
$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
File: 3E037E68FF7C11F086EA69A45B6F56BC.roa (raw, json)
Hash identifier: r3lNg8EWJOKoNWJ6zf/k8aclnVMD0So3S9nDRkl8wlo=
Subject key identifier: DF:06:11:16:59:E9:68:5E:F4:7E:20:4A:FA:7D:73:27:2D:91:44:32
Certificate issuer: /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial: 41
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
Signing time: Sat 09 May 2026 13:52:51 +0000
ROA not before: Sat 09 May 2026 13:52:51 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132387
IP address blocks: 151.158.86.0/23 maxlen: 23
151.158.86.0/24 maxlen: 24
151.158.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Validity
Not Before: May 9 13:52:51 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ff3c32-296c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:38:82:18:b3:66:ed:a9:e5:a8:31:8e:a6:0c:
74:75:b4:47:9f:52:de:b4:0c:0f:1b:d3:2b:20:e1:
6c:60:d9:16:e6:9a:32:3c:4e:25:cc:2d:1d:16:64:
a6:42:46:b6:26:c4:38:2f:57:fd:53:4e:c2:39:c5:
37:5b:08:03:7e:cc:2f:e4:d8:b3:3d:cb:9c:f9:28:
2a:10:6c:34:4b:ba:f9:db:81:40:d6:93:8a:1c:b1:
5e:31:d7:96:43:c4:32:04:42:66:fa:af:73:c8:c9:
d2:4a:09:b9:72:1a:83:3c:4e:34:1c:9e:14:d2:d6:
8f:2f:a9:c6:ec:d8:08:5b:f6:7b:ce:b1:c9:ef:9b:
62:4d:f0:10:8e:db:05:c6:ef:1f:e6:24:b8:a0:91:
2e:44:a9:9d:34:b2:dc:bf:78:8b:6a:12:a9:44:51:
08:85:d3:c2:e4:a8:92:a5:2c:b3:b9:d1:dd:35:08:
f8:76:85:45:0a:ef:a6:85:58:f8:c0:aa:45:57:38:
3f:f8:37:03:31:d5:41:1a:59:b5:ee:01:9e:26:7e:
2d:98:ad:56:45:6f:4c:26:a7:85:1d:ba:14:e6:a3:
e4:a0:18:b0:09:9f:cb:cd:8c:22:8f:00:7b:74:cb:
77:b8:ec:5e:8d:c6:74:ee:b6:5f:fb:77:be:5a:c8:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:11:16:59:E9:68:5E:F4:7E:20:4A:FA:7D:73:27:2D:91:44:32
X509v3 Authority Key Identifier:
keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.86.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:6c:a4:7c:62:19:f7:7d:0e:08:a7:37:97:f8:a9:a9:b0:1a:
9b:06:61:ae:f5:01:6c:e4:e1:f0:29:c3:39:76:a5:67:06:0e:
10:62:c8:79:93:1c:3b:f6:1f:41:a2:23:72:a9:b0:71:e4:50:
4f:41:ac:c7:6d:e4:0d:e7:04:8c:ea:86:d7:f5:d3:fa:18:fb:
b7:57:66:cf:a2:55:c0:7a:30:11:cf:cd:b2:38:2c:e4:18:03:
87:25:53:02:43:ce:1c:d0:5b:2f:22:05:73:c0:2f:aa:fd:a8:
bc:3f:85:4d:f5:16:7b:1b:24:9c:6e:7e:e5:5b:fc:7f:9a:01:
3c:7f:5a:84:d8:d6:a9:25:ca:b7:d2:ad:d2:09:88:34:06:8d:
82:01:4b:78:0b:53:07:b6:36:c6:e8:ea:14:ca:d2:fc:25:1e:
33:91:9a:79:99:71:7a:4e:cf:b5:8c:20:9e:5c:1e:57:6f:c9:
e2:82:86:f6:1b:23:5d:8c:54:b8:e1:43:71:81:05:97:3d:89:
1d:04:59:a4:ca:0f:4e:87:47:f1:6e:84:22:bd:61:e5:5c:9e:
fb:27:9b:e6:c9:37:24:e1:96:03:07:df:2d:6b:53:f9:b4:38:
5f:25:49:12:f2:d1:7b:6d:fb:4a:dc:e8:45:ac:60:3f:b3:68:
4a:a5:4f:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:37 2026 by rpki-client