
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
File: A19F973C60C011F0A28C7F2CC4F9AE02.roa (raw, json)
Hash identifier: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=
Subject key identifier: 3D:12:65:13:EE:E4:7B:E5:F1:D4:66:9A:B1:73:28:B5:1B:90:99:43
Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial: 83
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
Signing time: Sun 15 Mar 2026 06:44:24 +0000
ROA not before: Sun 15 Mar 2026 06:44:24 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 151335
IP address blocks: 157.15.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Validity
Not Before: Mar 15 06:44:24 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69b65548-a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:4a:10:03:c1:31:5e:0e:1f:02:a3:61:2f:
c5:cc:10:0b:0c:65:7f:db:42:b2:71:d7:eb:05:b5:
a1:b1:0f:2e:5d:9d:d3:30:ce:74:bc:e5:72:0c:60:
33:8e:51:3f:39:ae:b0:c9:ff:92:83:85:e7:41:0e:
5d:ac:80:47:4c:78:09:5d:71:c9:5f:38:56:59:00:
36:e4:56:43:f1:d9:78:73:5f:7c:db:fd:1c:da:00:
6c:54:26:d8:06:8c:26:89:bd:d9:19:0b:8e:d6:16:
b3:24:6a:61:73:1e:a5:c4:fb:11:8d:c8:cd:fe:08:
c8:4d:76:ad:bb:47:96:8a:cd:43:cc:c8:18:ec:32:
cd:3c:50:cf:4d:c8:f6:4a:bf:6f:31:1d:67:24:25:
56:51:3f:5b:76:58:c4:d1:36:67:84:1c:92:da:59:
2a:78:7d:38:e6:22:06:44:8b:7b:f9:63:df:62:b2:
0f:65:d0:cf:1b:60:5c:d0:3a:dc:bc:1b:53:e9:cc:
6a:fb:8c:c9:93:3d:f9:32:ae:10:86:cb:b3:fc:00:
5e:b5:b4:a0:23:a8:bc:6c:83:12:1c:9f:fb:ac:eb:
6f:35:70:8d:6a:4e:2a:bf:63:9c:80:41:88:aa:15:
18:6f:c0:84:c6:16:ec:bb:ff:e5:0a:fc:2f:10:df:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:12:65:13:EE:E4:7B:E5:F1:D4:66:9A:B1:73:28:B5:1B:90:99:43
X509v3 Authority Key Identifier:
keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.128.0/24
Signature Algorithm: sha256WithRSAEncryption
66:86:83:d3:3f:c0:10:59:a1:4e:30:6c:de:21:96:e4:97:f8:
ac:04:57:b4:ce:0f:ea:03:11:3a:1e:53:e7:74:ed:d9:cd:fa:
b7:19:8c:fa:84:16:03:ba:fc:b5:1a:a2:51:76:c6:e4:82:f4:
ad:1a:6b:7e:ad:d0:92:37:64:9c:85:3b:98:2f:28:78:70:49:
11:15:d9:a9:1b:d8:47:15:36:c6:24:1d:38:38:f7:7a:ef:83:
6b:e8:7f:9a:db:a3:2c:14:d5:a3:b4:fa:d9:f0:77:53:96:18:
17:9a:35:a6:d5:ee:29:4f:ba:5f:5e:67:3b:64:39:0e:0c:eb:
5f:ea:d3:48:99:01:ff:8c:73:0a:08:de:a0:d7:f2:bb:f4:4c:
8d:bf:87:56:80:85:6f:43:36:a8:9f:be:32:6d:50:84:45:18:
e9:91:ee:97:fc:1f:5a:ae:e8:36:ed:0a:7e:68:53:b0:c0:82:
ae:92:fa:cc:30:84:bb:84:ec:d5:db:d1:c0:8c:b3:6b:75:5d:
6e:94:c2:0a:30:c1:41:78:23:35:a8:42:2b:90:2c:74:f0:2b:
60:36:0e:e4:1c:85:9a:c4:7d:d6:fd:ed:82:8a:5a:6d:c8:3e:
15:2b:2d:40:80:79:5d:07:21:28:08:2f:70:e9:f7:29:53:a6:
20:75:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:08 2026 by rpki-client