
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/915E51B8F3BE11ED8B9B1450C4F9AE02.roa
File: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (raw, json)
Hash identifier: vT+TgUmgODqZCcEcsB93R+wccx/Yl+5U/tfDsp7/ZFI=
Subject key identifier: 0F:9F:72:11:5E:F3:3B:F0:08:11:51:A7:F5:F3:A5:24:D3:78:42:32
Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Certificate serial: 3181
Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/915E51B8F3BE11ED8B9B1450C4F9AE02.roa
Signing time: Tue 22 Sep 2026 16:20:24 +0000
ROA not before: Tue 22 Sep 2026 16:20:24 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 42
IP address blocks: 45.112.180.0/22 maxlen: 24
103.52.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 15:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12673 (0x3181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0
Validity
Not Before: Sep 22 16:20:24 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ab2aac7-7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:e6:4c:29:50:9b:02:c8:db:9f:aa:4b:e3:
ab:11:e2:ad:90:58:89:84:ce:3a:7d:40:87:07:8b:
3a:4e:5b:a1:34:c3:b2:b0:80:f0:57:17:bf:79:8b:
f0:5d:d0:e1:30:a5:1d:35:17:b3:af:e1:3c:da:e8:
a1:74:8a:5d:de:7c:2b:b1:a6:d6:2e:d4:1c:01:ef:
f6:81:f8:17:f3:2c:ec:5f:19:35:7b:bb:34:bc:a1:
6e:c4:94:d0:f3:a7:88:6d:05:ed:c5:c1:f5:86:0e:
6c:94:98:13:e9:f7:69:36:41:59:f3:70:27:87:6a:
71:e2:1c:54:54:d0:89:d6:83:22:3d:23:87:fd:0a:
cc:ae:ef:06:63:47:68:4e:bc:49:64:d3:1f:49:ba:
61:e6:7c:95:66:d4:5a:af:bb:07:4f:76:24:89:55:
a2:21:c4:48:9b:72:de:99:ea:ff:4d:f0:e4:d5:72:
b3:45:f4:da:29:62:07:66:63:11:30:2c:bf:fe:68:
47:9f:dd:8a:9e:e4:be:3b:05:16:84:9f:81:45:00:
32:6f:bb:a4:66:31:75:7a:ec:5a:ec:c0:6c:3c:a2:
7f:b1:e9:1d:bf:ed:96:1d:9d:12:52:92:3f:d9:5c:
6e:ef:e6:18:65:9f:16:51:99:1b:83:31:9c:56:96:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9F:72:11:5E:F3:3B:F0:08:11:51:A7:F5:F3:A5:24:D3:78:42:32
X509v3 Authority Key Identifier:
keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/915E51B8F3BE11ED8B9B1450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.180.0/22
103.52.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:11:3c:0a:c5:6c:15:3b:92:27:08:99:db:f6:a5:ec:42:f6:
35:6b:33:df:39:7b:4f:2c:f0:94:91:1d:d0:61:74:49:a5:c3:
03:20:7e:24:fb:04:d4:61:51:ba:dc:07:51:ce:9d:c7:db:5c:
8c:40:d3:0f:2d:13:0c:2a:22:b4:0a:35:e1:f7:7d:c8:ee:55:
e2:27:e3:6e:21:78:5d:e1:be:92:fe:43:81:00:05:94:46:4a:
53:30:88:5d:5f:10:3c:f1:48:1e:71:8c:f7:d1:68:1e:9d:56:
fe:a9:99:b4:0c:bd:a3:01:5c:91:f6:85:05:99:6d:b9:1e:4a:
ce:fe:e2:13:58:ca:53:54:a6:95:c4:2b:ca:8f:d8:64:b0:22:
4b:22:fe:f9:4c:a5:3f:ed:60:f2:14:9f:8c:a2:53:5e:6d:56:
c9:f4:46:64:69:35:57:c7:61:51:e4:34:4a:67:2b:5b:c6:68:
9d:21:d1:0f:a8:03:22:d1:d8:96:e5:b1:ff:be:b9:d5:79:cb:
3e:25:90:c1:48:a2:98:c4:2f:1e:fe:fa:f5:2b:e0:2a:e6:22:
99:95:37:2e:cc:7b:ab:4c:79:24:a3:bc:bb:64:c5:f1:e8:e1:
90:3d:a6:a6:e5:9e:e0:6d:51:aa:6f:05:63:83:86:67:d1:48:
23:78:e3:d8
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICMYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1
REIwOEYyQjAwHhcNMjYwOTIyMTYyMDI0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIyYWFjNy03YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIDmTClQmwLI25+qS+OrEeKtkFiJhM46fUCHB4s6TluhNMOysIDwVxe/eYvw
XdDhMKUdNRezr+E82uihdIpd3nwrsabWLtQcAe/2gfgX8yzsXxk1e7s0vKFuxJTQ
86eIbQXtxcH1hg5slJgT6fdpNkFZ83Anh2px4hxUVNCJ1oMiPSOH/QrMru8GY0do
TrxJZNMfSbph5nyVZtRar7sHT3YkiVWiIcRIm3Lemer/TfDk1XKzRfTaKWIHZmMR
MCy//mhHn92KnuS+OwUWhJ+BRQAyb7ukZjF1euxa7MBsPKJ/sekdv+2WHZ0SUpI/
2Vxu7+YYZZ8WUZkbgzGcVpYD3QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFA+fchFe
8zvwCBFRp/XzpSTTeEIyMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF
NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4
ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjgwQkQvQjVBNjM2RDhGRTVDMTFFMkFFQzA0MjUwNTkxMUVBMzIvOTE1RTUxQjhG
M0JFMTFFRDhCOUIxNDUwQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXC0AwQCZzQYMA0GCSqGSIb3DQEBCwUAA4IBAQCoETwKxWwVO5In
CJnb9qXsQvY1azPfOXtPLPCUkR3QYXRJpcMDIH4k+wTUYVG63AdRzp3H21yMQNMP
LRMMKiK0CjXh933I7lXiJ+NuIXhd4b6S/kOBAAWURkpTMIhdXxA88UgecYz30Wge
nVb+qZm0DL2jAVyR9oUFmW25HkrO/uITWMpTVKaVxCvKj9hksCJLIv75TKU/7WDy
FJ+MolNebVbJ9EZkaTVXx2FR5DRKZytbxmidIdEPqAMi0diW5bH/vrnVecs+JZDB
SKKYxC8e/vr1K+Aq5iKZlTcuzHurTHkko7y7ZMXx6OGQPaam5Z7gbVGqbwVjg4Zn
0UgjeOPY
-----END CERTIFICATE-----
Generated at Sun Oct 11 04:58:33 2026 by rpki-client