
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/4CCA7C1E34E511F1AF14078F91833773.roa
File: 4CCA7C1E34E511F1AF14078F91833773.roa (raw, json)
Hash identifier: IjUm+BH6SUivx0UO20wJhS2k8Pz3XHEgptYkjotxwWg=
Subject key identifier: 14:4B:64:B5:FC:16:39:A9:8B:98:08:6D:BE:9A:02:67:56:9A:0F:EF
Certificate issuer: /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial: 28
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/4CCA7C1E34E511F1AF14078F91833773.roa
Signing time: Fri 10 Apr 2026 13:58:07 +0000
ROA not before: Fri 10 Apr 2026 13:58:07 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135651
IP address blocks: 151.158.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Validity
Not Before: Apr 10 13:58:07 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69d901ee-8791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:8a:2d:ec:ff:aa:f0:bc:6c:cd:88:c9:34:
dc:20:59:66:a7:0d:f1:b6:09:c4:8f:cc:a4:cd:6e:
80:8d:79:0d:cd:04:e4:d6:8f:c3:c4:66:78:22:4a:
05:88:c8:50:e0:51:ec:60:b8:01:3f:13:b7:ba:25:
e9:fb:ed:35:a8:20:4f:d9:79:23:d7:a9:e3:e8:ea:
19:88:f8:c1:43:2e:d1:25:fd:83:92:64:2b:b7:b9:
ab:be:97:3c:4b:be:32:c2:9b:2e:f8:58:60:d0:ff:
dd:23:c8:a4:98:a1:af:09:f2:cd:47:9a:c8:64:75:
ce:be:e0:ca:8c:fa:7c:71:7f:40:56:4c:f3:f6:ff:
58:66:bc:49:b9:d4:23:35:81:fc:86:e9:ba:0f:60:
64:24:ec:be:a0:95:99:be:f9:76:b5:85:0b:7b:2e:
c0:18:b7:99:a0:21:27:ca:6d:97:6f:6b:4d:e1:0e:
60:56:c3:a0:9a:1d:8f:35:f9:5a:ca:be:db:4e:53:
b4:59:3c:ae:b8:df:25:99:1a:73:b5:a1:30:53:d5:
2f:5a:fd:6f:51:66:36:98:9d:75:90:75:13:c6:6e:
03:54:6e:72:bd:f9:90:9d:61:34:75:80:68:ae:a5:
76:6e:02:23:96:b2:c7:ba:54:d4:a2:af:8f:0d:e4:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:64:B5:FC:16:39:A9:8B:98:08:6D:BE:9A:02:67:56:9A:0F:EF
X509v3 Authority Key Identifier:
keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/4CCA7C1E34E511F1AF14078F91833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.206.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9c:bf:c3:37:c6:5c:23:f4:40:65:cb:49:16:fe:08:4a:a8:
85:f0:02:5d:7c:63:ec:04:27:46:a1:e7:2c:84:c0:52:d5:65:
df:51:96:5a:ff:d0:1e:89:10:6b:38:c0:4f:a6:96:ca:fe:42:
fa:4f:9a:aa:13:d6:dc:6f:9d:3b:8f:26:87:12:56:86:66:0b:
93:fe:71:be:fb:ab:8a:0b:0e:2a:05:a7:85:92:48:83:14:4b:
2f:93:cf:3a:42:18:56:49:f1:3a:39:0c:af:0f:5c:2c:92:85:
32:3b:21:fc:df:3d:8e:86:69:31:cd:4c:33:5d:25:f4:99:33:
52:51:61:87:3f:2b:bc:25:7a:20:83:9a:5f:3b:3c:d2:5f:e6:
e9:11:a1:a7:5b:ed:a7:b1:92:98:64:c5:6c:d5:69:12:8d:af:
1d:59:72:12:ad:71:80:06:8c:7c:bc:0b:48:bf:8f:e0:7f:bd:
8b:ac:84:ea:cb:93:6e:08:30:dc:ae:52:12:d8:e3:aa:ec:7a:
06:0d:24:28:d5:bb:62:7f:11:4c:55:26:32:ec:f8:1e:2f:9f:
ab:87:a0:7e:b9:35:f4:5b:02:25:5f:ad:0f:ab:e5:5c:68:f8:
36:45:df:a7:fa:01:da:57:45:44:31:b1:2b:7c:a3:ef:73:a5:
14:2c:39:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:10 2026 by rpki-client