
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa
File: 51B1F2A665D911EBA6089869C4F9AE02.roa (raw, json)
Hash identifier: +h3ZHBCw6Qz+t4F3LGXV8hFxYh9j7OtLHTGZFocNf1k=
Subject key identifier: FC:91:A1:D6:EC:3A:8E:2F:38:BC:8C:AF:65:3F:CF:53:CC:73:E0:96
Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Certificate serial: 0879
Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa
Signing time: Thu 12 Feb 2026 20:17:44 +0000
ROA not before: Thu 12 Feb 2026 20:17:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 59257
IP address blocks: 209.150.144.0/23 maxlen: 24
209.150.146.0/23 maxlen: 24
209.150.148.0/23 maxlen: 24
209.150.150.0/23 maxlen: 24
209.150.152.0/21 maxlen: 21
209.150.152.0/23 maxlen: 24
209.150.154.0/23 maxlen: 24
209.150.156.0/23 maxlen: 24
209.150.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169 (0x879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA
Validity
Not Before: Feb 12 20:17:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=698e3568-6654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:4a:3a:d5:8d:a3:7a:00:7a:24:d1:1e:7f:
8a:74:03:18:b0:4c:f7:bb:f4:9c:31:ff:a1:17:c1:
a0:53:dd:01:7d:73:54:bf:97:91:7d:5b:ed:98:7a:
43:99:da:4e:b5:0b:f0:96:c8:c2:9c:f6:2b:74:42:
99:9f:19:40:65:25:3a:85:d8:85:56:7d:d8:16:d8:
6e:61:8a:c1:7c:be:ff:3c:45:eb:75:b1:6c:d3:02:
08:90:71:f3:9b:d5:e9:a4:30:7b:bb:00:3c:2d:5c:
ee:5e:b8:f7:ac:68:95:4a:ea:83:33:0c:d2:d8:4c:
99:08:66:c8:97:f6:f9:8e:eb:e8:82:72:5c:b6:31:
69:20:2f:b5:92:11:00:7d:d3:76:2a:d0:ee:ca:4c:
56:71:bf:7b:60:24:1f:fe:05:93:c4:eb:0c:4b:7b:
51:6d:49:74:13:8c:85:60:2f:ac:c2:8d:e6:fd:75:
cb:62:25:59:f7:7d:fe:49:33:6c:d9:ee:39:57:29:
99:6e:27:0c:1f:04:4a:b7:71:47:da:51:96:a4:3e:
dc:61:7c:a7:d8:d3:c1:96:61:b0:e7:e5:20:df:35:
01:dc:20:97:f4:02:73:a3:e8:8d:4c:75:86:c3:cf:
0f:b5:ee:54:e4:e4:97:71:7c:66:3c:7e:a3:e9:eb:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:91:A1:D6:EC:3A:8E:2F:38:BC:8C:AF:65:3F:CF:53:CC:73:E0:96
X509v3 Authority Key Identifier:
keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
209.150.144.0/20
Signature Algorithm: sha256WithRSAEncryption
81:48:01:f5:85:44:71:5d:84:b6:47:10:50:85:16:e9:6b:7c:
aa:d8:88:a6:7c:a6:c6:a7:24:49:c4:15:71:81:b9:0c:50:fc:
e8:7e:54:3c:3e:a6:e3:0f:02:75:4e:50:ac:68:f6:97:b8:2c:
74:e1:e5:8c:84:99:b6:18:ed:07:eb:77:41:0a:7b:67:21:9a:
05:a5:f4:3e:78:cd:62:82:76:82:a8:6a:d8:95:6d:2d:96:91:
f3:76:2c:8e:8a:6a:cb:bd:9c:92:b7:29:8b:49:34:f9:89:cc:
97:a5:f0:8e:36:07:e6:2f:16:e4:17:ef:5a:19:bd:f5:21:6b:
c4:76:36:82:43:a8:6c:d8:53:f3:57:c4:51:b4:0c:68:df:37:
24:69:20:a9:c5:3d:e4:75:ba:72:a7:a9:e4:f8:ad:fd:f2:a4:
cf:97:35:ca:c8:ab:5b:6f:2d:ec:81:25:1f:88:49:75:d0:ef:
8c:5b:7a:ec:45:f0:82:fb:8c:7a:7a:f9:a0:db:a1:af:76:43:
5a:4d:df:a4:f8:17:82:85:3b:2b:d8:57:7c:2d:48:ae:7f:a4:
07:40:7a:12:dc:e5:0a:91:7f:98:78:3e:f3:5b:91:85:3d:70:
4c:da:bf:06:38:72:f9:4a:e9:f1:f9:3f:b0:6c:28:65:26:99:
66:ae:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:37 2026 by rpki-client