
$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/C0838B364D3211F19F7BE348C2833773.roa
File: C0838B364D3211F19F7BE348C2833773.roa (raw, json)
Hash identifier: J3Z7es5Uh4rR/ZxShTh4SGcaI5GZVCJNn9Qv4oL/qLA=
Subject key identifier: 9D:92:7F:57:3C:04:54:63:03:6F:A5:6A:F6:EB:0A:72:D6:B7:B1:19
Certificate issuer: /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial: 47
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/C0838B364D3211F19F7BE348C2833773.roa
Signing time: Mon 11 May 2026 12:14:19 +0000
ROA not before: Mon 11 May 2026 12:14:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140035
IP address blocks: 151.158.86.0/23 maxlen: 23
151.158.86.0/24 maxlen: 24
151.158.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 12:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Validity
Not Before: May 11 12:14:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a01c81b-959d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:6a:3d:62:35:db:eb:75:2d:1c:ab:7e:b0:
12:5e:aa:16:18:d2:45:85:90:c3:17:be:16:9c:3a:
43:c1:97:ee:09:8c:55:bd:99:eb:52:1a:7f:d2:d9:
05:9b:cd:59:99:41:50:6c:98:de:10:1d:e4:35:2c:
a6:5a:df:2a:9e:18:13:37:e5:39:54:ba:55:2e:1a:
69:8d:d2:2e:de:57:aa:d5:90:23:3d:0e:ee:a6:5f:
93:cd:3b:3b:27:3e:7b:17:6c:eb:6c:24:db:1d:80:
a3:ae:f6:b1:a9:b4:4d:9a:c6:fe:1b:7d:80:a0:61:
68:bc:30:ce:e7:61:d9:2b:cd:98:0e:e4:d5:97:f0:
aa:47:bf:3f:19:22:1a:f4:73:70:7d:6a:21:45:de:
eb:97:2f:7d:98:08:90:a5:e3:2c:b9:b8:08:d0:b3:
82:cf:2f:3c:d1:7d:fd:79:f6:64:5c:e7:30:b5:91:
b0:a2:96:00:5a:c8:31:df:f3:5c:18:d1:99:13:a5:
cc:8b:f6:de:d1:70:fc:05:09:f7:65:c7:f4:cc:44:
eb:24:72:a9:45:33:a4:34:f8:71:31:b8:cb:90:b7:
7f:c4:12:3c:03:1b:1b:ae:04:08:d8:c5:e9:f4:2f:
02:59:60:14:ce:19:4b:cc:58:97:03:da:50:d6:81:
b1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:7F:57:3C:04:54:63:03:6F:A5:6A:F6:EB:0A:72:D6:B7:B1:19
X509v3 Authority Key Identifier:
keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/C0838B364D3211F19F7BE348C2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.86.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:02:29:26:6c:fc:23:be:59:4f:d6:64:d6:6e:ab:90:58:f7:
86:98:85:ba:3e:fe:6f:21:f7:86:db:d3:ab:a3:ad:94:3c:48:
f5:6b:e2:c3:b6:9c:36:f3:7b:88:e2:17:bd:a5:97:7b:09:82:
c1:ba:de:54:ac:3f:df:95:74:5e:75:9c:b2:6f:f4:c8:08:94:
8c:7b:94:47:90:69:a7:aa:0a:0a:aa:44:cb:68:f2:e2:05:43:
d8:42:9c:54:d8:8f:a9:b5:dc:ed:63:49:40:96:e1:87:40:37:
5a:f4:3a:e8:88:3b:3f:41:36:5d:6b:fc:48:86:ae:6a:b8:ab:
e5:94:f8:e1:d6:fe:09:03:8a:eb:2a:c3:b4:bd:30:40:c3:17:
05:c7:d8:dd:e9:b7:f0:64:45:a1:fc:18:1c:68:b8:d9:a3:8b:
23:1d:aa:6c:6d:82:cf:c1:88:a1:9e:f0:5d:e6:f4:0c:bf:95:
8f:0a:01:0a:2c:d6:fe:c9:8b:3c:4c:19:ba:60:88:c5:51:16:
75:b4:60:fa:8a:8b:fe:00:f4:ca:fb:fd:44:c6:b2:27:54:4f:
46:c4:ff:59:ca:9c:54:49:c8:a8:b6:3e:00:bb:b7:e4:4c:16:
92:15:14:62:11:9f:90:e4:22:f0:7c:49:de:65:88:0f:c6:43:
31:be:fd:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:31 2026 by rpki-client