
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
File: 7155C8563E5E11EAB043A522C4F9AE02.roa (raw, json)
Hash identifier: 5SXsoRZviOsZAGmaYCG+zK9DFm8Eh25q9V/rNn5L4vs=
Subject key identifier: 9B:6C:16:FC:38:54:B8:3B:F1:7B:6C:33:85:BA:84:EE:E3:EB:0B:6E
Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Certificate serial: 0CDC
Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:52:49 +0000
ROA not before: Thu 04 Dec 2025 17:58:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45638
IP address blocks: 198.244.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:05:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B
Validity
Not Before: Dec 4 17:58:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a444b1-91e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:fc:7c:95:6b:b5:c9:72:0d:24:e1:aa:cf:
e4:0c:20:f5:33:47:cf:04:7b:44:e9:6a:1c:35:66:
15:d1:1c:07:f9:42:eb:63:6f:cf:96:d6:b6:4d:39:
f6:3c:7c:36:e2:3a:8b:6c:90:57:08:e6:c2:28:b3:
93:22:4e:c8:80:72:84:02:a4:a0:73:47:28:d9:ad:
16:f6:24:c4:5c:f1:ce:d4:8f:7e:76:c3:a6:30:f3:
74:88:dc:d4:0a:6d:fc:76:5b:aa:cb:72:dc:fe:dd:
bc:34:d0:1a:25:5a:e0:a2:e3:3f:ea:18:c9:31:18:
fe:fe:9e:04:41:fc:d0:b0:bd:f9:1b:f2:95:1e:64:
e0:8f:37:91:34:48:0b:d7:46:d1:d3:ae:13:d7:5f:
8a:3d:1a:08:16:c5:f2:e9:d3:94:c5:15:38:bd:7a:
e5:d6:d6:70:b2:86:de:a5:5e:fd:1e:8c:1a:b7:74:
fb:7e:f1:a1:c0:df:1b:ba:58:d5:6e:96:cd:6e:b8:
db:fa:88:cb:1f:54:ed:7e:ec:4f:d3:7d:5b:a3:2b:
0c:65:03:49:2f:7c:71:e5:95:cf:20:a0:7e:78:58:
4c:00:b5:c8:f5:5a:bc:bc:89:50:30:f0:d2:b4:61:
36:51:dc:fe:0e:78:18:e9:de:8f:9e:00:e2:5a:04:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6C:16:FC:38:54:B8:3B:F1:7B:6C:33:85:BA:84:EE:E3:EB:0B:6E
X509v3 Authority Key Identifier:
keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/7155C8563E5E11EAB043A522C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
198.244.10.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:b0:f4:bc:c3:d5:6e:4c:a7:74:62:10:2f:f6:24:b1:ac:d1:
cf:97:22:cb:17:42:ee:fb:10:97:2f:d9:26:91:c6:82:60:a3:
bc:4b:14:12:d5:6e:e1:9e:36:9d:55:03:64:51:bf:d5:c2:bc:
76:67:dc:1e:61:ed:43:10:48:37:4f:df:16:46:d6:9f:62:87:
26:24:aa:28:a4:d5:9b:fe:f2:40:27:4f:c8:36:3c:3e:2a:fd:
f0:e6:29:04:a7:cc:6e:ec:d7:a8:b4:8f:42:77:3f:17:f5:82:
8e:99:81:07:4d:69:59:ce:33:94:ab:b9:d4:eb:63:97:02:12:
3e:6a:24:5c:71:c0:a0:38:35:73:c4:31:1b:c1:b3:8e:aa:31:
f5:9b:7e:82:3b:0e:aa:88:7b:f5:f9:dc:8d:0a:15:65:26:6c:
07:8b:09:86:9a:02:60:b1:fe:ee:fc:ea:af:8e:b8:82:b8:5b:
74:31:c5:24:45:ec:cd:96:1b:a7:24:a3:77:35:fc:d3:95:67:
ed:82:eb:4e:04:16:6f:9e:6c:18:3b:8b:00:61:53:3a:38:4c:
65:ef:2f:88:48:db:01:1f:f5:aa:eb:51:c9:c1:ac:3a:56:8a:
81:ad:c7:c4:ef:67:b3:42:5a:e4:9b:9a:70:20:2f:8c:68:5f:
ea:01:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:54 2026 by rpki-client