
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
File: 8C7D223C2DAB11EF88127264C4F9AE02.roa (raw, json)
Hash identifier: 18T8dqrb31atCAaKR8ddYqk4Fx8QZQe+kHL0u3VnNZM=
Subject key identifier: 9A:C1:E5:3B:C1:E5:DB:7E:8D:EB:19:23:40:E8:D0:54:CC:09:F6:86
Certificate issuer: /CN=A91A13A6/serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Certificate serial: 0197
Authority key identifier: C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
Signing time: Wed 25 Feb 2026 03:23:55 +0000
ROA not before: Wed 25 Feb 2026 03:23:55 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 10111
IP address blocks: 157.10.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A13A6, serialNumber=C47589962ED0D3892622BE5B7B8BEEFE8CE788A7
Validity
Not Before: Feb 25 03:23:55 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=699e6b4a-3fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:cb:bd:d0:41:9b:6f:4d:05:80:a7:e7:25:
57:20:89:d6:b9:f7:f2:7f:e1:7e:1d:58:be:0a:34:
e8:d8:98:6f:ec:ae:a8:bf:94:a9:b9:d7:59:85:35:
76:b4:0c:d5:35:40:d8:60:7e:d3:c1:28:af:f2:de:
22:1a:ba:08:93:fa:91:ee:7f:f6:7c:38:26:79:23:
6d:da:73:6e:ea:2b:50:f3:ca:7f:1c:59:67:a0:22:
3a:6f:64:b8:03:7b:47:a3:b3:cb:c7:3a:16:b9:d7:
14:20:59:03:6a:b1:7e:dd:90:5c:a1:14:7f:24:22:
81:95:41:34:d7:c7:78:99:1c:bb:a5:81:28:1e:74:
7c:5d:64:8e:61:1c:c6:f5:73:9e:9c:60:07:22:89:
00:8f:94:64:5a:0a:da:8f:b2:98:2f:ad:6e:ee:ab:
9b:c0:e4:06:0e:a6:7f:03:2d:45:25:53:d9:4a:0e:
f8:be:bc:ec:06:e8:91:76:40:3a:86:b3:f2:47:36:
8c:72:21:a8:df:95:66:8d:96:e8:69:4b:a1:aa:fe:
3c:56:80:11:39:ed:35:1e:26:bf:b2:9c:52:a1:26:
2f:92:fd:bd:12:71:bc:9c:b1:9a:ed:47:da:fd:49:
5d:84:0f:8f:a7:e5:a7:6a:f2:81:36:47:b3:66:9e:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C1:E5:3B:C1:E5:DB:7E:8D:EB:19:23:40:E8:D0:54:CC:09:F6:86
X509v3 Authority Key Identifier:
keyid:C4:75:89:96:2E:D0:D3:89:26:22:BE:5B:7B:8B:EE:FE:8C:E7:88:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/xHWJli7Q04kmIr5be4vu_ozniKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xHWJli7Q04kmIr5be4vu_ozniKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13A6/80794C9AC08C11EEBD805B24C4F9AE02/8C7D223C2DAB11EF88127264C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.105.0/24
Signature Algorithm: sha256WithRSAEncryption
60:8e:83:67:3f:43:52:d6:96:04:04:50:b1:b8:29:f7:b1:0e:
4f:55:2d:45:81:4a:d7:73:cb:a4:6e:89:7f:c1:45:b7:6e:f9:
9a:28:f8:d4:f8:b3:29:20:4f:20:48:11:49:e7:d2:b0:69:ae:
f1:b3:b9:cd:98:a4:8c:f5:ce:fb:6f:12:af:3a:dc:1f:22:2d:
c3:da:67:ab:37:b4:24:3b:b0:de:41:73:6c:11:7a:99:58:db:
d9:6e:71:04:a0:0f:7e:77:70:4b:d0:35:c5:10:cf:4f:8c:42:
16:95:4a:e3:ef:6d:c7:08:67:b4:56:e2:a3:1c:09:1e:3d:94:
09:1d:01:bb:50:81:81:f5:28:15:a9:2d:20:c5:f1:ed:97:04:
75:b6:14:fe:07:b3:d3:f7:19:14:13:38:96:c6:a5:3f:f9:a5:
34:e6:3b:50:59:a3:f8:26:2f:af:00:e2:91:b6:d8:72:d2:7f:
18:de:3e:0e:94:2c:b3:65:03:f2:97:ef:5b:5c:1a:b1:3f:f1:
fe:1b:a6:50:22:dd:32:ad:e3:ad:ff:58:24:2f:b8:fe:af:aa:
71:3b:4d:fc:bb:d2:4d:ed:73:59:7e:fd:cb:b2:98:ea:88:8d:
d8:b6:9a:de:5e:15:10:37:b4:c4:ec:88:de:3a:1e:9a:38:2c:
69:76:96:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:28:44 2026 by rpki-client