
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/40E6AE74FAAA11F0BBD6BD435A6F56BC.roa
File: 40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (raw, json)
Hash identifier: rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=
Subject key identifier: 56:7D:E0:A9:EE:6C:1B:62:02:5E:AA:B5:11:26:A2:18:41:75:0C:17
Certificate issuer: /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial: 23
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/40E6AE74FAAA11F0BBD6BD435A6F56BC.roa
Signing time: Sun 01 Mar 2026 05:47:54 +0000
ROA not before: Mon 26 Jan 2026 11:29:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136141
IP address blocks: 151.158.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Validity
Not Before: Jan 26 11:29:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d30a-9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:85:ac:22:64:42:2c:e0:66:7f:67:09:e4:
3a:38:11:e0:82:41:5e:99:21:c3:74:4e:4d:32:ef:
16:02:29:69:76:24:c2:0e:63:e7:85:19:68:66:fa:
3c:0b:e5:14:f3:3a:f0:08:c9:98:55:65:dd:31:b7:
f0:d7:47:17:32:05:e3:5d:9f:1e:d4:a1:22:f8:bf:
b1:e5:10:48:8f:ca:e8:30:d6:3e:e6:0b:28:d0:95:
e3:b4:63:18:e7:3e:a8:f9:b7:dd:f8:a9:c7:59:e7:
64:88:e0:87:56:8f:fc:f6:cb:09:71:61:f4:bc:74:
ec:99:5f:ac:20:8c:21:6d:9f:20:cd:83:af:54:8b:
0a:7e:27:b8:7e:37:1e:7e:a5:9b:42:97:8e:0a:74:
95:40:6d:16:67:ec:6a:93:fd:2c:e9:78:46:7a:b4:
69:72:ee:9f:98:91:f3:7a:61:ee:4c:dd:9c:63:6c:
f4:21:45:a2:95:93:1f:f7:2f:2d:75:43:63:e6:8e:
d2:52:0c:7f:c9:44:f0:c8:eb:65:1d:93:5f:8b:e4:
36:2a:3b:ce:3d:34:24:57:2c:a2:54:70:7a:5b:83:
63:bf:80:88:e1:2b:34:b6:be:6c:ef:78:0d:b6:23:
3f:bb:2d:1f:eb:c9:2e:4f:15:4a:d3:3d:e8:94:5e:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:E0:A9:EE:6C:1B:62:02:5E:AA:B5:11:26:A2:18:41:75:0C:17
X509v3 Authority Key Identifier:
keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/40E6AE74FAAA11F0BBD6BD435A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.51.0/24
Signature Algorithm: sha256WithRSAEncryption
37:36:ea:42:8d:b1:2a:f8:5c:1b:16:d8:e3:93:72:a8:4a:c8:
74:35:84:9e:34:42:bc:cf:94:da:0f:19:db:7c:59:44:e8:0b:
4c:27:86:40:5c:0a:a8:b5:20:c7:04:1e:e2:cc:9a:50:45:b4:
a2:c6:c7:78:13:fb:a7:63:1b:44:c1:3a:e5:30:06:0b:61:17:
b6:f4:17:d3:73:ee:6d:c2:1b:8d:06:74:4f:00:56:fa:5e:d2:
2a:f5:55:73:95:08:75:4a:98:8f:7b:67:61:80:77:d2:04:7d:
2a:f8:94:89:30:8b:74:49:96:a6:80:e4:5d:1f:85:c0:3c:dd:
07:27:4a:ce:d9:94:cb:f0:1e:dc:82:23:4e:ec:1f:83:41:03:
b6:b4:55:2b:34:07:b5:8a:68:6a:ed:70:df:12:c2:4f:8f:db:
c6:50:a0:d1:8d:38:0c:87:96:f7:e8:13:de:b7:6a:f9:51:ca:
eb:a4:7b:3f:7f:9f:87:8f:8e:e7:bb:e1:e1:74:66:d1:89:f4:
fc:98:19:f9:ac:ca:fc:0a:3d:0d:23:f1:62:f1:6f:b1:e8:ca:
ea:0e:6f:47:17:00:60:6e:2f:59:e0:8d:7f:3b:3e:39:78:e2:
ec:47:07:80:e8:d2:c6:2a:60:d8:39:34:b8:de:d5:07:2a:44:
c2:b3:22:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:22:46 2026 by rpki-client