
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/51CC36BAC91811EF9DBC1A87C4F9AE02.roa
File: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (raw, json)
Hash identifier: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=
Subject key identifier: 2D:65:14:82:0B:23:5E:F1:E9:BE:AF:D8:5E:4A:4C:CC:7C:62:46:14
Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Certificate serial: 01C2
Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/51CC36BAC91811EF9DBC1A87C4F9AE02.roa
Signing time: Fri 03 Apr 2026 04:36:21 +0000
ROA not before: Fri 03 Apr 2026 04:36:21 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 147059
IP address blocks: 157.10.28.0/24 maxlen: 24
157.10.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33
Validity
Not Before: Apr 3 04:36:21 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69cf43c5-a522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:02:9f:fd:d7:d3:44:45:f4:23:33:0b:15:
31:44:78:7a:88:b3:96:88:01:a1:f1:9e:fa:8a:5b:
f1:ef:d6:c9:b1:3e:c5:34:dc:62:6a:3b:e0:0e:00:
69:91:71:57:3d:60:86:46:4e:b6:71:dd:fb:8c:05:
4b:72:97:8c:54:cb:fa:fa:ae:ee:f1:ad:bd:85:52:
b6:ea:52:b8:44:01:8f:bc:20:72:39:19:cc:1e:43:
02:45:7c:5d:28:4c:54:91:5e:f9:80:e4:ef:60:63:
38:b4:7e:85:25:43:12:a3:ce:7d:84:b1:f3:f6:90:
53:2f:14:f2:c8:5b:34:b7:c3:f9:c7:f9:a5:4e:a0:
b1:4e:d0:d5:00:c2:27:0f:4d:d1:74:78:93:cd:65:
1e:22:19:1e:eb:d6:e9:6b:c2:55:53:69:11:92:3c:
fe:de:74:2d:aa:3f:fe:59:bd:70:a3:a8:6a:71:d9:
67:b4:f4:b0:ef:00:89:f6:d6:48:ef:e8:87:83:3c:
17:0d:de:5f:79:5a:04:6b:aa:9b:17:1b:40:2b:8b:
87:4e:d9:5d:18:38:b6:43:b2:cd:04:6b:cc:2f:78:
4d:2c:c2:92:cc:ae:21:66:9b:10:f9:ce:3f:32:d7:
1f:91:35:8b:49:e9:b3:1e:4a:d6:79:99:d8:f0:71:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:65:14:82:0B:23:5E:F1:E9:BE:AF:D8:5E:4A:4C:CC:7C:62:46:14
X509v3 Authority Key Identifier:
keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/51CC36BAC91811EF9DBC1A87C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.28.0/23
Signature Algorithm: sha256WithRSAEncryption
93:56:0b:21:cf:f6:0a:96:df:f4:36:da:74:92:db:6b:28:6d:
82:fd:7f:d3:41:66:2d:80:32:61:0f:d6:f8:b9:82:bc:2c:38:
37:57:f7:d0:e3:46:81:7a:cc:2f:36:f4:36:42:4a:e0:89:ee:
15:23:a9:b1:1b:b0:f4:1e:8a:1d:f0:df:a7:3d:4a:19:a4:b6:
09:35:e0:c9:d6:d6:f0:8c:80:92:88:7a:d7:8a:6b:a7:2a:a8:
1d:44:1d:6d:71:4b:5d:69:77:82:e8:0d:83:1c:8d:79:06:40:
b5:4a:80:0e:bc:6c:71:05:aa:45:01:9d:4d:7f:bc:bd:3b:91:
91:58:2f:71:a4:d1:01:08:b4:32:2e:c7:ab:46:92:ab:5f:f0:
52:e9:a0:09:d3:35:b6:b5:66:c2:28:9f:60:d7:35:10:25:0e:
c7:1e:90:3e:a7:22:38:6e:b8:d1:69:b1:b1:64:9f:da:5f:de:
dd:67:9c:12:06:8f:c7:17:4e:5a:4d:2b:27:a2:31:d5:a7:92:
ec:10:b3:e6:58:fe:5f:6f:d5:72:60:a4:b2:22:f3:e9:93:13:
ea:b7:4f:f8:92:a4:ce:e0:33:3c:f7:08:2c:df:fb:51:ca:c2:
bf:bc:ad:32:fe:6d:f6:6a:34:66:b9:5d:df:f3:44:4e:8d:a7:
84:e2:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:46 2026 by rpki-client