
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CF6BED9EC63611EEA0C70259C4F9AE02.roa
File: CF6BED9EC63611EEA0C70259C4F9AE02.roa (raw, json)
Hash identifier: G8nSskd1+3Dt8bKMm41Vgd5eqqIso/sxjiFR4lCLrKo=
Subject key identifier: C8:0F:FD:40:FE:DC:F3:A7:79:F2:5A:67:9F:24:82:6D:9E:3D:B0:48
Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial: 0180
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CF6BED9EC63611EEA0C70259C4F9AE02.roa
Signing time: Wed 11 Feb 2026 04:23:32 +0000
ROA not before: Wed 11 Feb 2026 04:23:32 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 398704
IP address blocks: 157.15.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Validity
Not Before: Feb 11 04:23:32 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=698c0444-6349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:a5:7a:2e:e4:e7:2e:d8:47:a4:92:ef:3f:
30:86:78:28:0e:58:47:cf:a8:90:3e:30:a7:89:45:
58:18:cd:33:06:f8:cc:d2:5f:a2:86:e4:07:78:82:
4e:f1:07:a0:44:58:23:90:e4:e3:47:24:da:24:0e:
67:a6:9d:7f:a4:ca:ed:b9:48:5c:0a:1b:fa:87:8c:
86:85:35:d7:26:6d:84:ac:c9:ef:c8:6a:5e:76:7a:
6c:f8:af:78:f2:c2:7f:76:c9:74:63:16:01:01:25:
8d:f2:24:32:8f:d5:f9:cb:a2:ee:8a:06:8b:66:a1:
6e:18:a6:a7:7a:ea:5c:1e:ce:bc:a0:2e:c5:78:21:
7a:07:98:6d:f6:95:b1:f0:34:63:fb:24:cc:28:5e:
24:d3:79:b5:1b:fd:ac:5b:dc:54:fc:aa:99:61:6c:
b9:5c:b9:dc:2c:0a:3b:5f:72:53:a5:ae:99:ee:9e:
55:7c:be:d5:9e:de:5a:17:61:04:9f:3b:43:7c:ab:
ab:c0:7b:30:9f:45:d2:8e:30:71:a7:72:dd:dd:b3:
1b:d2:8b:99:e7:cf:e1:8a:14:fa:0a:d3:8c:a5:80:
04:96:42:75:4e:ea:90:c1:e3:f9:b7:f7:89:d0:bf:
96:b0:58:aa:c8:0c:92:cc:fa:7d:c8:9b:76:7d:15:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0F:FD:40:FE:DC:F3:A7:79:F2:5A:67:9F:24:82:6D:9E:3D:B0:48
X509v3 Authority Key Identifier:
keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CF6BED9EC63611EEA0C70259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.15.28.0/23
Signature Algorithm: sha256WithRSAEncryption
25:11:f6:2b:52:b1:77:9a:09:31:a4:88:c4:bf:bd:95:0e:1c:
9f:12:29:43:45:70:39:e9:3d:77:5e:09:ac:6a:0a:1a:ae:bb:
a8:cb:ea:c8:eb:fe:7f:e7:96:27:d5:0f:fe:61:62:93:33:a3:
54:c4:44:b2:f3:fd:8a:31:52:cc:9d:7f:cd:bb:3f:a5:ea:11:
a9:6d:78:0d:9c:b1:69:15:f0:4a:24:be:1f:64:7c:87:db:b2:
91:4e:47:2a:37:cc:09:9d:1e:34:63:ab:e1:59:54:23:34:2a:
0e:7c:45:85:91:09:42:64:76:f0:b2:84:03:e2:9d:f3:eb:0c:
c7:36:ae:c6:ec:89:2c:f3:19:0b:9f:6d:fe:d2:7b:18:ed:96:
41:2c:4c:42:7d:3a:60:7f:0d:58:56:4f:84:2a:cf:c9:cc:c5:
33:f3:4a:68:9d:93:61:96:89:01:a0:f4:4f:8a:9e:94:2b:59:
fd:b9:d1:19:cd:e1:0d:e7:bb:e8:ee:e0:8a:a0:db:e0:a1:5b:
69:c5:8d:0c:51:a1:27:dd:a2:ca:f5:61:05:ba:6d:69:b7:93:
8f:3a:e8:e1:fd:58:70:95:77:d9:28:ae:c5:44:6d:91:59:63:
1d:90:17:97:d5:e9:66:76:ac:8e:aa:ac:19:07:4c:4c:b6:ca:
38:ec:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:37 2026 by rpki-client