
$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
File: 3E037E68FF7C11F086EA69A45B6F56BC.roa (raw, json)
Hash identifier: 7ZBW9E0FIJHuCd4pexIv+TWDmuohVb8e/EViPYf2944=
Subject key identifier: 54:34:A6:F9:9C:41:57:0C:48:EB:40:79:B4:53:A1:05:CD:98:1B:B0
Certificate issuer: /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial: 08
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
Signing time: Sun 01 Feb 2026 14:42:33 +0000
ROA not before: Sun 01 Feb 2026 14:42:33 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132387
IP address blocks: 151.158.86.0/24 maxlen: 24
151.158.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Validity
Not Before: Feb 1 14:42:33 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=697f6659-bc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2c:62:68:17:34:3f:4c:15:6b:84:b2:a4:40:
e6:4a:d8:d6:95:1f:3a:73:59:14:dd:c5:e8:80:22:
08:5d:e1:34:44:b1:22:1d:9d:4c:d4:28:a6:8a:d2:
83:c6:d3:ea:5f:88:08:e2:54:e8:9d:48:f0:32:ad:
f7:51:f6:f1:91:77:8e:4e:92:31:f4:b0:9d:42:18:
b8:83:16:96:23:82:fb:74:35:60:df:88:ff:3b:4a:
8d:aa:96:f7:53:c3:8d:84:df:dd:2a:b6:87:8e:e9:
e4:87:3f:3e:80:eb:ef:4e:06:75:43:a6:37:10:fd:
60:f1:76:13:61:72:80:a3:dd:6e:36:78:48:3e:bd:
09:c5:c7:f5:0d:4f:21:ce:de:5e:33:17:f3:89:06:
cf:5d:51:91:b6:07:c7:2e:18:91:f9:ad:45:7e:ba:
ff:6e:a7:0d:2b:aa:6c:4f:60:e4:f2:f4:aa:35:64:
bf:ee:6d:8b:73:8f:b4:72:c7:82:81:53:2d:9b:8f:
1d:4d:2e:ed:ec:ca:b6:ed:75:4c:2f:87:a2:0e:d1:
10:f2:d2:74:da:dc:7e:d2:6c:7b:7a:2c:5a:2a:54:
6a:42:43:e2:5f:e8:e2:a6:0c:be:6e:18:0c:3e:30:
be:31:f5:28:35:54:79:f2:82:94:d2:23:0b:6a:7b:
5e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:A6:F9:9C:41:57:0C:48:EB:40:79:B4:53:A1:05:CD:98:1B:B0
X509v3 Authority Key Identifier:
keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.86.0/23
Signature Algorithm: sha256WithRSAEncryption
70:2d:5e:56:bd:84:7d:f1:72:ed:fe:6f:2e:6d:b3:af:dc:04:
7d:1b:06:6d:07:65:ae:59:a0:da:45:e5:18:8a:63:af:38:a3:
72:47:9d:61:7b:d7:7f:ec:02:90:a7:c9:c5:ff:28:9c:bd:76:
c9:20:1e:31:a7:4e:69:ad:fc:ca:39:b3:01:b1:c3:f3:e3:a2:
a5:8f:11:4d:70:6f:e3:a5:d1:67:fb:d2:25:47:a3:84:c8:69:
57:e8:c3:bc:ef:63:ef:a3:c0:45:09:c2:49:92:4b:af:d1:f5:
74:ab:6b:a1:1a:4e:14:f2:cc:6b:82:30:21:59:ef:ee:e5:82:
c8:7a:af:23:de:7e:c0:f2:1f:53:07:50:f1:87:27:9e:ad:15:
cd:a8:1e:5f:f4:58:19:67:d9:fc:4b:31:e3:c8:fa:44:f5:a3:
b3:ae:bf:70:f9:4b:92:dd:22:72:75:79:31:b3:da:80:20:2c:
7b:c4:cf:b5:b2:68:ad:3b:2e:37:9a:17:df:2a:2c:ec:03:84:
6d:fd:40:bc:b1:87:c5:56:a9:fc:79:b3:fc:1c:b4:66:df:de:
89:5c:4e:8c:3a:a9:1f:b9:86:fc:69:be:8d:a4:9c:9b:e5:d2:
5d:01:fa:29:7b:f8:91:65:5f:e1:f2:ec:b9:a0:49:87:87:3f:
bb:37:04:d2
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx
NzI1RjExMC8GA1UEBRMoOUFFMzk3N0E1OThDRjk4MUJERjA4NTY0RERDQjZCRjJC
NkE5NjQxQjAeFw0yNjAyMDExNDQyMzNaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5N2Y2NjU5LWJjNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCTLGJoFzQ/TBVrhLKkQOZK2NaVHzpzWRTdxeiAIghd4TREsSIdnUzUKKaK0oPG
0+pfiAjiVOidSPAyrfdR9vGRd45OkjH0sJ1CGLiDFpYjgvt0NWDfiP87So2qlvdT
w42E390qtoeO6eSHPz6A6+9OBnVDpjcQ/WDxdhNhcoCj3W42eEg+vQnFx/UNTyHO
3l4zF/OJBs9dUZG2B8cuGJH5rUV+uv9upw0rqmxPYOTy9Ko1ZL/ubYtzj7Ryx4KB
Uy2bjx1NLu3syrbtdUwvh6IO0RDy0nTa3H7SbHt6LFoqVGpCQ+Jf6OKmDL5uGAw+
ML4x9Sg1VHnygpTSIwtqe16LAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVDSm+ZxB
VwxI60B5tFOhBc2YG7AwHwYDVR0jBBgwFoAUmuOXelmM+YG98IVk3ctr8rapZBsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3MjVGLzk3MjQ0QUNFRkIy
RTExRjBBRkRFNzE4OTNCNkY1NkJDL211T1hlbG1NLVlHOThJVmszY3RyOHJhcFpC
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvbXVPWGVsbU0tWUc5OElWazNjdHI4cmFwWkJzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzI1Ri85NzI0NEFDRUZCMkUxMUYwQUZERTcxODkzQjZGNTZCQy8zRTAzN0U2OEZG
N0MxMUYwODZFQTY5QTQ1QjZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAZeeVjANBgkqhkiG9w0BAQsFAAOCAQEAcC1eVr2EffFy7f5v
Lm2zr9wEfRsGbQdlrlmg2kXlGIpjrzijckedYXvXf+wCkKfJxf8onL12ySAeMadO
aa38yjmzAbHD8+OipY8RTXBv46XRZ/vSJUejhMhpV+jDvO9j76PARQnCSZJLr9H1
dKtroRpOFPLMa4IwIVnv7uWCyHqvI95+wPIfUwdQ8Ycnnq0VzageX/RYGWfZ/Esx
48j6RPWjs66/cPlLkt0icnV5MbPagCAse8TPtbJorTsuN5oX3yos7AOEbf1AvLGH
xVap/Hmz/By0Zt/eiVxOjDqpH7mG/Gm+jaScm+XSXQH6KXv4kWVf4fLsuaBJh4c/
uzcE0g==
-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:03 2026 by rpki-client