
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa
File: 9D9BBE06B11711F1804AF5374511F970.roa (raw, json)
Hash identifier: /QR8B/WV3tnFJ5ZLzdG6QBvzbzr2LZpMKJKxqq3gaHs=
Subject key identifier: 81:AC:AF:46:E0:C1:8D:8D:30:4F:B7:78:0E:5C:86:C8:84:DA:D4:10
Certificate issuer: /CN=A91C51D7/serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Certificate serial: 05
Authority key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa
Signing time: Wed 16 Sep 2026 06:38:57 +0000
ROA not before: Wed 16 Sep 2026 06:38:57 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 3918
IP address blocks: 156.149.128.0/24 maxlen: 24
161.126.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl
rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F
Validity
Not Before: Sep 16 06:38:57 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6aaa3981-b062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:d9:20:06:89:a8:af:b8:e6:49:4c:12:c1:
58:5e:94:7c:75:f3:77:b0:df:68:53:1c:12:39:ed:
29:e8:ce:dc:cc:fc:2e:4b:23:53:32:6b:8b:66:09:
e9:62:ce:e2:da:ca:3f:55:ae:f4:a5:1d:ae:5f:e7:
87:8b:98:4f:a6:91:ae:c2:be:3f:29:ff:53:0b:33:
21:b5:31:0e:50:7e:a9:0e:44:93:31:6c:17:46:58:
f6:0a:87:4f:7c:e4:fc:7c:fe:7c:4d:b7:73:c1:9c:
4b:ab:bc:a8:7c:9c:93:96:d0:9c:93:59:8f:9c:e7:
41:5b:38:55:ce:8a:e2:a1:60:2c:ad:06:9f:dc:db:
5d:1d:a5:92:88:40:ba:d8:64:5d:c3:38:6c:97:a3:
9c:c5:b7:a9:49:07:ac:9c:76:5f:25:a3:ae:3b:dc:
ad:b7:d6:74:56:95:4b:48:ab:c7:b1:13:63:ab:f5:
85:90:81:cf:d8:fe:cb:7e:99:4d:c7:37:86:48:31:
8d:6f:8c:5b:d2:54:39:f5:ea:3a:6d:06:92:77:e5:
4e:3b:18:d8:10:7a:cf:32:ec:82:7c:e8:f0:fd:97:
66:10:7d:8b:2f:43:2c:af:2d:ec:39:55:e0:7d:05:
a0:6a:26:b8:5e:85:c1:c6:1c:68:01:ed:52:f4:66:
d5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:AF:46:E0:C1:8D:8D:30:4F:B7:78:0E:5C:86:C8:84:DA:D4:10
X509v3 Authority Key Identifier:
keyid:CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
156.149.128.0/24
161.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:41:48:60:ca:4a:4e:e4:33:7a:c3:aa:f8:a1:76:a5:12:32:
f8:28:09:b6:61:22:f1:cd:86:90:0b:ec:e6:f1:da:f8:91:ef:
e9:fe:54:b5:c4:ed:df:fc:c3:27:62:ef:e6:97:fe:9a:61:f3:
3b:e8:80:0e:45:e3:82:db:91:e7:16:8d:f7:ee:c4:22:ef:b8:
98:d9:02:69:c1:a7:63:76:3f:02:1f:6d:7f:e4:4e:03:bf:a6:
f2:b6:49:e3:ab:86:46:c0:e0:2d:44:08:78:0a:ea:14:1e:2d:
7b:dd:76:72:69:c1:23:fa:a8:9d:d2:9e:e3:42:ff:0a:0d:4f:
65:c2:30:9c:a7:02:cc:7b:a6:4d:e4:00:25:84:7c:6c:77:1d:
3f:9b:72:65:24:91:0c:4c:f2:3b:d6:35:5b:53:74:fa:72:0b:
c9:dd:ff:39:72:e0:d4:60:16:41:fb:a7:f3:b8:fe:7f:ae:e2:
0a:6f:20:d1:1a:2c:e8:56:e9:f3:e8:20:51:2a:b0:13:26:06:
c8:2a:37:82:af:81:9f:1a:50:6c:be:13:45:71:0b:93:2f:f0:
9f:0d:5c:7d:8f:f8:70:8a:9b:f6:4a:87:8c:eb:99:41:ed:63:
09:34:25:e4:0f:42:09:d7:31:56:b8:0d:de:46:09:c6:da:e6:
cd:b2:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:44:36 2026 by rpki-client