
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/562C4F32B58F11F1919EBCA56C11F970.roa
File: 562C4F32B58F11F1919EBCA56C11F970.roa (raw, json)
Hash identifier: s9/6Wu2v2FTT8R7Df/OuhcIg3vm5m0oyRj3n+CokLv8=
Subject key identifier: 72:EB:9D:57:FE:B2:4E:CB:D7:C4:9C:FC:65:5D:04:74:20:C9:26:CE
Certificate issuer: /CN=A91F29DD/serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3
Certificate serial: 02
Authority key identifier: B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/562C4F32B58F11F1919EBCA56C11F970.roa
Signing time: Mon 21 Sep 2026 07:37:46 +0000
ROA not before: Mon 21 Sep 2026 07:37:46 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152191
IP address blocks: 151.158.232.0/24 maxlen: 24
151.158.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.crl
rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 09:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F29DD, serialNumber=B2C9EB40FCB013549CAA35E6A580BD98DAFF0EF3
Validity
Not Before: Sep 21 07:37:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab0deca-c686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fc:46:9a:83:0c:42:58:11:7b:b5:e7:ab:b0:
87:f3:d3:e7:56:e3:60:00:1b:5f:51:b9:1a:bf:f9:
7f:56:98:df:0e:22:0d:90:dd:6c:f9:a3:f6:01:ec:
bf:72:bb:7d:b9:6e:d6:eb:81:cd:4b:36:54:26:db:
49:17:e1:92:a6:bb:ff:bf:40:45:39:42:ab:be:3e:
39:d1:2e:39:78:dc:99:ee:cd:35:7b:9c:1a:a9:d2:
31:a4:4a:a1:6c:9a:56:53:0f:ae:dd:92:6e:b7:9c:
1a:5d:27:30:41:38:0c:86:42:b7:9f:06:25:4c:ee:
56:eb:78:b5:1e:a7:90:44:0b:8f:76:db:39:69:36:
0c:e7:44:46:77:d6:6d:e2:40:e1:48:8d:c3:e7:d9:
29:8a:26:fd:f6:dd:c5:0c:d4:f0:c7:6b:40:31:b0:
2b:af:dc:c7:21:18:f8:a0:d0:89:4f:9f:71:7b:d0:
32:03:6b:3d:bd:ee:bf:cd:b3:e1:f8:3c:c0:97:1f:
ac:0b:e0:f2:19:ec:68:15:bd:d8:e8:2c:8e:9d:d5:
20:88:0f:c8:0e:7b:02:9e:c8:6c:76:94:c4:6f:3d:
ef:1b:85:73:63:2f:b1:38:3d:5a:1e:91:2a:58:80:
6c:01:fb:49:3b:9e:77:5d:53:80:b7:42:37:a2:88:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EB:9D:57:FE:B2:4E:CB:D7:C4:9C:FC:65:5D:04:74:20:C9:26:CE
X509v3 Authority Key Identifier:
keyid:B2:C9:EB:40:FC:B0:13:54:9C:AA:35:E6:A5:80:BD:98:DA:FF:0E:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/ssnrQPywE1ScqjXmpYC9mNr_DvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ssnrQPywE1ScqjXmpYC9mNr_DvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F29DD/4BC1128CB58D11F194D8DD3E6C11F970/562C4F32B58F11F1919EBCA56C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.232.0/23
Signature Algorithm: sha256WithRSAEncryption
17:0e:2d:bc:94:7a:66:f3:58:9a:08:47:6f:b5:99:d7:fe:51:
9e:9e:ce:67:01:6f:ef:02:ba:4c:01:a8:d4:49:81:83:f7:f4:
a4:35:7e:fa:78:9a:e9:c8:34:8f:48:dd:c4:d1:12:46:a1:34:
8c:c4:bf:f5:38:c4:c6:00:9c:0c:20:43:ed:2e:bb:e0:e5:c9:
33:30:ca:bf:73:87:74:5a:b9:ab:ab:a2:20:2e:4e:c2:8d:c9:
bd:d9:6b:51:a4:68:1e:50:98:cd:13:b8:3f:79:e3:37:97:6e:
d6:20:c1:24:69:a1:17:b3:0d:53:fb:f5:aa:4a:41:68:b1:6c:
c4:44:7b:10:17:16:d3:ab:73:3b:d9:77:27:f9:e4:56:0f:d5:
7e:cc:95:e1:44:12:c0:a1:06:79:48:c0:33:6e:7c:d2:44:e2:
6f:c1:2a:ab:3b:ca:3c:f8:71:71:d5:64:1a:2e:e9:cc:06:ef:
a6:cd:c3:6b:71:a5:f9:42:24:8a:73:ff:30:00:54:f9:30:97:
5e:c4:89:c5:de:e7:e4:a4:39:a6:29:fc:c2:2a:ee:e8:83:0c:
fd:cc:da:88:41:d4:1d:e1:0d:1e:d3:43:13:81:7d:47:a8:de:
d2:1b:ee:b7:da:b0:b6:b9:45:be:71:43:ef:31:5e:49:67:ee:
1f:bf:a6:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:44:18 2026 by rpki-client