
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/431B027EB7F311F1AEB843C36D11F970.roa
File: 431B027EB7F311F1AEB843C36D11F970.roa (raw, json)
Hash identifier: 0hTMdW5wS3Vz6x9QNUuQtirwjm/NcLyUU1762lAE4ac=
Subject key identifier: D0:1E:C2:58:0B:63:3C:55:D4:57:9B:51:D6:16:CB:09:06:E3:B9:CD
Certificate issuer: /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial: 7E
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/431B027EB7F311F1AEB843C36D11F970.roa
Signing time: Thu 24 Sep 2026 08:38:06 +0000
ROA not before: Thu 24 Sep 2026 08:38:06 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 154947
IP address blocks: 151.158.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Validity
Not Before: Sep 24 08:38:06 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ab4e16d-123d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:db:38:67:20:e3:92:01:04:7c:b2:2b:a0:33:
1d:8d:c6:2c:f0:57:a8:bc:42:3c:1e:37:77:4a:16:
fe:e3:5a:fb:da:3a:9f:c6:06:97:7a:61:78:8c:fe:
d1:f1:9c:31:30:0e:3b:05:e7:42:62:10:04:46:94:
3b:0d:4a:bf:e5:52:8b:81:be:75:af:72:5a:f9:ac:
8b:a8:df:c3:46:c1:f9:28:ef:0e:b8:a6:fd:64:95:
42:2d:3d:fc:ef:5a:8a:3e:9a:21:5b:3a:c4:08:bf:
2c:94:94:18:39:1f:47:dd:3c:1d:ea:0b:e1:8b:b9:
f2:09:25:0f:91:d9:08:f1:33:32:65:89:14:93:5b:
a1:83:37:f0:62:92:61:82:e2:54:33:f5:72:a5:ef:
19:fd:1c:e6:ac:f2:8f:07:eb:4a:68:dc:af:2e:cf:
c2:78:a9:eb:b5:f0:7a:60:ab:85:a1:e4:28:40:f8:
45:5d:85:bf:6c:92:7f:f3:23:75:74:9a:34:21:56:
41:95:07:a2:4f:7f:08:40:54:59:47:d2:08:86:f6:
83:9d:d9:f6:b3:a7:15:46:cf:96:19:d5:6a:f7:29:
3a:93:08:0c:d0:11:64:51:b4:21:e7:35:f8:ba:28:
3b:e8:01:fc:f3:01:5c:7b:c2:40:6e:f2:d5:51:9b:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:C2:58:0B:63:3C:55:D4:57:9B:51:D6:16:CB:09:06:E3:B9:CD
X509v3 Authority Key Identifier:
keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/431B027EB7F311F1AEB843C36D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.170.0/24
Signature Algorithm: sha256WithRSAEncryption
90:48:f4:8d:b4:3d:57:83:37:31:a7:de:76:d0:fa:ba:e6:94:
46:77:99:c5:83:f6:3f:3e:68:b8:0a:c6:69:5d:50:3a:c6:93:
fb:8c:60:fb:ef:44:d4:8e:07:1d:f4:48:21:4e:fb:5d:4f:9b:
81:6c:66:c9:7c:83:17:83:a5:09:20:dc:31:e2:09:5f:b9:a0:
52:57:6b:e9:30:72:4e:6e:1c:92:79:e9:65:ba:04:04:32:b4:
7d:2b:f9:f6:94:b9:28:2c:7e:a4:83:f8:97:10:5e:f9:74:c0:
83:4b:5e:56:0e:2c:fc:00:f0:b0:69:61:88:f0:d3:5c:df:f6:
06:6c:61:b6:e8:71:4b:26:a0:3d:92:a0:3a:ae:89:b2:5a:57:
9c:28:b0:3b:26:e5:bf:9c:da:43:c9:2c:52:38:e3:07:81:9f:
00:d8:8b:61:40:75:08:dc:62:68:3e:46:c9:1f:c0:cc:b1:26:
1e:52:3e:5e:15:67:dd:92:14:a4:d6:a6:e7:a3:39:98:9f:56:
52:3d:1a:d5:95:a2:fa:93:6e:e3:1a:6a:79:f5:d3:6c:87:40:
9a:3f:5d:c6:d9:5d:ec:3a:d5:6a:cd:91:75:9f:f5:f7:fd:85:
76:64:b1:17:eb:43:81:d3:50:c5:ea:82:2b:18:79:97:7f:5b:
3c:ee:da:5f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD
OUNGOUNDMjAeFw0yNjA5MjQwODM4MDZaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjRlMTZkLTEyM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC42zhnIOOSAQR8siugMx2NxizwV6i8QjweN3dKFv7jWvvaOp/GBpd6YXiM/tHx
nDEwDjsF50JiEARGlDsNSr/lUouBvnWvclr5rIuo38NGwfko7w64pv1klUItPfzv
Woo+miFbOsQIvyyUlBg5H0fdPB3qC+GLufIJJQ+R2QjxMzJliRSTW6GDN/BikmGC
4lQz9XKl7xn9HOas8o8H60po3K8uz8J4qeu18Hpgq4Wh5ChA+EVdhb9skn/zI3V0
mjQhVkGVB6JPfwhAVFlH0giG9oOd2fazpxVGz5YZ1Wr3KTqTCAzQEWRRtCHnNfi6
KDvoAfzzAVx7wkBu8tVRm0IxAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU0B7CWAtj
PFXUV5tR1hbLCQbjuc0wHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3
QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDMxNC8zNjU5NzRDNjA5N0ExMUYxODA0RjVFQTExMDNEOEM2Ny80MzFCMDI3RUI3
RjMxMUYxQUVCODQzQzM2RDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXnqowDQYJKoZIhvcNAQELBQADggEBAJBI9I20PVeDNzGn3nbQ+rrm
lEZ3mcWD9j8+aLgKxmldUDrGk/uMYPvvRNSOBx30SCFO+11Pm4FsZsl8gxeDpQkg
3DHiCV+5oFJXa+kwck5uHJJ56WW6BAQytH0r+faUuSgsfqSD+JcQXvl0wINLXlYO
LPwA8LBpYYjw01zf9gZsYbbocUsmoD2SoDquibJaV5wosDsm5b+c2kPJLFI44weB
nwDYi2FAdQjcYmg+RskfwMyxJh5SPl4VZ92SFKTWpuejOZifVlI9GtWVovqTbuMa
ann102yHQJo/XcbZXew61WrNkXWf9ff9hXZksRfrQ4HTUMXqgisYeZd/Wzzu2l8=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:18:34 2026 by rpki-client