
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/24E2E6B8B80311F1980856933211F970.roa
File: 24E2E6B8B80311F1980856933211F970.roa (raw, json)
Hash identifier: s2IG2HROrlnBpy6KVlCaHxXPWt4gxfRcFO0V6qc98D0=
Subject key identifier: 16:6B:C0:7A:D7:FC:1E:CF:8F:65:94:D7:04:41:2F:04:FE:2F:CD:43
Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial: 80
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/24E2E6B8B80311F1980856933211F970.roa
Signing time: Thu 24 Sep 2026 10:31:47 +0000
ROA not before: Thu 24 Sep 2026 10:31:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 154024
IP address blocks: 151.158.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128 (0x80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Validity
Not Before: Sep 24 10:31:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ab4fc13-e62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:1d:e6:66:59:1c:7a:ee:d8:b1:68:5c:aa:
6c:9b:0d:5c:7e:93:4b:70:86:a4:33:cd:a8:64:7e:
16:4a:b1:48:f7:94:67:fc:85:a6:0a:8f:cd:b3:55:
c2:88:5c:04:e4:d7:5a:1f:d5:ee:e0:fb:6f:7b:1f:
2e:cc:50:4a:f3:14:ba:12:9a:86:49:c4:30:88:0a:
2e:3c:5e:8a:3e:1b:26:be:3d:e9:92:6c:a4:b3:56:
3d:55:a0:87:5f:b6:f1:f5:55:70:b9:46:d6:08:d7:
72:eb:bd:62:51:bb:f0:6b:77:7f:32:ee:0c:91:6b:
4a:8d:12:da:1d:c3:16:2a:c8:7e:59:d8:09:e0:3a:
78:e7:14:1f:fb:67:76:30:ad:9b:75:6a:2c:94:3f:
2f:69:2a:65:1b:50:ac:f8:08:2c:1a:8c:b9:ea:12:
4a:f4:3a:5f:5e:e5:dc:78:ce:fc:dd:25:96:dc:b5:
19:00:62:82:d8:2b:2d:d2:20:e2:2c:e4:f8:36:54:
91:14:45:78:ad:ac:38:06:02:9f:dc:6b:45:a2:8f:
52:43:7d:40:79:2c:94:4e:13:7e:0f:c7:04:85:86:
d4:02:4a:5f:f0:51:93:b4:47:40:d1:8e:7e:34:7e:
3c:07:62:74:00:de:92:3f:be:cf:13:45:84:b7:d8:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6B:C0:7A:D7:FC:1E:CF:8F:65:94:D7:04:41:2F:04:FE:2F:CD:43
X509v3 Authority Key Identifier:
keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/24E2E6B8B80311F1980856933211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.170.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c3:7f:d3:f7:1a:e1:21:67:4d:8a:49:3d:8a:ee:c0:af:43:
ac:f4:81:60:11:02:c9:09:c3:a1:bc:4d:85:97:ad:d8:30:86:
78:eb:ea:47:b9:51:2f:72:98:b5:91:57:25:cf:d0:4a:a5:0e:
12:7c:90:e1:6c:6d:65:6a:b5:9e:e1:1b:a8:68:9b:87:26:36:
0d:fc:92:10:65:2a:69:7f:3a:4b:b6:06:3c:65:4c:ec:ae:7b:
0d:e0:c3:05:ac:88:4f:8f:d5:87:d5:39:ac:89:32:18:86:6a:
7f:80:02:a9:97:c1:1f:1e:f0:f3:c7:f3:35:05:99:38:9d:fe:
ea:33:37:33:31:27:1b:16:84:72:74:7a:10:fa:39:27:df:00:
db:6d:ce:72:96:06:2d:4b:cd:fd:1a:d3:8f:ed:89:ba:f9:58:
bd:5a:89:ff:85:5d:ce:5d:e5:5b:07:2c:68:b2:aa:f3:e3:22:
79:0a:31:6d:7e:ba:65:bf:1b:e6:5f:4e:e6:a2:d6:68:f9:74:
56:70:73:a0:95:c8:e7:ef:cc:52:71:08:e8:62:ac:ca:f0:c2:
e2:42:d4:57:9f:47:fe:60:27:c4:c2:26:c5:7a:99:15:97:39:
96:ef:14:a5:36:c1:f4:51:2f:54:2d:1a:c2:91:1d:14:82:8a:
6a:a3:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:38 2026 by rpki-client