
$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/8DCB2AB465C411F1A2C791C58147A888.roa
File: 8DCB2AB465C411F1A2C791C58147A888.roa (raw, json)
Hash identifier: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=
Subject key identifier: 7D:A3:9D:28:21:6A:DA:72:62:51:E6:CF:54:49:70:D8:34:4A:31:AE
Certificate issuer: /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial: 03
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/8DCB2AB465C411F1A2C791C58147A888.roa
Signing time: Thu 11 Jun 2026 18:37:09 +0000
ROA not before: Thu 11 Jun 2026 18:37:09 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137081
IP address blocks: 151.158.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Validity
Not Before: Jun 11 18:37:09 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a2b0055-3dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:2d:8d:2d:a1:dc:ba:34:f4:8e:02:dc:7d:
06:14:3c:9b:9c:57:43:05:7c:b7:36:78:e7:1d:7d:
eb:cd:7f:92:71:9e:cb:ac:21:89:2d:38:45:df:9c:
74:4b:91:2b:91:fd:84:aa:37:21:5f:f5:06:9f:5e:
a2:68:3d:ab:59:be:a5:ad:3d:1c:bb:19:8c:07:9a:
08:a5:0d:58:09:e8:e5:26:b0:67:34:11:28:07:af:
14:bf:30:57:90:39:54:f9:13:33:32:38:d5:87:b1:
79:a2:63:db:d7:31:33:44:5e:18:2e:ed:f7:49:55:
01:07:e3:1c:de:05:f2:a4:c9:d2:b7:1b:3b:f1:dc:
9d:93:79:ab:97:0c:fe:f8:d8:98:3e:55:f9:d7:ae:
1b:d6:f9:64:98:26:80:d0:90:ac:e6:91:02:a9:7e:
b5:25:0f:a0:1f:ed:ce:9f:f6:7d:34:08:ea:67:cc:
0f:9c:ad:d3:3a:30:cc:6e:79:87:72:e8:39:6a:b2:
a0:85:65:52:a4:73:c5:52:79:5a:0a:e1:b3:3e:07:
32:d6:8e:06:08:34:64:3b:da:e9:bf:fd:fa:58:72:
0b:8e:f3:6a:d7:be:16:87:15:16:66:32:98:e1:21:
03:c1:f5:ec:80:7f:ea:7f:4d:6e:86:43:ed:35:63:
29:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A3:9D:28:21:6A:DA:72:62:51:E6:CF:54:49:70:D8:34:4A:31:AE
X509v3 Authority Key Identifier:
keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/8DCB2AB465C411F1A2C791C58147A888.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:79:e8:a6:87:96:23:8e:39:7a:fc:7c:85:bc:a0:d8:66:23:
b8:fd:76:c4:01:8f:ad:6a:7d:36:9e:f9:61:5e:89:8a:34:bc:
ab:b9:56:96:74:ee:1f:38:5a:3b:42:ac:06:41:f8:0a:86:5e:
c6:8a:ff:b4:ee:e6:fc:1d:3d:f1:74:68:f6:ad:ad:e5:95:1d:
a1:e5:57:a1:05:0a:b2:1f:5b:42:f4:23:a1:5d:0b:22:65:ed:
30:6b:5d:ba:d4:5b:27:86:49:42:7d:8d:4c:f1:98:3c:e3:85:
0c:92:91:56:aa:45:95:4a:bc:ab:5b:64:05:9d:3f:bd:d1:0f:
4b:51:a2:44:f2:2f:5f:02:65:8c:fe:12:60:4c:48:e3:8e:90:
a9:14:55:c4:2c:5d:0c:46:7b:b2:e2:13:0a:ca:06:5f:4c:47:
97:43:b6:17:27:bd:5a:b6:d9:0f:8c:5f:6d:db:a5:5c:43:d6:
a8:f7:3f:55:d4:28:03:85:c3:40:ad:3c:9b:5c:59:92:0b:c7:
fc:4b:2d:2a:19:fb:4a:58:66:bc:a5:6f:da:e9:82:fd:d6:ec:
04:95:08:3a:55:17:31:a0:e9:26:91:4e:56:01:ff:44:88:c7:
67:78:79:b3:da:f2:b6:29:48:8b:15:2d:8a:20:c4:3e:63:90:
36:9a:d1:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:20:41 2026 by rpki-client