
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/51E59058921B11EFB656CB41C4F9AE02.roa
File: 51E59058921B11EFB656CB41C4F9AE02.roa (raw, json)
Hash identifier: gnfLlur8gPdUkwqDHn+eOeiErOoehQs7kmodfs4S4jc=
Subject key identifier: B4:22:EC:FC:4C:96:9F:CE:49:4A:0F:6E:AF:54:A9:92:B7:C0:C9:EA
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 01A9
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/51E59058921B11EFB656CB41C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:37:44 +0000
ROA not before: Tue 27 Jan 2026 03:23:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134480
IP address blocks: 157.10.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 425 (0x1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Jan 27 03:23:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a58498-aabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:90:62:c5:e3:27:ea:a7:04:f2:f2:b5:c7:
1f:b0:38:8a:6f:05:41:e8:f5:0f:18:bb:fa:19:8a:
25:fb:e9:4e:f9:77:43:5e:e1:d3:39:9d:23:57:a6:
92:f5:04:d8:8c:c0:73:b8:a6:17:4f:10:a2:22:37:
d2:4d:17:63:cc:53:c6:3d:ce:42:c6:ad:64:10:14:
60:1f:84:39:3e:6d:dc:ba:a5:90:ea:8c:99:96:10:
4e:15:1e:fa:fb:c6:ee:b0:11:e0:3b:7c:70:68:7b:
1c:9a:4f:a0:6d:7f:0b:08:49:e1:a0:15:9f:34:89:
e0:2e:01:96:2c:6b:1d:20:fa:5a:b5:4b:b9:d6:48:
28:78:bd:b7:a7:79:50:97:37:b1:72:da:c6:8e:e8:
99:78:27:9d:32:de:4a:7f:b0:43:53:94:81:67:d0:
37:9c:3b:3c:87:06:d1:8b:f1:31:dc:b3:ce:e1:b5:
18:f5:b0:fa:12:7a:a1:e9:b0:82:97:4c:cd:a7:b1:
fc:b5:8f:be:4d:7c:ad:bb:05:3e:ed:ce:c2:b1:af:
ce:6a:75:3b:5a:ad:33:dd:db:a7:75:52:e6:db:a6:
ce:42:92:5c:b9:58:56:1d:44:98:89:ff:64:91:e6:
af:3b:9d:68:f6:68:71:5c:06:5c:02:45:27:b9:15:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:22:EC:FC:4C:96:9F:CE:49:4A:0F:6E:AF:54:A9:92:B7:C0:C9:EA
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/51E59058921B11EFB656CB41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.239.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:2e:eb:98:b9:c2:d9:cd:2e:10:13:a7:99:ec:59:df:9d:59:
1a:5f:76:43:7f:a0:e9:93:12:fe:0c:37:bf:26:e8:41:ae:c5:
bf:18:a0:5a:ac:cd:05:6f:c5:e5:cb:bd:20:a4:68:1a:46:86:
83:ee:03:98:15:09:7e:0e:c1:70:5e:15:38:c0:02:1f:be:52:
a6:e9:6a:9d:22:4e:56:d4:be:0f:90:d0:29:65:21:19:50:06:
71:0d:8f:a1:81:db:26:a2:e3:cb:d1:60:10:b8:e0:16:17:23:
1f:18:d0:28:28:4d:6c:da:59:18:f7:94:d7:71:42:80:59:25:
51:f6:00:4d:2b:e4:26:4d:3e:20:14:a3:31:b3:21:0c:7b:82:
0f:fd:3b:04:72:47:03:a3:9c:d7:1f:76:48:9c:5f:83:5d:4e:
c2:d1:6b:e7:35:d3:af:7b:9f:2c:ac:66:72:0a:c4:95:ca:0c:
e7:54:ad:26:c4:7d:ce:bc:48:99:57:21:b7:d0:27:d2:af:8d:
d9:04:4b:15:b4:9d:8a:2f:1f:c1:c4:13:83:28:d4:94:a2:f9:
c6:eb:3d:76:11:ab:e3:7c:34:2c:f0:82:ab:f4:18:21:d5:de:
e9:69:aa:60:ad:2f:6b:1a:ff:e2:f4:ff:29:11:a7:ec:e3:b6:
37:66:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:16 2026 by rpki-client