
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
File: 584BBFB03B7811F099AF3F55C4F9AE02.roa (raw, json)
Hash identifier: l0BN+69IATjBs2e8rsvGVdnATqQxFWaTj1Qx5PP2+w8=
Subject key identifier: 7D:B9:D6:B4:0B:FE:4F:4F:D6:54:2C:80:84:CC:93:6F:B1:FD:83:BE
Certificate issuer: /CN=A91BBA4F/serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Certificate serial: 8F
Authority key identifier: E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:06:54 +0000
ROA not before: Wed 28 May 2025 04:00:51 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152583
IP address blocks: 157.20.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBA4F, serialNumber=E7F419251A7961DF274D39B534A22F3ECDB3102F
Validity
Not Before: May 28 04:00:51 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3e58d-d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:de:a5:b4:3a:9c:32:34:0f:c1:e5:7b:39:
8b:4c:ee:b9:c6:63:1b:7d:35:9e:95:68:e3:1c:74:
b3:3b:08:8a:a7:d1:ea:e8:3d:22:33:b3:a9:a1:8b:
e9:9c:d2:57:18:70:07:df:5b:a0:9f:c2:14:70:82:
eb:57:d3:16:02:65:7f:12:7b:f3:6f:9e:88:bc:fa:
d3:73:ac:d9:a9:47:d1:8c:25:1d:30:6b:ee:e3:1f:
70:14:d3:cd:52:22:39:91:26:60:ab:be:f2:37:f8:
71:d6:c1:ef:09:12:54:89:f6:cf:8f:25:a1:21:3f:
92:4a:3b:48:e3:80:9b:3b:91:0b:ca:a3:97:96:af:
dc:ce:60:91:c3:99:00:15:31:b1:3e:bf:89:e5:d3:
d4:f2:cf:81:c3:eb:17:8f:37:a0:d0:d7:61:dc:61:
1f:51:6b:ac:79:34:d9:e6:be:6f:f9:23:cd:df:19:
69:25:0c:be:5b:dc:12:3f:ec:4f:35:48:0f:91:64:
20:16:a4:e7:5b:f1:14:86:d1:0e:af:3f:4e:75:10:
9f:67:3e:30:e1:f1:88:f3:2a:de:97:04:7d:76:84:
ff:90:9e:c6:20:e7:6b:20:f7:08:d0:54:39:b8:90:
fd:88:9b:29:de:91:7b:a9:24:a7:1d:dc:a8:b7:f7:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B9:D6:B4:0B:FE:4F:4F:D6:54:2C:80:84:CC:93:6F:B1:FD:83:BE
X509v3 Authority Key Identifier:
keyid:E7:F4:19:25:1A:79:61:DF:27:4D:39:B5:34:A2:2F:3E:CD:B3:10:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5_QZJRp5Yd8nTTm1NKIvPs2zEC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/4F40BE6C3B7711F097A8BB24C4F9AE02/584BBFB03B7811F099AF3F55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.80.0/23
Signature Algorithm: sha256WithRSAEncryption
d0:03:e9:16:0b:4a:2e:d1:04:dc:db:df:3d:cc:63:eb:9f:b3:
48:a8:cf:ae:e1:a6:ca:a9:c8:84:84:e9:cb:49:d8:e8:84:6c:
4d:7c:fd:71:fd:ae:e9:94:de:e7:a1:33:7c:23:b2:c1:b4:93:
1b:63:fd:f8:e6:42:c5:d3:b7:95:81:0b:7e:ae:3b:80:3e:ed:
92:f3:21:b2:18:51:5c:9e:03:12:af:66:e2:05:f8:69:08:83:
d7:7d:e5:b7:30:2d:11:a5:7a:a3:0d:4c:8e:d6:3b:70:c9:cb:
22:f3:77:01:40:a0:4f:b3:00:da:4d:e5:69:50:fb:2e:ff:ca:
3e:9b:79:6f:a0:87:5a:af:51:de:c6:7d:1a:15:61:06:84:91:
36:1c:31:08:8d:b8:b5:4f:b4:52:c5:cb:08:b4:b6:fb:61:c0:
ec:08:07:80:fe:e2:02:c2:01:30:7f:69:75:4d:c8:b0:1f:b7:
5b:32:e7:26:e0:b8:86:8a:6a:45:d3:0f:16:d8:d5:aa:8e:8c:
66:0d:84:f4:47:e5:8d:04:ab:9a:74:87:3b:f8:6e:2d:4e:d0:
ca:2d:2a:41:f6:cb:f1:c0:4b:16:fe:85:09:7c:c7:1b:df:1c:
16:bf:58:89:9e:40:b5:39:4f:87:a0:6d:a9:90:74:8d:24:04:
60:1c:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:05 2026 by rpki-client