
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/D7C273FAF1EF11F0A394FA90446F56BC.roa
File: D7C273FAF1EF11F0A394FA90446F56BC.roa (raw, json)
Hash identifier: A79k1yFYKBfdbEJpqBRI+HCzddA3FuLd0fdzTClpX6Y=
Subject key identifier: 92:2E:68:0D:AF:2E:13:4B:80:8E:61:37:2C:AE:CF:CD:AF:43:D7:74
Certificate issuer: /CN=A91CDCF5/serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
Certificate serial: 1C
Authority key identifier: DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/D7C273FAF1EF11F0A394FA90446F56BC.roa
Signing time: Sun 01 Mar 2026 05:43:47 +0000
ROA not before: Thu 15 Jan 2026 08:54:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 142205
IP address blocks: 151.158.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl
rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDCF5, serialNumber=DF0D50C7EE2B1176D58D18D85D2592936AD7B246
Validity
Not Before: Jan 15 08:54:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d213-e1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:26:16:14:b5:5d:e9:1c:d6:d9:da:64:dc:
fb:43:66:2e:80:5f:82:6c:be:ef:3b:a0:22:32:25:
fc:89:7f:c8:87:85:fa:6c:a2:7f:dd:30:75:e0:f8:
7b:4b:44:17:6c:c1:59:76:bc:36:5b:61:2d:cf:21:
46:3b:27:a8:e4:35:16:6b:21:d8:21:d3:73:12:6b:
2c:c1:15:b9:e5:f1:58:d9:9d:c4:a0:fe:36:49:d4:
cb:1d:1e:d7:7b:64:b2:38:25:da:1a:0d:80:aa:80:
8b:de:f2:1f:81:2e:74:d6:21:38:b8:fd:dd:da:7b:
cd:b8:06:26:a4:a9:f0:1b:ef:6c:5a:d5:9a:8e:24:
53:b9:8e:f5:3b:bd:50:8c:f8:0c:96:f0:44:a4:22:
45:a0:82:69:d4:18:4b:be:13:00:5a:c5:5a:9e:c4:
b0:32:9e:5c:e9:a3:3f:55:de:ef:a5:98:1f:5f:2f:
fb:4a:2d:3c:ad:9c:1c:b0:5f:57:29:e3:b5:e0:ca:
41:a4:08:8b:28:6d:fb:a7:15:4b:94:0e:cb:94:1b:
74:54:f8:d6:fa:f0:82:33:70:bc:30:5f:cb:50:fd:
83:40:f8:0b:f7:0a:1a:68:50:46:29:2a:cc:7a:3e:
36:16:1a:63:f1:20:23:49:13:a1:e5:fb:c4:05:e7:
79:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2E:68:0D:AF:2E:13:4B:80:8E:61:37:2C:AE:CF:CD:AF:43:D7:74
X509v3 Authority Key Identifier:
keyid:DF:0D:50:C7:EE:2B:11:76:D5:8D:18:D8:5D:25:92:93:6A:D7:B2:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/3w1Qx-4rEXbVjRjYXSWSk2rXskY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3w1Qx-4rEXbVjRjYXSWSk2rXskY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDCF5/75FE6F4AF1E311F0BDEC72B5416F56BC/D7C273FAF1EF11F0A394FA90446F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.22.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:72:a1:c0:80:7d:0b:b7:59:7e:48:27:10:93:35:3f:e3:ba:
2b:95:10:8c:88:57:3b:c4:d0:ea:c9:6e:42:53:0f:7d:cb:03:
83:28:17:02:40:4d:97:f9:50:d5:cb:cf:18:77:1a:72:83:25:
0a:0b:c5:50:27:8a:a7:b3:ef:da:3c:b7:fa:68:bb:17:29:bf:
6f:51:8f:79:6a:b1:23:58:6d:be:e8:6a:0f:0e:4a:57:e9:77:
c9:86:5e:f3:bf:71:8f:89:36:62:15:2f:22:cc:2b:3e:ac:68:
5e:41:51:48:4f:09:d8:82:0e:29:39:6d:e9:f9:64:16:89:2b:
72:44:26:7e:74:c5:73:ba:9f:59:e4:8a:27:06:b5:0a:4d:e9:
73:dd:16:12:ab:42:57:04:81:8f:b0:55:57:d8:94:2c:ee:07:
53:af:59:e9:e1:10:7a:10:5c:85:aa:56:56:a3:ad:44:3a:0c:
d8:b1:ad:9f:b6:d4:cb:17:9a:e6:a7:1c:d0:23:e9:f3:b8:d9:
29:92:68:c5:65:46:24:4d:fa:e7:1f:1f:c4:1f:b4:1a:17:f4:
aa:25:8d:81:c2:5d:42:16:32:2c:fe:6a:8f:b2:8f:8d:50:a4:
fa:e7:cd:54:d3:42:14:38:01:99:f3:72:99:bc:85:e3:88:2a:
f5:46:04:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:28 2026 by rpki-client