
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/5C154406988911E991B10838C4F9AE02.roa
File: 5C154406988911E991B10838C4F9AE02.roa (raw, json)
Hash identifier: 6Fzpl7Y9ajUJOKHixKWiY9U2IbPu6r4VOVT8m52u14o=
Subject key identifier: 79:42:28:0C:27:5C:C6:55:8C:62:CB:55:33:82:9A:A2:41:A6:A8:6B
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0F1A
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/5C154406988911E991B10838C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:38:01 +0000
ROA not before: Fri 02 Jan 2026 18:14:49 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 23881
IP address blocks: 23.226.0.0/24 maxlen: 24
23.226.1.0/24 maxlen: 24
23.226.2.0/24 maxlen: 24
23.226.3.0/24 maxlen: 24
23.226.4.0/24 maxlen: 24
23.226.5.0/24 maxlen: 24
23.226.6.0/24 maxlen: 24
23.226.7.0/24 maxlen: 24
23.226.8.0/24 maxlen: 24
23.226.9.0/24 maxlen: 24
23.226.10.0/24 maxlen: 24
23.226.11.0/24 maxlen: 24
23.226.12.0/24 maxlen: 24
23.226.13.0/24 maxlen: 24
23.226.14.0/24 maxlen: 24
23.226.15.0/24 maxlen: 24
162.247.0.0/24 maxlen: 24
162.247.1.0/24 maxlen: 24
162.247.2.0/24 maxlen: 24
162.247.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3866 (0xf1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Jan 2 18:14:49 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44f49-3146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:7e:10:a7:e4:72:f9:81:41:b2:07:d7:c7:
89:1c:46:9d:c9:cf:3e:68:11:3d:78:e9:59:dc:a0:
16:01:b6:c0:ad:24:db:28:55:13:fd:0b:b0:b8:c8:
d6:a5:85:fd:da:98:91:af:c7:82:57:08:93:08:72:
55:f2:11:23:4e:7d:79:c2:0e:22:ee:43:ed:61:cf:
f1:15:5f:43:7d:15:73:b2:1c:2c:d7:90:f8:4e:99:
80:d6:7f:5b:9b:fc:a7:7c:d2:3c:f4:1c:f3:5d:a5:
08:e5:c9:c7:40:59:26:7c:c7:d2:2f:aa:04:bd:07:
71:49:30:ac:32:7e:fd:a7:62:cc:2b:98:73:4a:22:
f0:2b:8f:3d:82:05:87:0c:49:54:65:0f:0f:10:9e:
b2:92:d8:0f:69:70:78:4b:32:e0:04:cb:6a:81:28:
74:46:21:56:b8:1b:85:de:9d:b4:99:3f:84:45:13:
21:1a:b4:7e:82:ce:94:76:6c:6e:21:c1:c4:ad:94:
29:ed:9a:9a:cb:9c:c2:ec:db:47:47:95:ce:e5:02:
44:84:ef:e3:d9:7e:51:05:50:2d:c2:98:a5:1e:46:
d7:f5:46:89:72:eb:90:47:f0:a0:18:50:6f:7f:d5:
5b:c5:c9:4a:3c:21:a9:e2:29:94:b0:ad:2e:10:9b:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:28:0C:27:5C:C6:55:8C:62:CB:55:33:82:9A:A2:41:A6:A8:6B
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/5C154406988911E991B10838C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
23.226.0.0/20
162.247.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:d5:88:db:35:ea:9b:fa:ad:4a:8e:ec:ba:cf:e2:94:05:58:
d5:ab:76:36:6a:20:e3:bb:4e:67:25:70:85:44:29:35:54:fb:
f5:90:77:c3:8a:dc:83:81:7c:0a:7d:4c:1c:74:9b:1e:5e:70:
c1:81:59:8d:93:4f:71:17:39:2c:1f:d5:d6:6d:0a:8c:2e:a5:
21:1c:12:ad:d6:9b:85:51:94:38:0d:dd:7d:ac:49:9c:b0:ec:
da:84:a8:38:af:9a:bc:1e:33:3b:08:2b:ca:f7:16:e2:8f:ae:
84:60:5c:02:08:8f:45:83:19:3f:e4:da:c0:e1:75:d6:45:65:
22:64:65:8a:73:94:02:dc:2d:b6:33:a0:25:60:94:47:c1:32:
58:82:16:f8:d0:f6:9a:bd:a5:09:5c:67:e0:eb:84:86:4c:36:
e3:78:a5:ab:30:51:40:af:5d:0f:62:c2:33:b0:e9:7d:e9:6d:
a5:df:17:4f:13:b9:da:24:e8:cc:e3:a9:65:ae:e2:a3:32:eb:
48:be:c8:0e:4a:cb:58:bf:cb:5b:ea:60:31:9c:a2:bc:da:b8:
ee:18:5d:22:f1:1a:5d:4e:28:6c:9e:a6:9e:df:be:71:3a:28:
0f:34:81:d1:f3:0b:a4:d5:43:ee:d2:73:01:f3:88:a9:54:07:
da:9f:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:14 2026 by rpki-client