
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
File: 5787CC96FB3411F0A8F597323D6F56BC.roa (raw, json)
Hash identifier: MGOYBrK/qGN4D07Ac4Kk2t1ZRYzneqz62Jx7Udm973E=
Subject key identifier: 56:BA:E2:A5:8B:30:92:8E:D6:DC:F9:91:E7:EA:C9:1E:71:D8:DB:1D
Certificate issuer: /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Certificate serial: 05
Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
Signing time: Tue 27 Jan 2026 03:58:50 +0000
ROA not before: Tue 27 Jan 2026 03:58:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142232
IP address blocks: 151.158.70.0/23 maxlen: 23
151.158.70.0/24 maxlen: 24
151.158.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Validity
Not Before: Jan 27 03:58:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697837fa-3766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:29:b2:7f:fc:0a:92:6a:1f:00:b4:a2:be:
f9:13:d5:27:b6:91:1d:74:82:9f:9a:8f:e2:0e:e5:
37:99:0e:ff:4c:67:94:0b:78:96:8b:c1:9f:1a:d6:
e4:80:e2:f5:40:b2:ab:a4:42:49:4b:be:3b:fe:e8:
f2:33:ea:1c:2f:9e:2e:fe:83:38:97:7f:1c:e2:e8:
44:74:eb:72:e9:5b:69:60:9d:8d:3e:02:d6:21:85:
44:01:c5:5e:09:7f:b0:88:96:e7:dd:0b:01:0a:1d:
da:6e:34:c7:c1:3b:27:24:56:94:d7:ec:87:f3:72:
2d:24:bd:22:5c:0b:be:34:4a:f5:48:60:48:5b:ac:
3d:c9:09:2a:bb:28:9e:82:a3:2e:bc:29:9c:26:2b:
12:1d:f0:11:4a:1b:77:64:a1:b8:c9:03:69:2c:8e:
97:62:70:de:50:a5:cb:ab:ad:2a:b2:cb:4a:1f:14:
9c:f6:6b:3c:4f:c9:3e:9f:9d:ca:07:3d:a2:7a:14:
0c:c1:6a:fc:a5:01:0d:65:fc:15:fa:cf:7f:56:a9:
e6:29:98:ea:3b:b7:cd:cb:b8:b8:f5:1a:63:5b:8a:
3e:1d:20:91:57:2e:11:b0:a1:eb:41:50:14:47:ce:
b0:09:e0:d2:72:57:e7:09:b6:9f:61:68:b9:27:bc:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:E2:A5:8B:30:92:8E:D6:DC:F9:91:E7:EA:C9:1E:71:D8:DB:1D
X509v3 Authority Key Identifier:
keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.70.0/23
Signature Algorithm: sha256WithRSAEncryption
af:4e:c1:2a:35:47:aa:28:c7:91:ba:1f:04:76:1b:20:14:7e:
a2:c1:0f:10:ec:31:9f:d7:d0:86:9a:c2:da:c5:f4:48:32:13:
f0:5a:f3:ad:11:72:eb:b7:fa:c0:97:22:c4:e0:01:d6:c5:76:
2e:1b:26:11:c8:d2:f4:5d:41:18:04:76:07:9d:bf:e6:20:5f:
1f:b2:af:cf:92:59:40:90:3e:7e:f1:16:2b:32:65:6d:ab:1f:
b0:85:f5:c1:51:60:46:ee:81:06:0c:e8:1e:8c:0e:0c:e2:3b:
c7:ef:6f:e9:a0:de:de:91:9b:ad:31:90:f5:00:8d:12:67:0b:
43:0a:11:f9:02:2b:e5:c0:e7:02:cb:22:af:1a:dd:72:a2:49:
1f:0d:80:fa:ef:2e:19:08:de:70:c4:0f:53:23:30:88:dc:11:
6c:6b:78:27:cc:72:8c:ee:c9:cf:b6:f8:1b:d9:c4:5b:ee:83:
70:55:89:f9:9e:c4:fa:b2:3e:fb:a7:9c:fd:6d:c3:5d:7c:8a:
93:3e:04:9d:d0:82:9e:6c:27:dd:c2:7b:48:e0:88:1d:51:67:
49:a3:9c:35:9b:e6:a5:11:9d:8c:6a:32:28:9b:c0:5f:c0:30:
c7:bc:6c:70:a0:34:ab:21:38:2f:c8:ee:1b:87:08:9d:de:06:
0b:51:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:03 2026 by rpki-client