
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/D111CFB407E411F1ADC4A5A5213D8C67.roa
File: D111CFB407E411F1ADC4A5A5213D8C67.roa (raw, json)
Hash identifier: lUmpfgR/p5W8luIbaZ+1ADUqFYn/T6101vy4MSXsnuo=
Subject key identifier: DD:5C:82:85:E8:9B:DC:71:E7:92:8E:25:E7:BD:BD:16:43:92:69:D0
Certificate issuer: /CN=A913CB06/serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Certificate serial: 10
Authority key identifier: 54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/D111CFB407E411F1ADC4A5A5213D8C67.roa
Signing time: Mon 02 Mar 2026 13:29:35 +0000
ROA not before: Thu 12 Feb 2026 07:31:17 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154481
IP address blocks: 151.158.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CB06, serialNumber=542DDE02ED5CD5A78A5850306B9E7A7E99FC260B
Validity
Not Before: Feb 12 07:31:17 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a590be-f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:ac:d7:f1:a8:1b:4c:c3:1e:ac:34:63:ad:
a2:9d:f7:fc:fb:da:44:e2:5a:19:20:20:f3:cd:5b:
82:07:a1:ac:eb:41:be:26:4a:ea:fb:7a:c3:3b:21:
43:e8:09:dc:b7:29:51:4c:2d:1e:8a:ef:86:0e:54:
64:d8:78:51:69:b5:88:09:1c:80:42:0a:37:bd:70:
72:ed:73:aa:15:01:5a:41:8b:8a:d9:1c:6c:7c:32:
62:6f:47:7b:ea:34:3f:f5:34:2f:e0:fb:20:74:86:
6f:8c:0c:2f:ad:97:cd:bf:8c:e0:98:3c:90:69:bb:
f7:39:70:bc:aa:12:97:f3:21:57:15:36:a7:90:d5:
42:3d:da:33:c1:d9:85:c8:e7:53:14:8f:68:e1:06:
6e:97:77:d5:43:b6:2e:5c:8b:a2:bf:ed:64:ae:89:
13:bf:7b:c6:aa:44:77:e4:ed:cc:9a:c9:b0:0f:b8:
67:c1:4a:2d:e8:ba:2e:90:ff:22:06:33:0d:9d:5d:
99:4d:fb:52:d6:57:68:6b:cb:e2:79:48:c7:33:e1:
77:c1:50:0d:dc:9d:a1:03:42:f1:3f:46:ef:ac:25:
e7:67:b9:46:ae:24:9b:b9:7c:fd:d1:07:de:85:e4:
0e:95:4c:e3:ea:06:2c:57:fd:18:2d:54:3b:6e:6b:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5C:82:85:E8:9B:DC:71:E7:92:8E:25:E7:BD:BD:16:43:92:69:D0
X509v3 Authority Key Identifier:
keyid:54:2D:DE:02:ED:5C:D5:A7:8A:58:50:30:6B:9E:7A:7E:99:FC:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/VC3eAu1c1aeKWFAwa556fpn8Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/VC3eAu1c1aeKWFAwa556fpn8Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CB06/8A4D76BE07E411F1A34718A5213D8C67/D111CFB407E411F1ADC4A5A5213D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.146.0/23
Signature Algorithm: sha256WithRSAEncryption
af:9c:2a:05:66:3e:3f:40:27:b5:ce:80:07:83:76:8f:a8:7c:
90:03:70:10:cf:37:f2:fd:84:64:a4:34:fb:18:13:64:ce:09:
85:c2:df:db:45:45:f3:d9:b8:47:52:30:b6:12:1d:93:f1:c3:
90:5e:f8:0a:0b:70:2b:31:6a:8c:ab:9b:61:5a:a9:50:d9:d3:
74:ed:e1:48:84:53:13:a1:f4:90:45:ac:fb:c2:92:c6:8c:73:
48:5a:2f:08:46:9f:d0:e2:a7:93:c0:b2:f7:b3:0d:ad:b8:e9:
2c:c1:5f:dd:93:97:c4:74:2e:29:ad:bf:3c:8f:55:9a:b7:b7:
7d:9d:21:31:25:7f:99:89:38:59:e8:bc:a4:2f:f0:6e:4f:dc:
d5:d4:49:de:e2:87:af:b0:e6:1b:2f:a9:89:80:ad:ed:f5:24:
5a:bf:82:71:52:50:19:bf:82:18:79:48:80:33:f4:a7:42:05:
2a:ed:c8:10:a2:cc:7a:58:3b:0f:2a:65:a0:09:2a:bb:71:e5:
c9:e1:3c:8e:99:66:17:86:6f:37:a7:4a:90:2a:3d:0f:77:d7:
83:ab:4c:24:76:d5:1b:85:76:47:2c:ea:2f:02:9c:0b:43:db:
6f:5c:81:dc:ab:69:95:2a:02:67:ce:38:c2:51:54:0c:47:1d:
ac:d9:55:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:25 2026 by rpki-client