
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/18FB6A08FC9E11F09F0AC8105E6F56BC.roa
File: 18FB6A08FC9E11F09F0AC8105E6F56BC.roa (raw, json)
Hash identifier: +t1U6IIjEcIREP8ILzimtngggq+V6zIVth7nVFeYBis=
Subject key identifier: 3A:D8:D0:90:51:A7:FB:C7:18:CF:DF:CB:03:6A:94:A2:21:D4:25:26
Certificate issuer: /CN=A91C3DEA/serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
Certificate serial: 17
Authority key identifier: AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/18FB6A08FC9E11F09F0AC8105E6F56BC.roa
Signing time: Sun 01 Mar 2026 05:41:09 +0000
ROA not before: Wed 28 Jan 2026 23:13:37 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 53813
IP address blocks: 156.13.6.0/24 maxlen: 24
156.13.7.0/24 maxlen: 24
156.13.10.0/24 maxlen: 24
156.13.11.0/24 maxlen: 24
156.13.24.0/24 maxlen: 24
156.13.25.0/24 maxlen: 24
156.13.64.0/24 maxlen: 24
156.13.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl
rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3DEA, serialNumber=AB7E2CADA559AE56CC25A1F698F88509398889F9
Validity
Not Before: Jan 28 23:13:37 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d175-63cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:c2:a6:8c:68:8a:7e:3d:1d:5f:49:8e:03:
82:a7:cb:4c:87:95:7c:4d:55:67:f1:c1:3a:b9:39:
43:ed:19:b8:ae:f5:52:2c:0c:2c:c9:d8:36:25:54:
8f:9d:04:33:c8:f0:e3:47:47:7d:15:af:77:9d:92:
d0:61:46:77:a1:67:c0:05:58:68:6c:f0:3b:f6:4a:
e7:3a:d9:c4:fd:e7:31:dd:f9:77:84:e1:32:10:34:
f4:c5:72:fe:c6:77:30:7f:e5:19:f8:1a:f8:90:20:
cf:56:58:b3:05:e3:f2:e6:4c:c1:08:f7:54:8a:9b:
98:e7:f3:35:c8:ac:45:a6:e4:3c:45:33:bb:a1:63:
01:b4:d0:16:e1:5f:fb:9b:71:fe:56:20:d6:f7:a4:
66:8e:b7:14:9c:64:28:e1:56:9d:14:ce:66:b0:a2:
bd:81:46:b1:73:60:9a:d2:7f:cb:5e:69:85:67:17:
59:31:6a:b9:d3:43:96:25:85:d6:8e:90:30:06:5c:
0c:17:f9:9e:12:91:6e:fa:5b:96:ff:f8:3c:bd:93:
48:86:ac:fa:11:d1:25:89:76:26:be:fa:38:1b:7d:
9f:69:95:aa:f2:22:3d:b1:5a:75:29:07:d0:d4:c9:
d1:82:14:6d:7f:7d:65:cb:4e:19:1f:b3:90:3b:0c:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D8:D0:90:51:A7:FB:C7:18:CF:DF:CB:03:6A:94:A2:21:D4:25:26
X509v3 Authority Key Identifier:
keyid:AB:7E:2C:AD:A5:59:AE:56:CC:25:A1:F6:98:F8:85:09:39:88:89:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/q34sraVZrlbMJaH2mPiFCTmIifk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q34sraVZrlbMJaH2mPiFCTmIifk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/A1FFA810FC9D11F093E6B1695D6F56BC/18FB6A08FC9E11F09F0AC8105E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
156.13.6.0/23
156.13.10.0/23
156.13.24.0/23
156.13.64.0/23
Signature Algorithm: sha256WithRSAEncryption
62:0e:ab:e8:16:10:40:64:88:79:50:69:04:32:fc:47:38:e3:
92:b6:37:fa:70:10:55:c6:4c:e9:79:63:c3:27:2a:3a:10:c2:
30:4f:b6:47:a0:b6:2d:d3:ae:2a:c4:27:71:6d:78:24:2c:62:
a3:43:2a:fd:c5:a8:f9:c7:86:e0:ef:af:a2:be:86:ac:31:38:
c2:45:94:2b:71:f1:c6:4f:dd:6f:ea:da:ca:39:09:55:21:1f:
f4:e2:17:7d:2d:5f:e1:31:1f:9b:d3:b8:be:69:c8:6a:df:c0:
2e:b5:b0:0a:24:04:59:e0:6d:fc:37:6c:db:51:52:6d:0c:bc:
24:f5:c0:5d:25:5b:db:cc:db:1d:5d:3b:26:69:c3:da:37:75:
70:80:86:fe:6a:56:71:f0:e7:66:62:50:5c:cf:e7:a8:71:17:
de:b0:f7:ec:76:df:15:4c:a3:1e:bd:ec:1a:e5:44:be:36:6d:
27:81:cb:49:e2:1a:c6:67:d6:03:25:04:ce:e9:cb:c7:34:36:
e7:b9:1d:7d:40:2f:d3:25:d3:bd:20:94:50:71:60:88:e1:4b:
86:3d:c8:2b:e1:06:14:02:be:d1:99:13:6d:97:c9:1c:7b:1f:
94:43:61:c2:69:4b:81:cc:d2:ec:c0:52:e5:51:3c:83:55:7f:
ac:cb:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:38:33 2026 by rpki-client