
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/C2E7AA224A3211F1BD5DF90392833773.roa
File: C2E7AA224A3211F1BD5DF90392833773.roa (raw, json)
Hash identifier: GcwDkPymz7zW7+vsuIsz6xXHjXAVw/W3Kds1cjW9Iiw=
Subject key identifier: 3B:76:93:26:0A:F9:74:34:C5:AE:4A:1A:70:49:61:72:41:25:87:8B
Certificate issuer: /CN=A91FDC31/serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Certificate serial: 02
Authority key identifier: AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/C2E7AA224A3211F1BD5DF90392833773.roa
Signing time: Thu 07 May 2026 16:35:30 +0000
ROA not before: Thu 07 May 2026 16:35:30 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 134993
IP address blocks: 151.158.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDC31, serialNumber=AC32AE2C0C2AD453C7CEBB8FB28CA1239A2FE5A5
Validity
Not Before: May 7 16:35:30 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69fcbf52-15be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:10:4e:eb:69:ed:43:dc:0b:3b:41:7c:2d:
57:37:5a:a4:e6:c5:36:38:df:a6:05:e4:3c:ea:7c:
3b:ad:01:13:d4:5a:01:75:d0:a8:f4:01:8d:22:fa:
a8:5e:14:27:f4:0e:d5:b8:59:fc:59:53:96:44:61:
86:a5:0b:24:8b:b5:09:67:0a:0c:eb:ef:37:43:e4:
2e:58:5b:ac:fd:8b:37:82:91:60:a7:16:4c:bb:6b:
7f:b6:af:b3:e3:be:51:18:41:33:4c:84:26:cd:88:
c1:8b:d3:aa:fd:50:64:31:e3:63:97:7e:ac:c5:09:
7f:10:0b:35:90:ae:51:4a:5e:97:cb:9c:4e:4e:97:
fa:4b:b8:b1:93:24:18:e6:69:93:c0:a0:3b:0a:f4:
47:6a:20:34:7e:c0:d5:79:be:43:e3:57:bd:4b:10:
0b:4c:70:09:13:f2:eb:81:d0:5d:5e:fb:34:44:d1:
26:84:13:a2:64:fb:d2:16:84:2a:f7:cc:7c:03:8e:
9c:8b:c0:c4:70:4b:31:c2:cc:b4:75:cf:37:90:b3:
6d:7b:35:73:7d:f3:22:c3:a9:c1:15:05:db:27:47:
b6:2b:83:28:93:e2:18:62:d3:6a:ef:e4:25:8c:75:
4b:7d:63:df:f2:d7:e7:bb:26:fe:08:f8:17:bb:0f:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:93:26:0A:F9:74:34:C5:AE:4A:1A:70:49:61:72:41:25:87:8B
X509v3 Authority Key Identifier:
keyid:AC:32:AE:2C:0C:2A:D4:53:C7:CE:BB:8F:B2:8C:A1:23:9A:2F:E5:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/rDKuLAwq1FPHzruPsoyhI5ov5aU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rDKuLAwq1FPHzruPsoyhI5ov5aU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC31/2CD3D1924A3111F19BD3103690833773/C2E7AA224A3211F1BD5DF90392833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.208.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:08:9e:b4:8f:14:b3:92:7d:7b:ff:42:26:c4:83:40:82:42:
41:71:a9:91:f3:cd:9c:25:19:66:d4:2b:97:cd:91:49:b1:d7:
e8:83:48:94:a7:66:a0:47:b6:ec:dc:c5:32:f1:90:08:ce:6c:
df:9c:5c:ed:6e:b6:b8:fb:32:55:49:cb:e1:48:76:89:13:d5:
cd:ba:ce:0b:e1:9d:0a:7a:7f:c5:b1:4f:57:d8:b9:bc:df:a5:
8b:36:c3:a4:30:69:1a:78:c3:bd:cb:0f:0a:30:cf:2d:ab:24:
21:24:69:6c:6e:2f:aa:e9:fc:ed:1d:ca:ba:e1:15:ec:58:0b:
23:36:27:b8:a6:53:45:63:e4:0a:18:f4:68:61:26:e7:91:3d:
5c:c7:83:15:7e:2d:bd:7c:a3:9f:de:78:a5:a8:4b:35:1b:82:
e8:57:d4:19:14:2c:5b:a5:66:fc:f5:ee:03:05:59:28:10:52:
e6:24:08:79:cd:78:db:5a:a5:3b:83:e0:b3:96:ea:f4:b9:59:
08:d8:a1:16:d1:b4:f3:5f:54:a9:ff:81:18:64:d1:26:47:49:
84:19:ea:88:45:73:db:34:b4:b0:f1:df:b3:70:3e:9e:e0:93:
a2:fa:6a:05:07:8d:7a:2c:8a:cf:86:61:65:fb:5e:a4:c1:29:
26:18:37:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:58 2026 by rpki-client