
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/A146F2C2ECD011EE8891034AC4F9AE02.roa
File: A146F2C2ECD011EE8891034AC4F9AE02.roa (raw, json)
Hash identifier: tehmXdSXWDxQ3HwVAZbpjn22MNGQBxQcNE9cFpMit6U=
Subject key identifier: EF:21:A1:AB:0F:CE:10:C3:15:A6:B3:95:2C:A2:C8:20:D5:CD:14:D4
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 0185
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/A146F2C2ECD011EE8891034AC4F9AE02.roa
Signing time: Tue 31 Mar 2026 04:37:44 +0000
ROA not before: Tue 31 Mar 2026 04:37:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138467
IP address blocks: 157.10.6.0/24 maxlen: 24
157.10.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389 (0x185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Mar 31 04:37:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69cb4f97-e1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:c3:a5:0f:1d:14:c6:ad:c1:02:5f:77:b4:
14:88:ab:8c:7e:b9:a3:b2:6d:60:de:8a:18:c1:cf:
df:0b:ae:d8:b3:69:e0:42:fc:1f:0c:b3:22:2b:e6:
91:d6:c1:16:07:f7:e1:2c:3e:42:fe:20:7f:b3:f5:
e1:32:9d:43:6c:a9:62:6d:0c:b8:16:5f:f1:c0:11:
96:b9:f8:76:61:84:4c:7b:ad:d1:9c:cc:45:d8:9f:
d0:ef:7f:9d:d7:e7:31:fc:a2:ed:90:7b:85:83:04:
99:c7:c1:80:d4:84:db:ff:89:d0:fe:10:89:ad:5f:
3a:27:6a:9b:67:69:72:1b:52:83:e8:7a:18:1e:1c:
8b:84:08:05:6e:5d:2a:11:4f:76:54:ee:78:dd:0e:
26:5d:14:3a:2b:3c:49:39:00:f9:d8:47:3b:1b:86:
d9:ed:7d:4f:71:16:35:21:1d:d4:b3:e8:a1:77:43:
2a:a5:5f:64:02:0e:63:cc:15:0c:27:ca:d4:ec:85:
76:68:33:c2:29:1a:a5:3c:5a:39:21:ca:d4:5b:5a:
e5:dd:47:24:00:ca:83:5a:97:ee:f2:1d:19:8c:02:
37:ca:52:a6:58:50:53:5e:da:ab:cd:f5:96:98:8f:
e1:ac:f1:8a:a4:2a:03:d2:11:e2:96:71:13:cb:55:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:21:A1:AB:0F:CE:10:C3:15:A6:B3:95:2C:A2:C8:20:D5:CD:14:D4
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/A146F2C2ECD011EE8891034AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.6.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:f3:13:41:2b:13:f2:8b:df:3f:3a:d4:96:ff:8a:7d:e1:67:
39:bb:21:a7:6f:2d:a2:f4:bd:c7:7d:bb:48:66:eb:2f:c4:da:
d8:59:9e:6f:01:98:16:55:f2:6b:dd:b8:a6:ac:3e:dd:f0:cf:
31:df:20:2e:4a:b7:21:e3:2b:c3:1a:2f:c2:68:3d:b1:c8:0e:
2e:27:c6:f5:02:2a:68:6a:4a:35:00:a3:99:a8:7c:ee:88:cc:
df:01:3a:8f:a8:66:d8:bf:08:0d:d4:8a:2e:6f:07:01:5a:d2:
4e:1f:d7:68:27:ab:01:bf:82:ad:f3:f6:74:ae:b7:04:df:71:
98:3b:37:47:bf:50:c1:51:7c:95:77:68:23:ab:91:a4:a5:0b:
cf:23:0b:27:9c:5c:7d:d0:8e:3d:a7:44:f4:74:1b:f1:35:fb:
e5:91:c1:88:c0:76:f0:5e:94:cc:b8:17:11:4c:88:20:ff:de:
45:90:13:67:f7:c3:d9:b9:4c:dc:14:ec:51:ca:74:9d:8d:10:
1a:7c:c6:f3:f5:ee:36:b1:ae:49:e0:af:61:9e:43:6a:e8:9b:
5c:71:d9:64:8c:59:48:57:34:e5:b3:2d:0f:72:5c:40:d8:d2:
9d:7e:9d:80:b6:70:9f:03:c4:d8:b1:04:af:ce:84:ee:4d:dc:
90:dc:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:26 2026 by rpki-client