:f0:13:2e:c8:11:
22:5f:ec:19:fa:2f:da:ea:b3:ad:dc:37:17:a6:04:
ae:c9:01:37:2b:50:ec:d6:45:cc:e8:3e:c6:2d:cd:
52:94:90:a9:07:ad:4e:43:8e:78:be:bf:c9:9c:06:
8d:7f:0a:2d:67:dd:e1:79:f1:f5:c1:b8:3c:19:26:
31:fe:5b:33:e1:2f:a2:3b:18:ca:8c:7c:9d:47:94:
a6:52:c8:d5:71:15:ec:f5:6d:cd:c5:84:96:92:94:
9b:b3:e2:ab:f9:cf:1b:67:55:0a:e3:54:b3:50:18:
e1:d2:9c:0c:55:01:2c:74:37:63:56:bc:98:04:45:
24:05:c3:59:9b:27:f5:05:15:66:f6:44:be:32:c7:
5e:23:e3:e3:8f:c1:2e:4d:3a:60:b9:46:d3:75:09:
55:e5:22:42:1b:51:4d:5b:59:07:ca:39:a2:46:84:
a7:d2:3f:b6:28:c4:7d:a0:d9:54:5e:60:a9:f2:4b:
23:1f:46:ca:a2:9a:81:30:bf:50:03:5a:de:35:ca:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:AE:E6:C3:D2:4B:FE:44:B6:5E:C2:A4:23:63:BC:38:98:B5:87
X509v3 Authority Key Identifier:
keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/297CBF60B1EA11F18F5B7C6E4811F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.16.0/24
Signature Algorithm: sha256WithRSAEncryption
91:c0:30:a4:6d:3a:83:34:0f:c9:27:3d:b1:b1:24:bd:47:18:
13:54:65:34:5b:96:ce:2d:c9:78:2a:9c:ed:b9:4c:0d:e2:50:
bc:a0:36:bc:1e:51:ff:5e:17:f5:8a:6f:e0:35:a7:6f:ce:4c:
6e:1e:da:a8:bb:15:06:65:eb:26:b0:7c:c5:41:4a:b1:f5:f9:
e9:7a:b9:d6:42:b2:30:38:04:74:ea:aa:a0:8b:8c:5f:9a:ba:
32:a5:00:27:0d:9d:f0:bc:11:ea:07:10:eb:b7:96:80:6b:54:
95:49:1a:ca:bb:2e:86:9b:2a:32:ca:bd:f6:99:1d:1d:94:df:
a0:7f:99:d7:af:b2:d2:6e:f2:b0:8b:09:31:6d:8f:7a:32:67:
46:c7:e0:63:c6:c9:8d:09:04:2b:f2:25:65:b3:16:43:bc:a3:
7e:0d:78:63:59:95:d3:99:39:11:d4:2e:6c:b4:85:f6:fc:4b:
8a:b9:8e:bb:e8:8e:12:69:59:99:27:3c:77:1b:51:47:0f:f7:
c4:bb:18:cb:6c:88:9f:5d:a5:33:f6:25:57:81:b2:10:8a:e1:
e7:41:cd:49:6c:9a:0b:93:44:a6:19:7d:65:2e:c0:91:57:b4:
80:3d:24:dd:79:2d:25:0e:72:1b:fc:8c:04:81:b8:a0:f2:57:
04:01:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:45 2026 by rpki-client