
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa
File: 91CA6CBC740111EFB5E97021C4F9AE02.roa (raw, json)
Hash identifier: VUZOzVeu3Rmihqe+9bsoHbZ1D9W7VkSJow2zZcM/4pU=
Subject key identifier: 61:1E:B8:A3:FF:0E:7F:09:6D:DE:9C:3F:13:C2:00:A9:22:52:E1:AA
Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial: 0E34
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:57:46 +0000
ROA not before: Mon 18 Aug 2025 14:50:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 9255
IP address blocks: 151.192.0.0/21 maxlen: 21
151.192.8.0/21 maxlen: 21
151.192.16.0/21 maxlen: 21
151.192.24.0/21 maxlen: 21
151.192.32.0/21 maxlen: 21
151.192.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3636 (0xe34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Validity
Not Before: Aug 18 14:50:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4700a-8d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:21:d1:25:33:94:f5:6c:fa:04:a7:f5:b8:8a:
35:7c:81:d6:88:10:17:7f:de:6f:83:83:54:f0:83:
46:fc:26:b1:0b:92:5b:77:df:65:04:4f:7b:a3:56:
c0:14:01:c4:1a:17:3d:81:c4:68:03:59:6b:06:74:
20:c0:87:d6:e6:76:2a:9a:e7:12:85:98:44:d4:38:
a8:e8:69:9f:b1:ea:d5:82:86:16:12:e6:95:bd:5c:
a7:a5:c9:ef:85:57:88:3e:ff:04:d1:c4:5a:56:c6:
29:db:7b:be:cb:a8:e5:7c:35:12:0a:ef:f4:d1:67:
60:f8:22:57:6b:1c:62:0c:d9:5d:b7:ff:c2:7e:a3:
92:b0:13:a1:c9:35:ad:d8:aa:42:66:98:44:b7:85:
55:4a:9d:30:8f:6f:3f:ca:23:eb:b0:07:15:00:8a:
c0:b9:35:6e:83:c6:31:f4:68:df:1a:e1:ef:a1:5f:
38:b3:c3:1d:54:b4:07:3c:ee:7e:33:4c:30:1e:49:
4b:b6:0c:28:a0:4f:c1:07:0c:a5:12:73:8c:fe:08:
1b:d5:87:96:29:4a:f7:df:83:56:d9:f0:6c:b7:98:
9b:04:02:81:38:42:6d:3f:90:25:2d:f5:29:d7:93:
01:31:85:8b:68:33:7e:da:72:02:9e:e4:d6:a1:72:
37:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1E:B8:A3:FF:0E:7F:09:6D:DE:9C:3F:13:C2:00:A9:22:52:E1:AA
X509v3 Authority Key Identifier:
keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
151.192.0.0-151.192.39.255
151.192.48.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:24:12:e4:81:f6:fb:1d:37:83:d3:e4:e6:10:f6:bf:de:d8:
b2:03:c8:0f:79:8b:a4:0e:38:04:2c:de:25:e4:02:c0:5e:e9:
e4:ae:66:cb:95:38:95:8c:96:f4:54:e1:f6:5e:50:f2:68:39:
ea:4e:31:5b:dc:14:ae:98:31:72:01:ba:9e:27:91:cf:8b:ed:
6b:8b:3c:71:b2:d8:58:b7:89:78:23:34:d3:ad:7f:da:d1:9c:
38:77:62:e8:86:5d:1b:3b:55:9c:de:ee:3c:4c:ca:9a:1d:4f:
7b:45:c1:0b:b9:43:74:8b:14:02:7d:60:77:17:17:b5:2d:26:
00:14:d2:94:56:fb:61:51:87:e1:9d:ce:44:8f:e0:30:5c:08:
0b:83:21:51:b6:93:f5:19:5b:51:94:b4:2b:b3:44:46:a8:93:
58:8d:38:7f:0a:44:4f:b1:89:5c:7f:c7:9a:29:a2:ea:35:a8:
96:41:73:50:23:c6:97:e5:98:1e:59:4b:ea:9c:c8:31:f6:12:
59:83:be:21:0b:4f:d8:7f:7b:40:27:29:ba:48:a8:fc:0f:58:
74:6f:37:de:3f:ae:e5:7c:36:94:48:f3:02:8f:7b:dc:88:a5:
b4:14:8e:07:89:13:3e:23:4d:70:92:89:2a:4b:7d:d4:29:ab:
bf:13:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:30 2026 by rpki-client