
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
File: 604F4E3C0D6611F1AAA528DE1B3D8C67.roa (raw, json)
Hash identifier: zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=
Subject key identifier: 16:90:DD:4E:31:41:B5:27:AA:AB:80:0A:EB:85:EC:0E:96:43:FB:7E
Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial: 0F
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
Signing time: Sun 01 Mar 2026 05:35:43 +0000
ROA not before: Thu 19 Feb 2026 07:41:18 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 151151
IP address blocks: 151.158.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Validity
Not Before: Feb 19 07:41:18 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d02f-82d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:14:d5:b1:31:2e:ae:0e:78:d8:bc:8d:40:
11:2e:fe:19:c1:1f:03:6a:11:69:7c:1e:7a:a2:d4:
b6:f0:ae:a1:7a:48:10:1d:35:a1:4a:8e:72:a7:8e:
39:68:9b:78:59:f6:28:a9:cb:e0:ec:ab:31:b9:ca:
f2:62:c3:27:68:d0:42:11:2c:30:f4:9e:cb:c2:4c:
22:07:57:ad:ca:b0:8e:80:70:9a:a1:35:12:d6:1e:
b0:8c:3c:31:ae:9f:72:a9:87:45:10:b4:87:a4:a8:
6d:fb:5c:10:85:27:36:ad:1b:6c:79:54:e8:86:2a:
72:30:c0:20:ef:00:5e:13:e7:81:65:1e:90:c1:51:
ff:54:57:0b:ac:c2:b1:15:17:fa:af:5d:18:a2:00:
06:44:c1:22:86:4a:14:b1:2e:c2:c5:c5:f8:9b:cf:
1b:73:12:f4:60:86:84:92:c0:6f:67:76:4d:b1:3f:
1f:ca:cc:68:d4:98:54:68:e9:ae:ec:d3:c0:88:ff:
b0:29:12:fe:c9:34:f7:f0:d8:b6:86:87:9f:0a:2c:
fc:a7:d0:58:b8:32:cb:43:dd:08:0f:5d:7e:00:d3:
1c:85:eb:b0:7f:98:b5:80:60:13:d8:97:a7:46:98:
fe:ad:cc:1e:1c:4f:27:55:8f:f2:4b:f6:e3:fd:a9:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:DD:4E:31:41:B5:27:AA:AB:80:0A:EB:85:EC:0E:96:43:FB:7E
X509v3 Authority Key Identifier:
keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.170.0/23
Signature Algorithm: sha256WithRSAEncryption
96:c5:75:59:94:a2:0c:b4:7f:a8:e8:ed:81:52:03:15:61:d3:
62:ea:b0:16:44:dd:32:ee:52:15:2a:88:22:53:a3:a9:21:3b:
00:ab:af:21:bd:d2:2a:27:63:36:99:85:8e:46:48:5a:86:db:
59:57:3e:62:1b:a6:b3:8c:43:42:8f:f6:43:74:91:cf:68:6c:
97:a5:0a:e0:71:82:50:2c:0d:03:73:9b:38:fd:e3:30:7b:78:
94:fc:c7:e9:bf:2e:d8:1e:b7:bd:f9:44:b0:e3:7b:2b:8a:88:
f4:f5:aa:b0:a1:82:ac:a4:36:e2:0c:31:a0:20:36:1f:ab:5a:
46:05:ca:8f:d7:ef:91:48:5e:ea:07:81:fe:11:df:86:8f:f2:
61:54:a6:fb:13:e3:43:2c:1f:85:e2:fb:bc:0f:5a:8c:e6:ae:
48:3c:52:b3:2d:54:ae:3b:77:2d:8e:c7:90:ba:27:b2:9a:af:
6f:fb:c3:5d:49:b5:9d:72:fe:d7:58:ba:89:9b:c7:e8:fd:15:
e4:3e:08:57:49:92:03:a6:aa:82:fa:ea:c2:f7:76:25:13:1a:
af:82:7c:b4:14:89:80:8f:7a:fe:71:e9:ba:80:1d:c0:27:bb:
e6:71:85:66:a9:ce:0b:a2:25:b6:c5:83:c2:81:53:21:12:05:
c1:20:07:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:47 2026 by rpki-client