
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa
File: 4E2CAC386E8711EF8521ED6FC4F9AE02.roa (raw, json)
Hash identifier: UkaIgEQ/KJbKOWddwnVWeEntsfiHyI0qHu/TpvJIg5Q=
Subject key identifier: 6C:5F:4F:36:F9:8D:B7:24:2E:82:13:AA:EF:AA:BA:5D:89:32:3D:23
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 0198
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa
Signing time: Wed 25 Feb 2026 03:23:56 +0000
ROA not before: Wed 25 Feb 2026 03:23:56 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140627
IP address blocks: 157.10.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Feb 25 03:23:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=699e6b4c-297e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:8a:1f:93:24:de:e4:f3:7c:40:27:b1:fc:
0f:b2:8d:ff:26:ee:7e:68:c7:d4:86:d4:13:37:97:
2e:d7:2e:3c:b0:05:54:b9:81:4d:5b:75:21:b1:c5:
7f:fc:64:9c:f6:01:9b:89:8f:ff:3d:d5:90:ff:04:
d9:05:1a:f3:65:bd:35:2c:e1:ea:88:b7:58:0f:4e:
4d:78:3d:1d:3b:14:ce:6c:94:07:8e:87:ab:ba:3b:
e2:04:e8:e2:62:fa:fe:d8:de:b2:08:b2:bc:a2:e7:
11:95:14:6c:c7:57:ac:2a:86:9d:d5:a2:07:9b:9b:
11:b2:68:83:e1:8f:da:fe:37:44:c2:5b:36:6e:43:
82:a3:c1:62:e2:31:1d:9f:67:a7:89:f8:ae:4e:17:
a3:16:76:7e:a7:80:60:1e:fa:ae:35:78:97:36:f1:
93:76:9e:1a:c8:70:15:eb:da:4b:7d:05:df:59:58:
88:94:97:fa:b4:c6:98:09:ff:06:e3:ca:47:b5:98:
a1:f0:88:8f:fd:55:75:f0:7a:a5:19:98:36:82:02:
1c:72:d2:9d:df:d3:f3:5a:7c:9e:36:cb:3c:e2:60:
bf:01:56:b0:aa:38:13:63:ae:46:99:77:f5:8e:2a:
c8:16:25:d4:d7:a2:e5:d9:a2:20:50:e5:9a:b5:4f:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5F:4F:36:F9:8D:B7:24:2E:82:13:AA:EF:AA:BA:5D:89:32:3D:23
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/4E2CAC386E8711EF8521ED6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.104.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9b:c2:15:06:2e:b3:15:bb:05:ba:88:a0:91:ba:be:57:fd:
b4:6f:8d:9e:59:67:25:db:2f:48:23:05:f6:db:18:50:5b:6e:
0b:b3:66:93:88:28:4e:62:98:ac:11:ef:35:3d:86:64:be:66:
e3:fb:f4:e9:18:0e:bb:ae:6b:d3:88:24:e1:db:d7:0a:ae:b0:
27:4b:df:48:f6:f3:8a:84:f4:d3:c4:e4:8e:a3:8f:4b:fd:3d:
2d:c7:de:cb:6b:6b:df:51:66:e4:25:9f:8e:21:bc:2e:17:68:
65:b3:c8:c4:36:53:27:f3:01:eb:4c:39:41:01:e3:3f:f0:b1:
2b:06:bd:95:38:0f:36:55:f3:86:0a:d4:f0:9a:6d:03:df:56:
5f:fc:04:0c:7a:7f:92:7d:a7:89:54:62:09:81:dd:b8:a5:f4:
f5:52:c2:4a:db:db:a1:df:9e:b6:ac:68:54:f8:47:f1:ab:a8:
49:a1:7d:c5:78:ff:8b:23:7a:67:8f:6c:b1:30:47:86:d5:89:
e7:bd:0e:b2:9a:79:80:6d:fe:c3:fd:cf:29:51:de:34:84:a9:
41:75:0d:dc:41:8f:30:14:b9:1f:d1:c3:af:cf:85:e6:11:6c:
53:e0:bf:2e:e3:29:b3:93:5f:f9:3f:5c:ab:62:7d:5c:ee:9c:
a0:2e:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:11 2026 by rpki-client