
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/680DBCE8CACA11EEAD1A2260C4F9AE02.roa
File: 680DBCE8CACA11EEAD1A2260C4F9AE02.roa (raw, json)
Hash identifier: AFu4zGkSyNlV0t4v4NxKTl9d3CuMomv0S/rrnfD1qxA=
Subject key identifier: A2:3C:6D:F9:1C:35:D3:9D:7C:1F:4C:0A:A7:0C:78:55:BB:D6:75:AC
Certificate issuer: /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial: 0181
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/680DBCE8CACA11EEAD1A2260C4F9AE02.roa
Signing time: Fri 27 Feb 2026 04:23:36 +0000
ROA not before: Fri 27 Feb 2026 04:23:36 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152469
IP address blocks: 157.15.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Validity
Not Before: Feb 27 04:23:36 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a11c48-7ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:80:51:36:f6:a4:32:1d:56:1c:66:48:90:
14:c7:05:89:10:9d:37:79:f7:65:16:1e:a8:0c:f5:
78:9f:c3:93:0c:11:5c:ed:27:25:da:e5:57:6e:d5:
81:b7:d7:6b:ac:f0:73:e7:73:be:8a:1c:88:b0:59:
b2:ea:a6:50:9c:be:81:fe:fd:d2:a5:cd:0c:15:b4:
1e:1c:1d:1d:82:69:94:44:93:2d:e8:53:8d:d5:6c:
2a:97:d9:92:2d:87:f5:e6:07:2d:45:ea:e0:d9:a9:
96:2a:e9:54:3a:5b:13:39:74:ca:8c:07:01:c2:95:
85:c5:b5:42:1e:05:4d:df:8b:94:46:8e:59:90:df:
cc:2a:20:ab:87:54:71:65:80:6b:21:68:00:81:d0:
e5:e1:e9:19:ff:79:56:dd:2a:04:fa:b9:0d:6c:e5:
d5:9e:1c:f3:6f:db:19:09:1f:05:3c:be:00:6c:bc:
c4:21:10:99:2e:88:3c:1e:ba:0c:2d:ff:16:a5:67:
ab:df:00:2c:11:d4:84:f3:2f:13:4f:a5:b2:01:90:
ec:70:8d:90:28:70:08:c7:e2:57:74:f0:65:c6:ed:
63:94:9e:71:a3:8b:0f:e0:4c:c6:12:d6:32:d0:88:
08:96:b3:a1:58:69:35:e3:c7:b7:fb:c3:4b:02:75:
43:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:6D:F9:1C:35:D3:9D:7C:1F:4C:0A:A7:0C:78:55:BB:D6:75:AC
X509v3 Authority Key Identifier:
keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/680DBCE8CACA11EEAD1A2260C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.196.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:6f:fc:67:09:d8:e5:47:5a:c6:82:35:6a:e7:b9:97:34:f0:
2c:b7:24:52:3e:91:0c:f3:6a:39:a0:18:64:1d:2d:67:3e:3d:
2c:ed:8e:19:1f:12:4e:ac:f9:ea:99:cf:c8:0c:ca:3e:72:60:
67:4e:ae:dd:72:3d:4d:a5:dd:4d:7f:1d:db:16:ce:aa:d7:2f:
51:43:9a:86:2d:ba:19:8e:ce:08:8a:16:59:c2:b2:74:32:f2:
5b:60:d5:dd:32:bc:27:e0:01:eb:1b:d4:bd:05:dc:5a:6b:bb:
b3:ce:5c:91:eb:5b:c3:63:ce:53:d3:e8:0d:6e:5a:cc:3a:fd:
bb:df:1c:dd:8d:a1:a0:52:d0:4a:7d:01:f2:a4:56:d1:06:6e:
be:3f:53:42:c9:31:ab:c5:69:f8:ce:6d:d5:5b:02:d4:a3:6f:
e3:1d:d9:f1:2d:0b:e9:bc:0f:09:0b:0a:aa:35:00:7e:45:2b:
66:a6:51:49:ca:cd:63:47:f0:bc:c0:37:13:fa:8e:cd:c9:84:
19:f7:e3:3a:7c:da:4a:f1:d2:53:46:fb:50:31:89:d0:ae:e0:
ac:d0:a5:f1:17:8e:ed:f1:8d:84:90:4e:39:f9:1c:39:90:c2:
62:30:55:15:5b:d2:e3:0d:5f:44:82:ec:c3:01:e1:96:ca:39:
e6:c0:a9:d0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1MDAxMTAvBgNVBAUTKEI5Q0E3OUZCNjg1QzJFRkYzRkI5Q0NCOUNEMkQ4NDgx
MTY5MDhBMzIwHhcNMjYwMjI3MDQyMzM2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWExMWM0OC03YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTaAUTb2pDIdVhxmSJAUxwWJEJ03efdlFh6oDPV4n8OTDBFc7Scl2uVXbtWB
t9drrPBz53O+ihyIsFmy6qZQnL6B/v3Spc0MFbQeHB0dgmmURJMt6FON1Wwql9mS
LYf15gctRerg2amWKulUOlsTOXTKjAcBwpWFxbVCHgVN34uURo5ZkN/MKiCrh1Rx
ZYBrIWgAgdDl4ekZ/3lW3SoE+rkNbOXVnhzzb9sZCR8FPL4AbLzEIRCZLog8HroM
Lf8WpWer3wAsEdSE8y8TT6WyAZDscI2QKHAIx+JXdPBlxu1jlJ5xo4sP4EzGEtYy
0IgIlrOhWGk148e3+8NLAnVDCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKI8bfkc
NdOdfB9MCqcMeFW71nWsMB8GA1UdIwQYMBaAFLnKeftoXC7/P7nMuc0thIEWkIoy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC8zRkZGNUMzRUM3
MkQxMUVFOUM3QzM1MURDNEY5QUUwMi91Y3A1LTJoY0x2OF91Y3k1elMyRWdSYVFp
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VjcDUtMmhjTHY4X3VjeTV6UzJFZ1JhUWlqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REU1MDAvM0ZGRjVDM0VDNzJEMTFFRTlDN0MzNTFEQzRGOUFFMDIvNjgwREJDRThD
QUNBMTFFRUFEMUEyMjYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQ/EMA0GCSqGSIb3DQEBCwUAA4IBAQCpb/xnCdjlR1rGgjVq57mX
NPAstyRSPpEM82o5oBhkHS1nPj0s7Y4ZHxJOrPnqmc/IDMo+cmBnTq7dcj1Npd1N
fx3bFs6q1y9RQ5qGLboZjs4IihZZwrJ0MvJbYNXdMrwn4AHrG9S9Bdxaa7uzzlyR
61vDY85T0+gNblrMOv273xzdjaGgUtBKfQHypFbRBm6+P1NCyTGrxWn4zm3VWwLU
o2/jHdnxLQvpvA8JCwqqNQB+RStmplFJys1jR/C8wDcT+o7NyYQZ9+M6fNpK8dJT
RvtQMYnQruCs0KXxF47t8Y2EkE45+Rw5kMJiMFUVW9LjDV9EguzDAeGWyjnmwKnQ
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:58 2026 by rpki-client