
$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/ECF1FD7E129011F18378F4EA3A3D8C67.roa
File: ECF1FD7E129011F18378F4EA3A3D8C67.roa (raw, json)
Hash identifier: DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=
Subject key identifier: FE:56:5B:11:0B:C9:E6:FE:1C:5E:72:2E:A5:E9:64:78:67:C8:6D:30
Certificate issuer: /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial: 0B
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/ECF1FD7E129011F18378F4EA3A3D8C67.roa
Signing time: Sun 01 Mar 2026 05:34:44 +0000
ROA not before: Wed 25 Feb 2026 21:28:28 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 149292
IP address blocks: 151.158.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:43:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Validity
Not Before: Feb 25 21:28:28 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a3cff4-c794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:69:5d:56:05:5f:95:fb:48:b7:66:20:8a:42:
c9:56:fd:94:8a:c0:7d:05:09:7b:12:a4:50:2d:6c:
15:67:f7:44:17:4f:b5:0f:83:f0:14:fd:99:bf:34:
57:56:5e:61:98:f3:ab:ef:3a:b6:b7:ef:dc:d7:f5:
4f:6a:81:1e:d9:8d:c1:d2:2f:b5:28:3c:72:74:1a:
bd:b6:9a:2f:d1:21:a3:27:98:4e:1f:4f:a9:3b:4c:
f9:a9:97:fa:d1:0b:a1:5a:55:d7:01:18:d6:bc:50:
e3:72:53:53:8c:35:bb:e9:97:97:e0:82:bc:12:a1:
7a:ea:e7:21:a9:a0:b5:50:84:0c:a7:49:77:a4:86:
48:af:98:60:f8:07:1b:b6:dc:b9:64:e2:0c:db:6b:
37:3b:12:59:07:30:c3:12:ee:07:3c:7e:7d:44:87:
7d:e7:5c:49:df:49:24:1e:49:a3:cc:46:f4:c1:f9:
c3:77:7b:1e:45:b8:b3:04:11:62:67:44:0c:56:21:
83:35:60:b4:81:d4:2e:e9:15:12:13:5c:27:01:44:
f6:2c:38:df:6e:d0:22:19:e1:54:51:3a:19:db:bb:
78:3b:7b:10:00:d0:66:ee:13:4a:8d:1e:4e:f7:77:
50:5f:f9:10:7b:23:3d:32:36:59:b3:e2:49:0f:24:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:5B:11:0B:C9:E6:FE:1C:5E:72:2E:A5:E9:64:78:67:C8:6D:30
X509v3 Authority Key Identifier:
keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/ECF1FD7E129011F18378F4EA3A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b4:b4:9c:8f:82:c7:f1:2c:43:71:d7:5c:21:d0:cc:50:28:
4e:39:10:67:8b:6d:8d:03:2f:bb:1c:48:5c:3e:05:c6:f6:3b:
07:54:f8:16:9b:47:2b:f3:6f:ba:82:3e:c5:80:3c:75:40:73:
2e:a4:06:1d:cf:b6:95:04:1a:be:76:03:74:29:d7:8a:fa:a9:
be:e8:7e:27:33:ba:77:3e:94:62:45:31:5b:01:0b:9c:b4:86:
c4:d5:31:21:19:13:51:45:60:52:70:a5:2f:f9:bc:86:4c:12:
ee:b3:4b:54:cf:59:b7:9d:83:f8:3f:65:c6:1e:a1:8d:31:2e:
10:5f:d3:32:a6:6e:cc:da:eb:0b:16:15:77:8a:62:21:6b:c4:
49:05:c2:60:d5:b8:d6:a8:47:80:9a:0f:19:f2:b3:7b:25:d7:
ff:33:fd:75:61:20:3e:09:67:8f:e2:a0:aa:da:97:1c:81:ad:
b9:b7:11:14:ce:97:f9:2a:d3:67:3f:13:91:fa:cd:45:5a:7b:
d0:ef:2a:0a:9e:07:19:5f:b4:ec:54:7e:a2:70:5d:89:9a:9b:
06:cc:b6:8b:a7:05:68:1f:a5:5d:cd:fe:c3:6e:1f:73:b2:1c:
fe:e3:a9:3d:74:78:48:e7:4c:ae:cc:f7:a5:f0:2d:11:75:2a:
a2:cd:1a:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:37:45 2026 by rpki-client