
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
File: 5787CC96FB3411F0A8F597323D6F56BC.roa (raw, json)
Hash identifier: lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=
Subject key identifier: E9:AF:C9:25:57:A4:C8:F2:BF:A7:91:CF:DE:1A:28:66:B8:B8:80:A5
Certificate issuer: /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Certificate serial: 1A
Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
Signing time: Sun 01 Mar 2026 05:42:23 +0000
ROA not before: Tue 27 Jan 2026 03:58:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142232
IP address blocks: 151.158.70.0/23 maxlen: 23
151.158.70.0/24 maxlen: 24
151.158.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Validity
Not Before: Jan 27 03:58:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d1bf-b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:d3:34:12:74:fd:5d:b9:1f:2e:e4:26:3e:
26:54:5b:43:92:22:9d:12:e2:02:ef:b5:37:87:95:
bf:3b:e6:26:b8:a1:88:2e:34:7d:37:9f:83:1b:88:
3b:ce:6b:8c:0c:5f:d9:f3:ae:e0:d2:c8:ac:f4:17:
60:a3:63:83:87:50:fb:50:32:a0:c0:54:5d:64:cc:
6f:c5:48:77:05:9c:01:62:da:d2:8d:da:fe:31:34:
d8:cd:63:b1:a0:7c:93:0e:9b:28:bb:11:be:2d:e7:
52:9f:f0:18:6f:85:15:22:62:ed:33:3d:e5:dc:c9:
8b:a3:b8:1b:d5:ae:ad:59:00:ac:e5:98:69:eb:d2:
4f:fb:3f:85:3e:42:a4:75:b7:b9:2f:bf:5f:45:08:
ee:b7:d2:0d:84:e1:d9:fa:86:6c:fc:19:66:4c:48:
0a:38:7b:4f:2e:bf:84:fb:03:3b:99:17:c9:02:f0:
44:21:93:ad:82:0d:b4:5c:2a:2b:77:ff:8d:f4:9e:
53:d7:c0:84:b1:01:47:9d:8c:6e:a4:85:2f:c7:c5:
ff:7a:6e:33:8b:df:55:64:69:e5:21:98:9b:7c:51:
86:c9:cd:31:b8:18:33:88:64:98:e9:b9:5e:9f:ff:
f5:24:3c:e8:5b:4b:ba:80:c1:ca:c4:20:3d:cf:02:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:C9:25:57:A4:C8:F2:BF:A7:91:CF:DE:1A:28:66:B8:B8:80:A5
X509v3 Authority Key Identifier:
keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.70.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:e5:c0:83:f1:9f:ec:58:23:6c:ff:49:40:10:2f:93:6c:b0:
97:5e:0f:d6:c6:cb:34:5f:7d:83:be:d7:52:bf:c2:01:02:97:
6d:9f:59:66:ee:fd:4a:d1:10:c0:ea:c2:f3:22:f1:20:64:44:
3b:9f:93:42:bf:69:f3:c1:65:17:e8:fb:aa:db:05:2c:5c:70:
42:46:0d:30:a7:d9:f0:4e:cd:b5:51:d2:48:a8:8e:3b:c3:08:
4a:27:e0:23:e8:a8:4c:bf:23:30:c3:a9:28:0e:69:b6:31:37:
3f:99:44:5b:e1:82:36:34:d1:32:cd:48:da:8a:41:29:53:b8:
d1:be:96:b1:4b:5f:bb:40:ad:a8:79:eb:7e:4c:45:4a:d7:5e:
59:2a:2f:05:c5:b7:94:4b:48:51:7e:35:7f:d6:fd:17:c4:a6:
cc:48:18:69:d5:73:c7:06:cc:52:80:e2:17:9f:b9:b5:70:2e:
04:f8:3c:00:81:5f:1e:13:4d:00:12:a2:65:3f:df:e9:76:6d:
e9:77:f2:9e:17:9d:ae:14:74:12:34:21:2d:84:98:f3:09:57:
9b:a4:61:1a:54:ce:03:fb:a6:80:91:9b:47:40:2c:ae:c7:a8:
1c:ed:78:94:9f:08:5a:1a:c8:03:19:c2:0d:6c:85:18:13:56:
33:f2:82:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:19:42 2026 by rpki-client