
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/C5589FB4BF9C11EEAAE7743EC4F9AE02.roa
File: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (raw, json)
Hash identifier: oVA7A9xbq/3XzKnToy39T95rB3d7qRIRIGsB5By2kNI=
Subject key identifier: FE:69:A9:5E:17:0F:A1:56:F7:D3:C5:93:62:69:E0:FA:4C:FC:2A:13
Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Certificate serial: 0194
Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/C5589FB4BF9C11EEAAE7743EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:03:29 +0000
ROA not before: Tue 17 Feb 2026 03:23:56 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152446
IP address blocks: 157.15.36.0/24 maxlen: 24
157.15.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:10:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E
Validity
Not Before: Feb 17 03:23:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a41d01-43f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a0:43:41:6d:fd:4f:92:b0:3f:23:19:09:a0:
b1:6f:49:13:a5:6b:50:8c:06:30:f2:b2:41:c0:d1:
c6:b5:b5:71:d6:55:1b:26:b5:ed:f7:9e:ce:1d:9f:
ea:49:9e:98:00:88:bd:e1:18:00:6e:d0:75:8e:a8:
f6:82:74:16:2f:a3:48:74:cf:0c:9c:cc:ec:1b:c5:
c3:06:99:98:71:ec:cd:8f:b5:e9:5b:98:f2:bd:37:
54:21:3d:45:e4:6c:97:95:ac:48:f2:fe:78:7b:28:
8f:e7:4f:49:4f:b4:93:f1:8e:04:e6:5b:de:20:4d:
5f:3a:8e:97:39:f4:d3:36:97:4b:ac:b9:0c:d4:d0:
8b:c5:2e:ed:2d:50:45:c2:ba:46:7c:66:50:d1:b9:
34:b8:ce:37:b4:61:02:51:e2:12:a5:3b:8a:7b:a1:
57:55:99:5e:04:9f:9c:c3:81:81:22:8f:b1:6c:e4:
cd:b1:7d:f3:d3:c3:fe:e2:16:c6:81:9c:c0:f5:d0:
4e:41:71:ed:3b:13:2a:5f:39:52:f5:78:fc:c3:4d:
ae:4f:96:4a:df:aa:71:ec:d2:d0:4f:5e:19:e9:75:
e3:ee:58:f5:7b:da:7b:dc:13:71:4a:e1:bc:5f:53:
f5:f7:7c:ad:7c:3d:95:dc:f1:3d:aa:4d:b8:0e:d3:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:A9:5E:17:0F:A1:56:F7:D3:C5:93:62:69:E0:FA:4C:FC:2A:13
X509v3 Authority Key Identifier:
keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/C5589FB4BF9C11EEAAE7743EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.36.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:ab:dc:e6:46:93:6c:95:3c:ec:1f:c3:4e:a2:44:39:2f:0d:
74:e9:06:2a:54:a6:e3:99:9e:94:ef:e3:bb:5c:d7:bb:07:6a:
fb:9a:95:22:15:54:d4:1f:d9:5d:0a:23:ac:3d:cb:6b:b8:b3:
cb:da:f7:6e:35:27:e2:f5:a8:26:f7:fa:b9:6d:e3:1e:94:bb:
b4:3a:0d:5d:fb:3d:34:b1:4d:4f:09:70:84:c8:07:e4:af:56:
02:a0:7a:e4:f4:d5:45:83:5b:d4:b9:99:e7:c3:96:e8:0a:18:
0b:c8:fb:64:a5:3f:2a:61:db:59:a2:51:fe:73:51:93:95:d1:
03:6d:48:34:04:12:89:a8:ed:ea:e3:71:08:df:bd:f2:f5:33:
29:20:4f:87:28:25:e0:b9:03:f6:a7:98:a0:e0:57:c5:9a:83:
1d:fc:d8:63:51:34:45:0d:d6:a3:13:80:fb:d0:80:c8:b5:13:
c3:4c:07:40:b1:9e:74:ed:cb:5a:66:47:88:fe:8b:2f:90:83:
50:68:43:3c:18:b2:41:99:3a:99:6b:dc:2a:b4:df:3c:12:a2:
9b:98:ee:19:59:5f:83:19:90:82:33:98:c7:5f:74:94:37:00:
cc:70:09:08:6d:f9:e3:1f:44:93:51:be:cb:38:ec:1b:4b:dc:
f4:64:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:32 2026 by rpki-client