
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
File: A9925838F47E11F092821EB06E6F56BC.roa (raw, json)
Hash identifier: HVLb7YcTy6FtSdFKu4O67iu7/AW30GmLNr7zoREuOm8=
Subject key identifier: 74:88:FD:7B:64:ED:34:42:DC:85:F4:0A:89:D3:0C:F7:8D:5E:7F:CC
Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial: 01DE
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
Signing time: Sun 01 Mar 2026 18:25:11 +0000
ROA not before: Tue 20 Jan 2026 01:56:27 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133157
IP address blocks: 157.10.134.0/24 maxlen: 24
157.10.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Validity
Not Before: Jan 20 01:56:27 2026 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a48487-04a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:67:8f:ac:b4:5c:8a:7c:89:65:ce:7c:39:
a2:7f:7e:13:eb:47:52:ee:87:d9:b0:07:a4:8f:2a:
37:91:2c:d8:58:cd:f0:ae:1b:ca:61:70:fc:0c:79:
a7:8b:e6:20:5a:fa:7a:48:1f:48:59:8f:08:c0:98:
43:9c:78:a9:a2:f8:46:b2:b8:31:d8:4a:50:c1:6b:
60:81:2b:9c:65:21:f1:57:a7:67:10:96:9d:f0:58:
a7:06:6e:ad:c3:61:8e:ad:e9:54:26:ac:a7:43:e3:
23:5a:d1:c9:95:6a:73:ff:1a:ce:c8:0d:f1:0f:f2:
29:96:c9:9d:14:6a:85:48:7d:ba:83:5e:09:d5:ac:
34:b0:1e:42:26:a3:6d:7d:8f:2d:64:41:c0:2c:ee:
7b:e0:20:ca:55:d8:d9:5a:b9:80:eb:88:00:9b:54:
70:ec:39:a8:58:ad:f3:50:95:a6:7e:8b:2b:3e:bb:
55:87:11:b1:08:33:a6:97:aa:98:84:b3:af:c9:75:
42:44:d2:b8:0c:ef:b5:56:9d:6d:6f:1b:3f:49:d1:
11:29:84:00:9e:a6:d0:db:d5:5a:9e:b3:74:89:cf:
7f:14:81:81:28:27:78:34:ad:6f:3e:d2:8e:a5:21:
e5:a1:94:1c:80:71:b1:b1:c2:b8:c7:07:de:4d:46:
88:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:FD:7B:64:ED:34:42:DC:85:F4:0A:89:D3:0C:F7:8D:5E:7F:CC
X509v3 Authority Key Identifier:
keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.134.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:12:11:bf:b1:1e:55:ea:94:96:0a:7d:d1:db:b5:ed:f3:5e:
90:35:61:51:de:d8:3c:1a:96:55:5e:72:2e:c9:d6:a2:a3:70:
52:77:7f:5f:98:ee:18:02:4a:1a:fa:b7:5a:46:7e:e1:46:65:
82:f4:17:25:c4:c4:0c:cd:5a:80:57:2c:38:cf:6c:ad:7e:16:
d9:1c:46:bc:51:cc:95:e4:e1:87:ea:7d:af:92:83:b4:0a:6e:
e9:2d:f0:03:02:ba:b7:42:4a:25:57:95:8f:e5:55:26:d5:b3:
eb:44:28:89:99:19:5b:46:8c:d3:31:6d:08:c3:92:1e:dc:d5:
a2:df:61:ab:fc:e6:74:db:a0:05:1e:23:ee:5e:17:ac:fb:8c:
80:2f:d8:e1:e0:af:46:aa:37:39:e4:95:07:85:d2:82:f8:c9:
1d:c8:53:73:5b:4c:41:8d:48:28:03:a4:92:dd:a9:14:df:45:
ad:82:88:fe:59:f3:a4:56:b6:f3:dc:77:ad:88:39:05:03:9a:
44:e9:d4:95:8f:a2:93:1b:e5:f8:c4:40:85:a1:01:ef:26:ad:
84:1c:6c:7f:49:c2:31:ff:42:c1:24:73:03:5e:d7:db:be:eb:
da:08:f6:75:7c:30:9b:10:83:79:6c:f1:49:06:45:9b:39:3c:
9c:86:ba:41
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjYwMTIwMDE1NjI3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODQ4Ny0wNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwblnj6y0XIp8iWXOfDmif34T60dS7ofZsAekjyo3kSzYWM3wrhvKYXD8DHmn
i+YgWvp6SB9IWY8IwJhDnHipovhGsrgx2EpQwWtggSucZSHxV6dnEJad8FinBm6t
w2GOrelUJqynQ+MjWtHJlWpz/xrOyA3xD/IplsmdFGqFSH26g14J1aw0sB5CJqNt
fY8tZEHALO574CDKVdjZWrmA64gAm1Rw7DmoWK3zUJWmfosrPrtVhxGxCDOml6qY
hLOvyXVCRNK4DO+1Vp1tbxs/SdERKYQAnqbQ29VanrN0ic9/FIGBKCd4NK1vPtKO
pSHloZQcgHGxscK4xwfeTUaIxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHSI/Xtk
7TRC3IX0ConTDPeNXn/MMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCMzkvOTUwNzRBMEFBRjU2MTFFRUE2NTVCNTgxQzRGOUFFMDIvQTk5MjU4MzhG
NDdFMTFGMDkyODIxRUIwNkU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQqGMA0GCSqGSIb3DQEBCwUAA4IBAQBvEhG/sR5V6pSWCn3R27Xt
816QNWFR3tg8GpZVXnIuydaio3BSd39fmO4YAkoa+rdaRn7hRmWC9BclxMQMzVqA
Vyw4z2ytfhbZHEa8UcyV5OGH6n2vkoO0Cm7pLfADArq3QkolV5WP5VUm1bPrRCiJ
mRlbRozTMW0Iw5Ie3NWi32Gr/OZ026AFHiPuXhes+4yAL9jh4K9Gqjc55JUHhdKC
+MkdyFNzW0xBjUgoA6SS3akU30Wtgoj+WfOkVrbz3HetiDkFA5pE6dSVj6KTG+X4
xECFoQHvJq2EHGx/ScIx/0LBJHMDXtfbvuvaCPZ1fDCbEIN5bPFJBkWbOTychrpB
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:58 2026 by rpki-client