
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/01AB053800E611F1BE6C33EC376F56BC.roa
File: 01AB053800E611F1BE6C33EC376F56BC.roa (raw, json)
Hash identifier: NK4d4bxFSxqhCZMER/9+DzybcTvJZmSYnB2R+fONbHw=
Subject key identifier: 43:10:1A:C9:74:90:D4:65:96:8B:15:12:CF:C5:9F:F4:3F:13:C3:EC
Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Certificate serial: 05
Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/01AB053800E611F1BE6C33EC376F56BC.roa
Signing time: Tue 03 Feb 2026 09:52:10 +0000
ROA not before: Tue 03 Feb 2026 09:52:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 142259
IP address blocks: 151.158.134.0/23 maxlen: 23
151.158.134.0/24 maxlen: 24
151.158.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Validity
Not Before: Feb 3 09:52:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6981c549-3fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:f8:07:7b:57:fa:a9:e6:49:cf:1f:8d:60:
a4:2c:13:2b:2f:76:a6:09:e7:60:73:23:84:d1:d9:
fa:21:e1:77:af:54:d3:57:04:b2:87:49:c6:b6:32:
53:85:6e:07:a0:9f:6a:05:07:b0:9c:bf:3e:ad:71:
b5:53:13:73:17:4b:18:52:fb:5d:b3:06:27:c4:98:
3c:a0:ea:9f:3a:38:77:1d:4f:f3:f9:88:73:6a:2c:
2a:be:99:48:8a:17:65:fa:31:5e:09:e8:a6:4b:bd:
ba:c7:d0:d7:8d:bf:39:76:00:d3:16:be:a3:cc:e1:
70:d5:f7:35:ba:2f:17:c4:5d:76:fd:dc:64:0f:ee:
13:07:95:93:9d:4d:4d:a3:70:a2:ff:e2:54:b3:a4:
22:56:84:80:38:1f:9c:32:73:cd:ea:f4:70:09:43:
26:72:f4:c2:96:47:13:11:12:9a:7f:01:42:e2:db:
01:ab:89:6e:83:76:4a:a6:34:6b:98:82:81:36:75:
be:3b:25:1b:ac:20:ad:70:cd:f0:ab:ba:d2:59:f4:
8e:66:18:10:13:69:d5:9a:f7:ab:6b:7e:71:ed:ac:
fa:02:9d:5c:bc:98:19:d3:c6:e9:e1:ec:28:28:38:
3c:d2:8f:65:10:59:ac:64:e0:86:51:3c:de:bc:c1:
cd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:10:1A:C9:74:90:D4:65:96:8B:15:12:CF:C5:9F:F4:3F:13:C3:EC
X509v3 Authority Key Identifier:
keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/01AB053800E611F1BE6C33EC376F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.134.0/23
Signature Algorithm: sha256WithRSAEncryption
04:01:0d:96:f8:1e:10:4b:29:ac:5b:69:9f:f5:b4:0b:3f:fb:
86:ff:ca:f9:b0:ef:31:a0:d7:cb:31:2d:38:31:f3:c4:f4:c3:
4f:4c:20:ca:a2:f7:5e:dc:f4:44:e5:42:6a:28:c4:35:b9:d2:
5c:33:7c:12:8b:3a:c2:b9:22:c0:b6:be:6a:af:e7:ae:6a:7c:
c0:a4:65:56:65:e7:cd:cd:cc:19:56:3f:df:df:b1:07:be:15:
7d:6a:53:ca:f4:37:5f:da:5f:6a:de:ee:ba:c9:56:4e:fe:18:
91:d8:67:70:a7:06:f3:d4:4e:81:72:16:77:81:7d:62:b7:93:
8b:d5:24:75:1d:ff:4f:2a:ff:ab:43:78:e2:34:ff:2f:82:c2:
ae:5a:3c:47:44:97:8b:ec:78:3f:01:53:33:91:1c:aa:25:47:
36:c4:8d:31:b4:a0:90:96:bf:5c:42:85:43:7a:42:77:7a:75:
8e:8d:f2:07:b4:2d:b9:bf:87:b1:14:99:ec:0a:24:e7:a6:45:
ad:6d:81:fa:01:33:9a:ff:86:6e:16:fd:38:e1:cc:6d:4d:be:
7e:3e:f8:2f:f5:5d:f9:f9:14:7b:84:c5:86:a1:5d:55:f7:78:
b7:92:10:23:e0:cb:5c:da:70:b8:5a:6f:3c:d3:90:8c:2a:32:
a4:1e:d9:53
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE2
NkQwMjExMC8GA1UEBRMoQ0RDNjkwODMyRjJEMTIzNURBQkYxRUYzMTdGMTFCNjk1
RUVCREE0RjAeFw0yNjAyMDMwOTUyMTBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5ODFjNTQ5LTNmZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCL7vgHe1f6qeZJzx+NYKQsEysvdqYJ52BzI4TR2foh4XevVNNXBLKHSca2MlOF
bgegn2oFB7Ccvz6tcbVTE3MXSxhS+12zBifEmDyg6p86OHcdT/P5iHNqLCq+mUiK
F2X6MV4J6KZLvbrH0NeNvzl2ANMWvqPM4XDV9zW6LxfEXXb93GQP7hMHlZOdTU2j
cKL/4lSzpCJWhIA4H5wyc83q9HAJQyZy9MKWRxMREpp/AULi2wGriW6DdkqmNGuY
goE2db47JRusIK1wzfCrutJZ9I5mGBATadWa96trfnHtrPoCnVy8mBnTxunh7Cgo
ODzSj2UQWaxk4IZRPN68wc2RAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQxAayXSQ
1GWWixUSz8Wf9D8Tw+wwHwYDVR0jBBgwFoAUzcaQgy8tEjXavx7zF/EbaV7r2k8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0UxQTY2RjE4MDBE
RTExRjFBRDg0QUQ4NDc1NkY1NkJDL3pjYVFneTh0RWpYYXZ4N3pGX0ViYVY3cjJr
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvemNhUWd5OHRFalhhdng3ekZfRWJhVjdyMms4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkQwMi9FMUE2NkYxODAwREUxMUYxQUQ4NEFEODQ3NTZGNTZCQy8wMUFCMDUzODAw
RTYxMUYxQkU2QzMzRUMzNzZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZeehjANBgkqhkiG9w0BAQsFAAOCAQEABAENlvgeEEsprFtp
n/W0Cz/7hv/K+bDvMaDXyzEtODHzxPTDT0wgyqL3Xtz0ROVCaijENbnSXDN8Eos6
wrkiwLa+aq/nrmp8wKRlVmXnzc3MGVY/39+xB74VfWpTyvQ3X9pfat7uuslWTv4Y
kdhncKcG89ROgXIWd4F9YreTi9UkdR3/Tyr/q0N44jT/L4LCrlo8R0SXi+x4PwFT
M5EcqiVHNsSNMbSgkJa/XEKFQ3pCd3p1jo3yB7Qtub+HsRSZ7Aok56ZFrW2B+gEz
mv+Gbhb9OOHMbU2+fj74L/Vd+fkUe4TFhqFdVfd4t5IQI+DLXNpwuFpvPNOQjCoy
pB7ZUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:48 2026 by rpki-client