
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
File: 2764AC08003111F18836FC08486F56BC.roa (raw, json)
Hash identifier: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=
Subject key identifier: 9F:62:E4:8B:C7:31:05:62:1C:E7:D9:22:25:DD:3D:F2:3A:17:EE:06
Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Certificate serial: 14
Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
Signing time: Sun 01 Mar 2026 05:39:46 +0000
ROA not before: Mon 02 Feb 2026 12:17:34 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 197569
IP address blocks: 151.158.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Validity
Not Before: Feb 2 12:17:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a3d121-95b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:61:0d:1b:1d:1e:95:43:20:45:8e:94:46:52:
ae:0e:d0:cc:7a:50:e2:02:72:04:cb:09:48:08:4c:
b7:b2:96:c9:c2:25:7e:19:fc:4a:ce:ef:0f:38:07:
29:3f:1d:53:6b:a3:6a:b0:c1:a1:7e:bc:a1:3a:d5:
f3:24:66:46:a7:06:a5:17:35:8c:fd:a9:84:10:38:
53:7b:41:10:37:e4:38:7d:9c:95:10:c7:a2:e1:8c:
ca:0a:80:68:08:67:fa:d0:67:d4:e1:d4:19:e1:8d:
11:96:c7:6d:5c:f3:85:f7:da:37:57:54:b5:48:65:
c1:3c:03:b4:9d:ab:c4:0a:10:6e:a0:05:66:e7:17:
18:05:f3:d1:c1:97:6c:b7:cf:c1:0f:a1:a7:14:e7:
17:e5:e8:97:de:e7:0e:85:06:c5:60:39:26:85:1c:
41:33:1f:8f:48:64:8d:f6:79:e0:f6:21:84:33:96:
f8:89:ba:53:c9:cc:52:8a:a1:a0:c1:a5:b3:e7:b0:
cd:dd:e8:e9:08:6a:0d:37:cd:b9:eb:00:ef:97:94:
96:1d:34:74:83:fd:8d:5c:d0:8e:30:0b:8b:35:c4:
3c:3e:59:19:2a:a6:0a:44:2c:cd:21:58:19:f3:83:
3e:88:be:f7:a8:2f:a6:19:8d:62:38:e4:9f:54:e7:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:E4:8B:C7:31:05:62:1C:E7:D9:22:25:DD:3D:F2:3A:17:EE:06
X509v3 Authority Key Identifier:
keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:43:af:df:3c:b4:c6:6c:59:2a:67:4e:f1:0f:bf:91:7e:37:
e5:11:07:e9:2f:3c:5d:1e:96:4e:2b:97:c2:e3:10:f8:3e:76:
97:fc:eb:89:09:c9:79:73:2a:30:a7:25:a5:8e:55:db:9e:18:
79:bc:cb:79:79:aa:5a:21:81:3d:c7:49:59:ba:c1:6c:8e:d1:
cd:f5:20:a2:d1:a5:3e:af:5a:bc:c9:4c:2a:95:69:16:31:2b:
8e:35:9a:58:ce:63:35:b0:aa:13:0d:69:9b:07:80:20:c6:9b:
37:cb:d0:7d:45:89:01:3a:f5:93:d9:b4:25:5c:18:5c:20:ca:
02:ee:84:e0:a2:dc:30:09:19:96:c7:e6:e6:b7:71:b6:a5:42:
4c:18:e5:f5:90:3b:44:53:3a:34:71:e9:d5:6a:c1:c1:5a:0e:
52:99:ff:eb:6b:e7:c7:2c:d1:5a:63:87:17:fe:32:63:13:44:
b3:b9:8e:e9:25:ac:54:1b:94:fd:7e:95:0d:9a:5a:64:b4:6b:
d3:35:df:aa:c4:76:06:02:92:2e:80:74:37:48:14:8e:1f:8a:
30:2d:ef:a9:9b:14:7f:df:01:bc:bc:10:cb:ad:e0:72:8c:f6:
8c:69:ae:94:ee:98:0c:93:55:d2:dd:ae:59:fb:11:06:f3:26:
0b:46:77:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:14 2026 by rpki-client