
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
File: 30D2517AF1F211F0B442E9B1456F56BC.roa (raw, json)
Hash identifier: UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=
Subject key identifier: F5:74:73:0E:A6:03:AE:D5:DB:0F:4F:8F:AE:72:D0:91:1C:D1:9B:42
Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Certificate serial: 1F
Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
Signing time: Sun 01 Mar 2026 05:46:18 +0000
ROA not before: Thu 15 Jan 2026 09:11:35 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136418
IP address blocks: 151.158.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl
rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Validity
Not Before: Jan 15 09:11:35 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d2a9-6ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:69:4f:1f:eb:b9:30:1b:a2:a5:fb:6c:22:
4b:2c:73:b2:df:94:98:5b:a6:e4:e1:f6:0a:09:4a:
2e:d3:24:8b:4b:30:16:c6:3b:70:36:04:e8:b6:d7:
90:e8:98:38:b1:2f:24:e3:4d:21:6b:15:da:24:45:
bf:4e:69:56:d1:36:6c:21:f0:f3:0c:69:bc:90:a6:
35:ca:8b:71:f8:95:56:8b:49:90:b9:f6:0a:0a:4c:
e0:13:01:80:e4:66:3c:07:6d:b2:3e:28:37:b2:32:
8d:37:4a:dc:e1:85:3b:e4:cf:bf:cb:fa:84:7d:b4:
88:82:ff:06:7d:e6:5b:dc:f2:78:2d:5b:80:b6:f0:
ba:bf:df:bb:e6:01:8d:44:cb:6a:23:ba:b0:02:44:
a1:c1:31:54:d4:4f:b3:4f:54:9e:b3:e9:47:84:1c:
14:59:bb:60:23:27:d1:4b:70:44:21:3b:c8:7d:43:
45:ec:48:45:4f:83:98:57:eb:ca:29:f3:0d:ac:66:
6a:77:32:73:fc:02:d0:5f:00:11:62:bc:3f:a1:87:
f8:13:11:ea:95:20:06:5d:4e:07:ff:65:5d:87:ed:
79:7d:c3:d3:0c:45:f2:f0:5e:a1:a8:5d:64:a1:e9:
13:3b:09:b2:48:a7:fe:c9:2b:1d:e4:2b:dc:f3:1d:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:74:73:0E:A6:03:AE:D5:DB:0F:4F:8F:AE:72:D0:91:1C:D1:9B:42
X509v3 Authority Key Identifier:
keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5b:05:eb:d3:20:2c:43:9d:74:50:32:6c:de:15:c3:05:d4:
79:3a:88:95:ad:f4:fa:2d:e5:fd:93:f7:64:9c:7f:db:77:a9:
c5:ee:98:ca:1f:35:e7:61:60:3b:73:91:bb:28:0b:06:d1:99:
ae:c6:03:98:93:67:66:a8:4d:7e:3b:75:39:1d:10:07:07:77:
94:81:e3:c9:5c:c9:c1:cb:91:10:ed:c6:51:29:2f:28:2b:48:
2d:6b:8a:af:a0:6b:41:b5:1d:09:0e:d6:8d:7f:3b:8f:0f:10:
74:7a:ed:12:be:9a:de:f7:88:f2:d1:76:0b:a4:af:1d:65:b5:
cc:21:37:9e:8a:24:1b:8c:d2:83:95:a0:76:31:b7:84:19:6e:
e6:ac:49:7c:88:53:c4:b5:95:1f:fe:b0:ac:7f:56:a7:3c:31:
a9:70:ac:67:bf:d2:6a:dc:24:bf:ec:0f:8b:60:79:a3:2a:4c:
9b:e1:c3:0f:16:af:13:6d:70:1f:4b:14:47:f7:70:98:eb:2b:
01:a1:3c:4d:02:75:e5:7e:a4:0a:fd:c5:d2:5f:36:eb:a3:ff:
28:5b:d2:d6:67:a2:0f:a9:1f:0d:18:ed:15:bd:3f:21:12:e9:
79:19:9e:81:bf:17:8c:30:86:0d:fe:6d:22:bc:38:98:40:2f:
a9:de:11:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:13 2026 by rpki-client