
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa
File: B57E9D8C98D511F0912EFD62C4F9AE02.roa (raw, json)
Hash identifier: b4Mprh3FY9jiajkTpj7Ymhe1pwhQkrAyxJif5RXr/pI=
Subject key identifier: CE:96:84:76:B0:91:1A:2F:27:DC:37:A2:97:4F:9C:5F:4D:4E:B7:9F
Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Certificate serial: 58
Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:30:21 +0000
ROA not before: Wed 24 Sep 2025 00:09:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154262
IP address blocks: 27.126.156.0/23 maxlen: 23
27.126.156.0/24 maxlen: 24
27.126.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F
Validity
Not Before: Sep 24 00:09:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3dcfc-c2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:56:8c:5f:ac:32:f0:55:b7:48:03:59:c9:
6c:fc:a5:4c:32:57:51:74:d1:e7:65:71:a1:69:5f:
86:1f:c8:c8:c8:2d:e1:8f:05:32:d1:d1:56:9e:75:
32:0a:9a:87:df:ee:4a:18:bb:4e:c1:a7:5a:99:70:
70:a3:57:74:f8:97:d7:86:87:7f:bf:8d:79:13:31:
0f:4d:4b:bd:76:81:97:7d:ca:4c:e3:65:40:93:84:
97:02:9a:bf:a6:7c:95:44:57:0f:14:85:16:89:43:
6b:83:82:e5:29:8f:eb:e5:d2:7c:2a:a3:a5:a4:eb:
b4:8e:72:1e:74:40:8b:ea:d2:20:10:c8:e5:92:38:
5f:b7:29:b6:42:db:bb:26:4c:16:bf:0c:c3:8a:9a:
4a:e6:b1:ce:7b:cd:af:d3:af:e1:61:a0:c6:d0:0c:
9e:53:3d:70:37:87:43:e5:42:6c:b5:fb:b7:79:d1:
a2:96:52:6b:84:24:ef:73:c9:c0:a5:74:74:39:07:
e6:5d:ba:23:68:3b:6b:68:68:c3:78:30:b5:48:22:
62:d5:d0:a5:79:6e:38:df:7e:c3:f3:c4:55:ec:81:
69:12:68:a3:6d:2d:e7:a1:a3:50:cf:94:70:1d:7c:
f7:8e:74:91:02:5f:eb:d7:60:ec:11:53:dd:36:22:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:84:76:B0:91:1A:2F:27:DC:37:A2:97:4F:9C:5F:4D:4E:B7:9F
X509v3 Authority Key Identifier:
keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
19:87:f3:57:21:76:93:9c:62:d6:25:77:2b:d7:c2:68:40:33:
82:5e:66:6b:4a:ee:bd:4a:78:50:d4:f7:28:17:29:e7:83:ae:
90:70:7c:af:63:95:2f:69:de:33:5d:2a:62:b9:42:e5:0b:01:
fe:8e:24:66:78:06:1b:72:91:4b:af:eb:e0:55:96:09:4b:5b:
e5:7e:7e:7c:ed:3b:d8:61:1d:83:6e:b8:3d:4e:c1:3f:c5:43:
25:d5:c3:9e:08:2c:45:c7:aa:5c:be:77:26:00:8d:23:a0:7d:
6a:56:3b:07:11:98:24:0c:b2:a0:8a:c5:12:93:e0:fc:a3:9c:
40:77:b9:6a:3e:c8:5e:3e:b1:1c:20:94:e6:1e:4a:db:9c:38:
42:32:2a:2c:88:97:c4:91:ff:39:18:42:1f:dc:7f:ae:12:71:
d3:f6:a4:45:18:c7:e1:ae:0f:ce:47:ff:69:7c:30:09:05:9f:
0b:d5:d7:03:53:33:7f:5a:ab:c0:61:af:45:99:d0:00:47:80:
a4:26:c5:3b:b7:44:e8:f9:0b:8c:df:5d:32:7a:47:be:bd:39:
aa:ec:62:04:3f:9f:0c:f9:f3:57:64:7d:48:84:39:2f:bd:06:
0c:0d:08:12:73:88:c4:77:af:71:be:e7:7d:d0:f3:ef:de:a6:
a8:e4:af:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:11 2026 by rpki-client