
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/8C508DC055F711EFA5200828C4F9AE02.roa
File: 8C508DC055F711EFA5200828C4F9AE02.roa (raw, json)
Hash identifier: +vcgHqQaVF6a8tBeWlRZvq+SFdKItNicDBwJjhcEwPQ=
Subject key identifier: 31:3E:A8:6C:2C:F6:02:E9:60:91:22:16:4C:D1:7C:9C:0B:E6:5B:36
Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial: 01CD
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/8C508DC055F711EFA5200828C4F9AE02.roa
Signing time: Mon 11 May 2026 04:35:50 +0000
ROA not before: Mon 11 May 2026 04:35:50 +0000
ROA not after: Mon 01 May 2028 00:00:00 +0000
asID: 140362
IP address blocks: 157.10.250.0/24 maxlen: 24
157.10.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:35:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Validity
Not Before: May 11 04:35:50 2026 GMT
Not After : May 1 00:00:00 2028 GMT
Subject: CN=6a015ca6-6312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:1d:5a:73:93:2e:82:f4:f7:57:27:82:e7:
a3:c4:d7:88:55:4f:e2:15:2e:07:c6:e0:bc:7a:ed:
3f:72:e8:79:96:20:73:e5:05:77:b4:20:94:24:aa:
5f:b8:04:a7:9a:2c:da:57:45:0f:14:ba:b6:33:a6:
9c:a9:07:fb:a2:a0:31:8a:c8:88:af:1b:56:60:f0:
03:9b:75:4e:95:f1:f3:49:0d:e2:35:90:b8:b7:b2:
e8:72:6e:b8:d8:af:96:5d:77:b2:ad:e2:5a:a6:77:
ed:3b:2e:c1:ef:0c:f8:c3:c7:7f:c0:f1:e9:c3:af:
fa:d9:bc:b2:dc:84:68:35:57:54:58:dd:52:81:f6:
9a:91:2b:05:db:fb:23:9f:c9:8d:10:ca:b1:39:44:
33:4c:d2:65:da:9d:5c:99:a7:08:e2:16:5d:99:bb:
a1:12:e2:7c:d9:11:38:db:8d:c9:15:97:7b:3e:6b:
13:84:9e:9a:39:38:d6:6d:9c:e9:b1:be:45:20:d4:
fa:13:ef:16:35:75:86:24:06:9b:ff:17:35:37:f4:
a0:8d:4f:bb:bc:70:01:b2:98:ee:b2:42:02:b0:68:
6e:1b:0d:85:15:17:81:c4:f2:64:92:de:72:3c:61:
0f:22:9d:b9:27:b8:4c:87:9d:bb:8b:cf:25:e4:fd:
5a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:A8:6C:2C:F6:02:E9:60:91:22:16:4C:D1:7C:9C:0B:E6:5B:36
X509v3 Authority Key Identifier:
keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/8C508DC055F711EFA5200828C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.250.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:97:56:94:2f:46:02:3e:12:f9:b0:85:43:e4:b9:8e:36:b6:
dd:df:d4:ae:3e:27:ae:b2:f8:09:3d:5d:57:b1:ed:1a:78:03:
d8:28:9a:bc:6c:f5:e4:8f:af:51:0f:44:02:54:3a:89:f2:b5:
bb:9f:a4:57:a3:19:05:cc:68:53:bd:02:d8:a1:77:75:3b:a5:
33:8a:a0:99:ce:51:54:6f:15:fe:39:ca:3c:57:c8:28:fd:e7:
72:3d:73:97:a6:63:05:15:1f:31:8c:3d:aa:28:02:fb:a7:27:
e2:e0:1a:53:4b:1d:ea:a2:2e:ae:b9:45:68:d8:58:aa:1a:53:
41:38:fe:c5:91:b7:15:2b:74:e7:f9:2d:09:d6:e5:85:39:95:
f5:f3:79:b7:24:a2:81:8a:90:8c:49:8e:31:df:8c:00:1e:cc:
bc:30:d9:7b:c5:b3:e7:92:30:ea:59:83:90:4f:b9:5a:21:4d:
e8:f0:b2:56:01:23:90:26:25:59:e2:a0:37:ff:ea:ef:d3:ce:
0c:49:76:8f:91:b9:c2:e3:97:99:16:87:93:4c:06:8e:05:86:
ca:dc:c9:cc:54:b4:9a:bd:3a:14:4b:28:b7:71:6f:ff:79:0b:
24:c0:f0:07:eb:83:f9:5f:2a:26:2e:d1:60:75:23:84:13:01:
f0:12:3e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:12 2026 by rpki-client