
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9541152014DD11F1B59CF9DA123D8C67.roa
File: 9541152014DD11F1B59CF9DA123D8C67.roa (raw, json)
Hash identifier: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=
Subject key identifier: 31:4F:5B:53:37:79:74:DD:DD:56:6D:09:0E:16:CD:BD:08:35:70:13
Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Certificate serial: 16
Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9541152014DD11F1B59CF9DA123D8C67.roa
Signing time: Sun 01 Mar 2026 05:40:44 +0000
ROA not before: Sat 28 Feb 2026 19:42:15 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 151648
IP address blocks: 151.158.212.0/23 maxlen: 23
151.158.212.0/24 maxlen: 24
151.158.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:42:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C
Validity
Not Before: Feb 28 19:42:15 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a3d15c-83a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c0:51:f2:e0:71:75:ee:9c:6e:70:bd:a9:32:
8c:4e:d2:fe:9a:20:bf:c5:e8:15:c2:53:b1:64:a2:
9b:7b:64:ae:0f:82:e6:ac:07:d6:99:3a:94:82:02:
d2:03:e6:16:b2:ed:d2:f9:3c:97:6f:37:a2:9b:e7:
0c:1d:d0:a7:90:65:84:99:59:81:15:19:2a:fd:2c:
61:8f:be:d6:5f:aa:b1:2c:07:66:0d:db:1e:2a:b1:
da:36:ac:d3:18:00:0c:0e:02:38:47:85:fd:be:e9:
54:7a:ad:44:97:90:94:66:ac:c0:19:d8:cc:0b:5b:
4a:22:95:a8:0b:df:14:8d:77:4c:f7:d2:af:24:1c:
98:3f:2f:5a:99:a0:41:db:18:d0:4a:c6:b2:97:0b:
43:28:92:61:7f:13:bc:ec:7b:78:f6:18:81:94:f4:
7b:7a:50:33:ae:01:9e:1b:6f:c2:f0:77:9a:1f:03:
2c:3a:ed:4e:a5:a4:97:86:0e:c7:d0:5f:7c:60:14:
94:19:87:c4:e4:c7:72:2a:20:29:28:ab:63:a3:3f:
7c:dd:f6:03:87:7d:d9:dd:7a:22:e2:b0:73:5d:2b:
71:cb:55:0c:9f:97:b0:36:6e:b8:eb:91:ca:3c:be:
5c:77:a1:f4:df:57:66:7a:5c:6c:02:94:de:f2:50:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4F:5B:53:37:79:74:DD:DD:56:6D:09:0E:16:CD:BD:08:35:70:13
X509v3 Authority Key Identifier:
keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9541152014DD11F1B59CF9DA123D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.212.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:f1:62:88:2a:bb:38:87:06:ad:ab:69:bc:8c:6f:2a:a0:f8:
18:ff:b3:1f:45:55:1e:83:da:ad:f7:6b:e9:0c:40:79:50:3e:
f5:00:96:60:a2:11:7a:b4:6f:88:6f:86:79:e3:c5:b9:d6:d3:
6c:84:7a:64:8a:0d:0a:43:15:9d:f6:9d:2f:9d:db:79:2b:62:
b2:d1:95:73:5c:15:0b:80:ab:c1:3f:e5:1e:8c:93:61:b0:6a:
a6:1e:3f:d0:2f:da:00:c9:f2:d1:84:a7:fa:6e:24:46:60:d3:
92:8c:5d:18:e0:c3:40:60:42:7a:17:27:3c:cd:6d:dc:70:ec:
c5:35:86:96:a7:31:43:d4:9c:26:f8:95:ba:05:d8:81:a4:28:
18:ee:23:87:7c:95:f1:d8:ed:ee:39:b5:11:2c:30:9a:dc:c6:
8f:93:50:8d:25:34:a7:d6:e8:b9:55:c5:3b:89:64:77:25:5d:
e7:ef:05:43:4f:43:fe:a9:44:9d:99:fc:b4:6d:33:98:12:dc:
cc:92:4d:7d:60:ef:c4:17:d5:0a:d4:c4:73:e9:85:b5:b1:9d:
04:22:8a:e9:97:47:95:d5:9a:20:59:66:9d:1a:05:c8:a1:36:
6b:5a:a7:f0:7f:b6:7a:65:10:0f:1f:d3:7c:85:7d:61:ba:cd:
86:1f:1e:56
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
Mjg4NjExMC8GA1UEBRMoRjY4M0YyMjI0NDhDNkE0ODVERDhGRURGRTFFOURDNzQ0
MjEzRkEzQzAeFw0yNjAyMjgxOTQyMTVaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMTVjLTgzYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3wFHy4HF17pxucL2pMoxO0v6aIL/F6BXCU7Fkopt7ZK4PguasB9aZOpSCAtID
5hay7dL5PJdvN6Kb5wwd0KeQZYSZWYEVGSr9LGGPvtZfqrEsB2YN2x4qsdo2rNMY
AAwOAjhHhf2+6VR6rUSXkJRmrMAZ2MwLW0oilagL3xSNd0z30q8kHJg/L1qZoEHb
GNBKxrKXC0MokmF/E7zse3j2GIGU9Ht6UDOuAZ4bb8Lwd5ofAyw67U6lpJeGDsfQ
X3xgFJQZh8Tkx3IqICkoq2OjP3zd9gOHfdndeiLisHNdK3HLVQyfl7A2brjrkco8
vlx3ofTfV2Z6XGwClN7yUK4VAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUMU9bUzd5
dN3dVm0JDhbNvQg1cBMwHwYDVR0jBBgwFoAU9oPyIkSMakhd2P7f4encdEIT+jww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2Lzg2MzI4MDk4MTBB
MzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWtoZDJQN2Y0ZW5jZEVJVC1q
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvOW9QeUlrU01ha2hkMlA3ZjRlbmNkRUlULWp3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
Mjg4Ni84NjMyODA5ODEwQTMxMUYxQkU3MkI1QUYzOTNEOEM2Ny85NTQxMTUyMDE0
REQxMUYxQjU5Q0Y5REExMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGXntQwDQYJKoZIhvcNAQELBQADggEBAK7xYogquziHBq2rabyMbyqg
+Bj/sx9FVR6D2q33a+kMQHlQPvUAlmCiEXq0b4hvhnnjxbnW02yEemSKDQpDFZ32
nS+d23krYrLRlXNcFQuAq8E/5R6Mk2GwaqYeP9Av2gDJ8tGEp/puJEZg05KMXRjg
w0BgQnoXJzzNbdxw7MU1hpanMUPUnCb4lboF2IGkKBjuI4d8lfHY7e45tREsMJrc
xo+TUI0lNKfW6LlVxTuJZHclXefvBUNPQ/6pRJ2Z/LRtM5gS3MySTX1g78QX1QrU
xHPphbWxnQQiiumXR5XVmiBZZp0aBcihNmtap/B/tnplEA8f03yFfWG6zYYfHlY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:19 2026 by rpki-client