
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/0FED0338F66C11EFA1F5216AC4F9AE02.roa
File: 0FED0338F66C11EFA1F5216AC4F9AE02.roa (raw, json)
Hash identifier: udA5dkOMWcirosyp6BH8BJ5DzqeMRlRQ5QrNZXSNeyA=
Subject key identifier: 1C:0D:35:99:16:47:E0:45:1D:73:68:A9:ED:36:65:54:21:C9:00:2A
Certificate issuer: /CN=A91FEB37/serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Certificate serial: C4
Authority key identifier: 4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/0FED0338F66C11EFA1F5216AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:05:19 +0000
ROA not before: Sat 01 Mar 2025 07:09:52 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152329
IP address blocks: 157.10.224.0/24 maxlen: 24
157.10.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:12:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB37, serialNumber=4E68B048DD3DDBA5F478F1FD288A8618BA9FABAA
Validity
Not Before: Mar 1 07:09:52 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3f33f-7484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:66:19:4e:99:42:6a:90:fa:90:43:0e:e5:
00:f3:3c:5a:a9:e9:a0:dd:0d:67:77:11:c3:89:ed:
0c:95:51:9e:d8:d7:72:c8:60:47:9d:1b:de:2e:6e:
18:83:a6:b7:2d:88:10:56:6b:4b:5d:9c:b5:2f:e3:
1b:ef:c2:13:df:96:21:8a:3d:d6:cc:2f:08:11:b6:
b1:db:03:46:cf:dc:41:89:2e:38:37:fe:31:e8:96:
3b:94:12:ef:d3:9e:e5:0a:78:0d:fc:6e:ac:7c:93:
b5:b9:f3:24:14:7f:b1:50:2d:b5:01:25:0e:09:ee:
a7:f7:95:5a:8f:10:fb:79:fb:14:03:53:f5:5c:f5:
0d:91:51:66:ed:5d:51:db:98:01:a3:6f:fd:f0:09:
bb:91:65:45:49:44:cf:c3:5d:48:13:19:3d:9d:eb:
dc:23:93:6a:e7:38:55:93:e7:41:f1:0a:3e:c2:df:
2c:ee:5e:c9:22:c1:45:f3:2b:bd:5e:07:28:bd:66:
78:54:60:ba:2e:90:8f:60:a7:d4:f9:d4:64:9b:64:
ca:b5:6b:93:4c:17:61:a3:e5:79:74:77:b5:79:34:
88:c4:bb:e2:04:c1:eb:a0:b4:65:4b:5a:9f:59:da:
20:34:5c:14:db:83:2a:c7:a2:70:e8:45:93:df:38:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:35:99:16:47:E0:45:1D:73:68:A9:ED:36:65:54:21:C9:00:2A
X509v3 Authority Key Identifier:
keyid:4E:68:B0:48:DD:3D:DB:A5:F4:78:F1:FD:28:8A:86:18:BA:9F:AB:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/TmiwSN0926X0ePH9KIqGGLqfq6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TmiwSN0926X0ePH9KIqGGLqfq6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/3CB779E0F5F711EFB82EFD6BC4F9AE02/0FED0338F66C11EFA1F5216AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.224.0/23
Signature Algorithm: sha256WithRSAEncryption
47:36:eb:c6:01:50:ed:82:a9:4f:2e:c6:9d:55:f5:05:45:8c:
6a:39:d0:16:fc:96:0a:bb:92:70:c1:22:86:8c:e9:6f:e3:3b:
17:7b:96:17:f9:b0:a9:02:ec:4f:79:f2:29:30:13:fe:3a:dd:
c1:0c:2b:b5:93:0a:bc:ad:82:7b:e6:a8:bc:37:b3:77:69:88:
aa:60:23:cf:1a:bf:33:eb:b3:a7:dc:47:62:57:aa:9f:ce:53:
19:c0:cb:e4:43:5d:75:0e:81:d8:19:76:25:d3:78:a2:8e:44:
89:db:4d:f9:b1:fd:1f:37:81:e6:25:a1:7f:72:20:9b:e5:8e:
ac:20:7f:4c:66:25:2a:41:e1:fc:38:72:72:fa:ce:0d:b9:1b:
29:13:a8:bc:4f:eb:0c:86:13:99:a9:4b:cf:38:00:0a:db:0f:
c2:98:d9:e3:a4:3d:13:ab:75:61:6d:95:e3:3f:d3:db:de:d4:
9b:eb:e4:94:dd:09:a4:d9:3b:e4:b8:b8:9a:24:5a:97:6c:df:
37:f2:2f:9d:ab:0a:f0:2f:05:77:85:91:32:43:b7:56:57:88:
ad:6b:45:c7:16:fc:63:7e:c3:5f:f7:a9:02:8f:e8:47:97:2f:
09:cf:82:18:62:f0:dc:96:4e:b6:ab:28:ed:43:46:5f:14:ee:
0c:a2:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:24 2026 by rpki-client