
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
File: A19F973C60C011F0A28C7F2CC4F9AE02.roa (raw, json)
Hash identifier: y+sTsz0tA3g3DzsQDXuqpBvyUzmJcH4SyCIepVtJQs4=
Subject key identifier: 55:20:5B:91:9B:CA:73:E4:3D:5B:BA:AE:D6:CC:6B:41:55:56:1B:F2
Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial: DB
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
Signing time: Tue 01 Sep 2026 14:29:49 +0000
ROA not before: Tue 01 Sep 2026 14:29:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 151335
IP address blocks: 157.15.128.0/24 maxlen: 24
157.15.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Validity
Not Before: Sep 1 14:29:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a96e15d-7ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:b8:17:3f:85:13:45:6b:44:01:8a:35:c1:
11:02:8d:99:4c:b3:2c:a7:3f:a0:64:bb:32:95:72:
3c:a8:24:5d:a1:fd:9e:d5:1d:db:87:31:e8:aa:f7:
02:48:e5:ef:a7:f9:3e:95:9f:0a:32:dc:6a:a9:99:
8a:8d:40:d6:28:a2:de:b2:45:14:cd:1d:65:75:5e:
1e:3f:ea:23:6d:e5:22:26:d0:9a:aa:e5:6d:27:49:
d1:52:78:cd:82:fa:53:f7:e9:b6:70:32:69:3f:49:
d8:28:84:99:4d:19:6a:9e:21:c4:8d:b0:d7:91:cb:
0c:f2:ec:5c:09:24:c0:72:a2:91:2e:d2:a5:40:5f:
41:b0:0b:17:56:08:2d:a5:94:56:df:dd:ad:6a:7a:
0d:d8:b2:9e:3a:ba:30:ca:8d:fd:7d:e3:86:f3:44:
2f:a8:38:96:93:e1:52:89:0f:45:57:45:16:ac:3b:
1a:35:06:9a:d0:a4:ac:e3:37:08:c1:e1:74:9b:26:
7c:ec:0b:86:e8:7f:f6:57:37:04:3b:a4:2f:a3:db:
53:d4:a1:9e:cb:ea:a4:3f:42:1a:3c:d0:26:e6:c5:
26:85:77:d3:15:71:1b:68:ff:92:c8:34:f4:c5:80:
7d:5f:49:9a:46:0d:32:09:40:d3:36:ed:b6:8d:cb:
42:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:5B:91:9B:CA:73:E4:3D:5B:BA:AE:D6:CC:6B:41:55:56:1B:F2
X509v3 Authority Key Identifier:
keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.128.0/23
Signature Algorithm: sha256WithRSAEncryption
86:0c:7a:31:43:66:ed:db:6f:f7:e4:c9:ad:17:38:6c:fe:d9:
80:94:67:63:f8:78:a5:f6:9c:25:d4:03:e2:75:d5:db:a3:93:
b0:98:b3:a7:5a:66:d6:dc:d0:4a:eb:99:70:f4:91:4b:96:7d:
2e:4e:e8:19:be:ee:84:40:4f:ce:9a:be:c3:1b:e1:6f:17:74:
1b:7a:45:b2:59:16:6f:ec:23:9f:c3:57:c8:0c:fd:25:e4:20:
6d:a0:0f:71:02:ba:39:02:e2:5c:69:6a:b1:6f:6d:c4:54:6a:
ba:fb:d0:15:49:b2:68:eb:5c:ca:6b:77:a1:78:e8:02:34:07:
cf:88:e6:d9:6c:b3:2a:d6:25:31:93:d1:30:a8:e4:0f:11:88:
f8:19:3d:89:8e:64:17:f3:dc:b0:bc:11:ff:10:e1:8f:d2:88:
d0:f6:a1:f9:ca:23:be:89:4a:8d:0f:da:d4:03:e7:84:d2:a5:
82:60:6a:76:c2:11:d3:3f:6e:c5:df:e3:5a:f0:50:66:3f:e6:
00:ce:c0:48:94:d9:3a:60:d2:f1:0e:2f:1d:36:e7:ea:f1:9d:
94:ce:02:4f:5e:85:34:8f:6b:2e:27:7e:8b:83:13:3d:03:af:
2f:cf:a8:9b:8a:ec:1b:01:1e:f9:d9:5b:6b:b6:1f:9c:e3:dd:
37:63:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:21:51 2026 by rpki-client