
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/6C363C0CF85911EE9EAE731BC4F9AE02.roa
File: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (raw, json)
Hash identifier: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=
Subject key identifier: 9D:3E:D0:88:35:21:F0:99:32:AB:2F:6C:1E:49:33:F7:A6:83:DA:B1
Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Certificate serial: 01A8
Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/6C363C0CF85911EE9EAE731BC4F9AE02.roa
Signing time: Tue 21 Apr 2026 04:36:40 +0000
ROA not before: Tue 21 Apr 2026 04:36:40 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 150746
IP address blocks: 157.15.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:09:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84
Validity
Not Before: Apr 21 04:36:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e6fed8-3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:6f:8b:bb:57:6e:45:ff:b6:f8:22:52:65:
43:6c:3e:d8:f9:d9:3a:89:bc:27:0c:20:35:33:43:
d4:d6:7a:5b:2f:89:8f:7e:bb:f6:d9:40:42:c4:0f:
a3:6a:63:8b:68:bb:f8:14:f5:e2:c6:88:cd:a1:47:
89:ae:7c:7d:14:af:f2:50:59:61:ed:a0:c9:48:16:
cf:e6:60:07:20:a6:2a:ec:98:e3:6a:29:d0:a4:47:
d7:ea:d1:92:53:eb:fc:2b:a8:fb:a3:32:28:b0:09:
e8:c0:2f:e0:e0:1a:64:f7:45:bf:dc:47:0c:94:0b:
d0:b6:c0:ea:f8:9f:30:8a:49:63:ea:54:22:5a:67:
bf:bb:0c:3c:6e:27:64:33:60:f6:48:b3:43:72:43:
4c:86:aa:f8:80:a1:6e:7d:62:9f:e9:04:d1:95:42:
b9:35:72:4e:74:31:da:55:91:f3:59:6d:ba:f1:ea:
ba:05:a9:13:b3:4d:66:1d:69:d0:55:21:92:e1:b4:
92:e7:2d:09:f6:a9:17:e5:b6:68:f6:b7:07:e7:92:
df:17:f3:5e:8f:18:04:77:d1:a5:52:bd:34:25:ac:
35:22:0c:ef:bf:7d:4d:12:66:c0:b8:72:ec:42:b4:
f4:27:7d:19:22:5e:69:a0:22:08:f2:cc:2f:42:15:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:D0:88:35:21:F0:99:32:AB:2F:6C:1E:49:33:F7:A6:83:DA:B1
X509v3 Authority Key Identifier:
keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/6C363C0CF85911EE9EAE731BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.138.0/24
Signature Algorithm: sha256WithRSAEncryption
89:7d:dc:9b:22:7d:ac:0e:c8:ca:d0:63:6d:35:3c:b2:5c:9c:
7b:c9:62:4a:e8:2e:d6:d5:46:3a:21:97:28:e5:ba:26:2a:40:
b6:71:d4:e6:3f:a1:14:1d:8a:cb:74:f1:ac:24:71:b3:36:bc:
02:5c:d5:0e:41:f7:40:83:e6:ae:69:1a:f3:06:01:7b:08:1a:
f9:a9:a5:e8:11:c3:8d:5c:25:7e:3d:5c:ed:cf:5d:75:d3:6e:
ea:90:f6:00:60:94:4c:4e:8f:01:0d:62:bd:d8:e9:ba:10:4f:
fe:46:d4:3b:5a:02:5e:38:7e:71:e2:d4:53:14:e4:62:51:73:
d1:df:de:53:59:30:2c:aa:13:3e:bf:69:80:57:a2:73:d2:d8:
41:3a:69:e5:36:10:10:35:71:e4:c8:76:e0:5f:d5:fe:0b:69:
1d:e2:58:6e:5c:32:82:40:5b:62:80:e4:8a:d6:a4:b2:a4:27:
4c:b8:1a:0a:57:ac:60:9e:18:89:a8:2b:dd:c6:20:e4:7b:b1:
38:8a:26:60:90:11:06:46:3d:18:fb:e8:a2:11:94:1a:bf:f1:
48:dd:ab:fc:9c:a3:e7:e1:4f:df:51:14:b7:1a:61:47:f0:91:
fb:0d:95:1b:40:fb:4e:b3:8f:d7:77:66:32:49:d2:a8:0e:5c:
e6:9c:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:26 2026 by rpki-client