
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/2804E38A1C9C11F1AD8EA332233D8C67.roa
File: 2804E38A1C9C11F1AD8EA332233D8C67.roa (raw, json)
Hash identifier: u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=
Subject key identifier: F6:93:4D:07:A8:FE:5F:C5:57:71:4C:2A:65:59:04:3D:12:31:4F:3D
Certificate issuer: /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial: 09
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/2804E38A1C9C11F1AD8EA332233D8C67.roa
Signing time: Tue 10 Mar 2026 16:14:04 +0000
ROA not before: Tue 10 Mar 2026 16:14:04 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 154524
IP address blocks: 151.158.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Validity
Not Before: Mar 10 16:14:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b0434c-5ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:73:fd:b5:15:e7:f8:60:9b:64:7a:65:91:
6d:83:62:c0:3e:f5:71:f8:43:f3:88:3b:83:d8:f1:
3e:70:7d:ae:ed:96:a6:94:13:43:5a:bd:27:8a:be:
16:1a:de:1e:ca:33:48:80:51:e0:4e:e4:b8:c7:54:
fe:b4:3b:ca:b9:82:88:ae:4e:e3:da:19:a7:84:89:
6c:e0:6e:81:91:52:b4:a2:e8:48:c6:c9:f3:36:6e:
55:be:49:31:70:c0:f5:0e:5f:5f:5f:ef:40:09:c4:
d0:bc:34:df:9d:75:86:a1:49:36:4b:de:71:d2:e6:
e1:df:b8:5b:b4:3b:db:96:1a:e8:2c:45:33:41:45:
35:ec:bb:2d:ea:ce:40:c6:b6:7f:ab:18:b5:87:bd:
d1:4f:cb:3f:83:4a:15:eb:ab:30:d7:56:14:61:0b:
45:af:68:33:29:3f:37:a3:ad:1f:ed:e3:2a:f0:2f:
06:76:95:0d:66:58:d6:29:94:ef:eb:8a:d2:5c:bf:
89:e5:51:2e:1e:d0:20:1f:39:71:de:00:b4:13:61:
aa:72:cd:83:9e:c7:1c:58:3f:48:dc:f4:92:11:3d:
b2:cc:56:da:34:21:e1:33:4f:f8:b8:50:3e:bf:5a:
9c:12:35:a2:33:94:15:0c:e9:20:66:63:86:4d:df:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:4D:07:A8:FE:5F:C5:57:71:4C:2A:65:59:04:3D:12:31:4F:3D
X509v3 Authority Key Identifier:
keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/2804E38A1C9C11F1AD8EA332233D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:67:57:2f:17:ef:89:4f:09:a1:22:42:46:8b:3d:dc:2f:cf:
67:3e:50:03:10:4e:37:cb:52:a5:31:39:ea:6c:6f:52:0e:54:
11:87:58:d7:c2:32:d1:c6:eb:c6:2f:bb:dd:fc:1e:ef:5f:55:
7a:f3:f2:f1:e3:8e:89:3d:b3:0d:17:3e:f4:9e:94:c8:6a:eb:
49:f4:e3:97:46:2b:d5:a9:a9:c6:a5:82:c8:6f:d7:9b:a3:f7:
48:44:02:39:e4:97:21:02:7f:64:76:10:0c:2e:ff:ce:ca:15:
a9:05:f4:b6:af:2d:09:3f:d3:89:c7:72:40:d4:80:68:ed:19:
38:45:24:c2:64:50:d1:06:bb:61:6a:63:eb:be:12:3e:86:98:
c6:0c:85:a6:b1:21:2e:72:39:c4:88:5d:97:da:81:46:92:aa:
3e:4c:a3:8d:8f:17:a0:a8:18:4a:dd:89:33:e5:f5:db:2e:d2:
d8:15:50:80:af:bb:30:50:98:68:a9:1a:08:8a:57:2d:f7:7f:
aa:3a:41:9d:00:f8:45:5d:3f:8b:22:9d:52:c6:33:a1:ec:9e:
1c:e5:f0:94:e8:b8:a4:70:39:bb:c0:e2:51:3d:d4:bf:3c:26:
4a:64:d4:1d:19:70:4b:13:01:bf:22:a2:30:dd:83:3f:db:d9:
96:d1:09:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:04 2026 by rpki-client