
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
File: 5415D510C68E11F0BC83973CC4F9AE02.roa (raw, json)
Hash identifier: PhRLsqDQKZKtbRG6RFHUAVfVtgK8nsse16kNHaAg5Hk=
Subject key identifier: 7F:4C:1E:92:BF:DE:F6:75:D1:5E:9E:C5:30:6C:D3:8D:EB:79:61:04
Certificate issuer: /CN=A91D260A/serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Certificate serial: 015B
Authority key identifier: D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
Signing time: Fri 01 May 2026 05:38:29 +0000
ROA not before: Fri 01 May 2026 05:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9650
IP address blocks: 192.88.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 05:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D260A, serialNumber=D4DF25E0ECD2E3808F6870EE56F70F255818933E
Validity
Not Before: May 1 05:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f43c55-c634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:43:43:8e:be:05:53:e8:b7:48:39:33:2c:81:
9a:f5:86:22:26:78:8c:65:1d:de:ad:64:b3:28:21:
00:fc:ed:2b:3a:8d:8d:bd:65:3a:9b:38:e5:7a:0d:
2c:2e:f9:29:09:d3:48:99:e1:5e:1b:70:85:06:77:
24:6e:11:34:07:f2:47:95:03:15:a2:06:9f:2c:d4:
d1:d3:17:d3:68:e0:07:04:9d:94:7a:98:ab:91:be:
f3:02:6c:da:fc:6e:2a:c9:57:dd:6e:b2:6a:76:91:
a4:ca:73:43:dc:78:21:e4:e6:c8:68:f1:9d:e0:bc:
ab:07:1c:fa:e5:67:ce:81:ae:e1:a7:10:41:ba:ae:
7e:1c:88:6d:ae:36:a6:d8:a3:52:37:ef:1b:8f:e8:
7f:3c:4c:6b:47:46:d0:25:f4:56:7d:3c:ba:b0:7e:
2f:f8:b8:4c:81:58:f9:45:53:24:b0:a6:a9:3c:24:
64:01:c1:05:bf:be:aa:cd:c8:82:17:1b:e2:a7:b5:
2a:ee:f7:51:45:45:d4:6f:6b:c4:ef:f0:de:35:b5:
73:f0:ff:4b:26:b2:bb:e1:13:6b:9e:0e:51:1b:3e:
ca:ed:9b:07:b4:8f:60:06:27:e4:cb:9f:d1:06:05:
a5:77:88:ef:da:95:89:6b:31:43:8f:9b:a9:d9:a6:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4C:1E:92:BF:DE:F6:75:D1:5E:9E:C5:30:6C:D3:8D:EB:79:61:04
X509v3 Authority Key Identifier:
keyid:D4:DF:25:E0:EC:D2:E3:80:8F:68:70:EE:56:F7:0F:25:58:18:93:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/1N8l4OzS44CPaHDuVvcPJVgYkz4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1N8l4OzS44CPaHDuVvcPJVgYkz4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D260A/B6DCF1DC449511EFA4590C3DC4F9AE02/5415D510C68E11F0BC83973CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.88.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:98:db:2d:3c:b6:fd:6f:6f:a3:70:b1:09:38:0b:7a:3c:d1:
24:ee:9b:ae:73:12:eb:0f:9c:87:fc:7f:78:25:08:ab:8e:c5:
ad:7a:37:f5:16:f1:e8:1e:6f:dc:3c:27:e1:44:f2:9d:f8:ba:
08:7d:41:7d:20:ab:9f:1b:b3:48:0e:4c:e8:9d:ff:bd:98:ad:
c9:4f:b8:bd:c1:1a:ac:56:97:38:79:d8:39:3b:4b:f7:b0:c1:
d7:f9:0e:c0:37:f5:69:ae:fe:a3:0e:78:ca:b3:1c:76:be:d6:
d4:a3:6a:4f:cf:e0:41:bc:a9:48:77:be:4a:42:ea:1b:ed:f5:
e4:eb:b2:5a:5a:07:f3:2f:e0:75:c4:e9:99:77:4a:dd:d0:da:
7a:93:b3:2a:bf:08:a9:fb:8d:c8:4a:94:af:8e:33:22:af:e0:
ea:85:91:e9:e5:53:ae:fe:30:0a:82:d8:45:62:2c:9a:97:de:
38:e3:ca:8a:c0:75:f7:5e:99:b8:7d:9a:d2:2b:0c:f5:81:95:
a5:d3:dd:84:5e:b3:ce:29:74:bc:0e:78:9e:87:13:5e:49:2c:
8e:88:d5:a9:33:3e:83:a9:ac:49:61:95:29:ff:be:17:df:61:
0e:49:a8:81:94:65:1a:e1:83:43:14:bc:74:b3:e8:42:58:2b:
e2:34:f3:a4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI2MEExMTAvBgNVBAUTKEQ0REYyNUUwRUNEMkUzODA4RjY4NzBFRTU2RjcwRjI1
NTgxODkzM0UwHhcNMjYwNTAxMDUzODI5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0M2M1NS1jNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/ENDjr4FU+i3SDkzLIGa9YYiJniMZR3erWSzKCEA/O0rOo2NvWU6mzjleg0s
LvkpCdNImeFeG3CFBnckbhE0B/JHlQMVogafLNTR0xfTaOAHBJ2Uepirkb7zAmza
/G4qyVfdbrJqdpGkynND3Hgh5ObIaPGd4LyrBxz65WfOga7hpxBBuq5+HIhtrjam
2KNSN+8bj+h/PExrR0bQJfRWfTy6sH4v+LhMgVj5RVMksKapPCRkAcEFv76qzciC
Fxvip7Uq7vdRRUXUb2vE7/DeNbVz8P9LJrK74RNrng5RGz7K7ZsHtI9gBifky5/R
BgWld4jv2pWJazFDj5up2abQXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH9MHpK/
3vZ10V6exTBs043reWEEMB8GA1UdIwQYMBaAFNTfJeDs0uOAj2hw7lb3DyVYGJM+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjYwQS9CNkRDRjFEQzQ0
OTUxMUVGQTQ1OTBDM0RDNEY5QUUwMi8xTjhsNE96UzQ0Q1BhSER1VnZjUEpWZ1lr
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFOOGw0T3pTNDRDUGFIRHVWdmNQSlZnWWt6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDI2MEEvQjZEQ0YxREM0NDk1MTFFRkE0NTkwQzNEQzRGOUFFMDIvNTQxNUQ1MTBD
NjhFMTFGMEJDODM5NzNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAwFgHMA0GCSqGSIb3DQEBCwUAA4IBAQAbmNstPLb9b2+jcLEJOAt6
PNEk7puucxLrD5yH/H94JQirjsWtejf1FvHoHm/cPCfhRPKd+LoIfUF9IKufG7NI
Dkzonf+9mK3JT7i9wRqsVpc4edg5O0v3sMHX+Q7AN/Vprv6jDnjKsxx2vtbUo2pP
z+BBvKlId75KQuob7fXk67JaWgfzL+B1xOmZd0rd0Np6k7Mqvwip+43ISpSvjjMi
r+DqhZHp5VOu/jAKgthFYiyal94448qKwHX3Xpm4fZrSKwz1gZWl092EXrPOKXS8
DniehxNeSSyOiNWpMz6DqaxJYZUp/74X32EOSaiBlGUa4YNDFLx0s+hCWCviNPOk
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:31 2026 by rpki-client