
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/6DAC44BAA91E11F0B822717EC4F9AE02.roa
File: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (raw, json)
Hash identifier: U/DEuDwRwhqtKgxxnucO+fNicfaNI7xpxs1zj8ALIgg=
Subject key identifier: E6:7C:B1:5A:33:19:02:3E:B4:DD:BD:0A:93:C6:18:CC:3A:33:4A:54
Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Certificate serial: 01AA
Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/6DAC44BAA91E11F0B822717EC4F9AE02.roa
Signing time: Fri 01 May 2026 03:34:37 +0000
ROA not before: Fri 01 May 2026 03:34:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154256
IP address blocks: 157.20.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14
Validity
Not Before: May 1 03:34:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f41f4c-27d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:6f:ac:6d:89:13:b3:02:76:bf:db:20:d8:
ee:3c:a2:3d:10:10:b0:e9:4e:a6:0b:e7:24:bc:50:
bf:60:57:ec:75:b7:68:18:38:9e:a6:a5:4d:08:e2:
b6:75:7a:78:ab:0a:47:a3:8c:44:75:01:84:a9:d0:
2d:d5:d1:a2:a0:ad:4c:ed:14:55:cc:dc:49:d8:2e:
63:ac:1b:ea:10:61:28:f5:f7:b8:84:2b:79:61:f5:
56:47:23:6a:13:36:18:b1:67:e9:6d:0e:62:cf:43:
52:20:1e:e9:10:b2:ad:a1:8b:28:54:32:1e:6b:d2:
15:14:36:c6:3f:99:3b:c7:e7:4a:13:08:4a:d6:55:
c0:41:78:47:4a:bc:0d:f3:26:a2:7d:42:97:47:1b:
13:7c:f9:75:a5:80:e3:8e:71:39:61:6e:87:43:77:
ff:eb:62:86:f9:c0:50:0c:10:83:b1:45:89:c0:b5:
93:21:86:ab:14:74:d3:41:5e:d3:c4:41:8c:ff:66:
07:af:5b:a8:66:8d:94:2c:8d:14:ae:f5:cc:c3:a4:
28:45:25:c2:40:fd:3a:e9:ad:be:61:d5:fe:72:18:
6e:4a:d1:e1:d8:01:fc:2f:3f:ad:c6:35:c7:ad:7c:
c4:e4:8e:2c:6f:18:8e:54:03:65:9a:23:45:ff:0b:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:B1:5A:33:19:02:3E:B4:DD:BD:0A:93:C6:18:CC:3A:33:4A:54
X509v3 Authority Key Identifier:
keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/6DAC44BAA91E11F0B822717EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.101.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b7:83:64:e4:20:94:a8:42:0e:ce:36:48:da:67:ef:60:cc:
75:76:d6:e9:b6:44:35:fc:11:9e:71:70:2d:d4:23:14:eb:5d:
e4:5d:11:69:08:0a:87:2d:c3:61:c5:46:7f:15:be:27:30:1f:
68:91:f0:8e:ed:4a:ce:17:bd:a1:47:fc:e6:d2:5f:fa:08:ca:
65:78:92:61:7c:49:4d:8a:9f:0d:b6:fd:d6:ae:7c:b7:ac:d5:
84:2d:f8:08:ee:b1:02:bb:00:2f:09:c1:02:63:95:73:c1:cb:
1b:66:4c:d3:3a:37:53:d9:15:7c:3f:f5:36:23:1e:80:c5:5c:
21:10:a7:fb:ea:44:72:fb:b7:b4:91:7b:be:27:51:6f:87:b5:
31:fa:91:47:73:5c:27:b4:0f:85:68:cb:56:68:d4:86:be:fa:
32:90:74:15:55:e1:47:c9:76:03:93:d7:05:53:ba:fc:ac:4a:
80:05:5b:65:9a:71:c8:39:4f:4b:40:0a:aa:aa:44:17:af:01:
35:31:3a:8a:d1:15:f7:d9:70:5d:24:1b:1d:aa:d4:ff:8c:cc:
9b:84:c8:2f:13:88:7b:c0:b5:5b:58:c5:ae:68:cd:0a:6a:8b:
3a:f7:ee:6f:b1:23:a9:08:8c:91:35:32:ab:28:78:01:eb:ee:
ca:a7:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:46 2026 by rpki-client