
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/01AB053800E611F1BE6C33EC376F56BC.roa
File: 01AB053800E611F1BE6C33EC376F56BC.roa (raw, json)
Hash identifier: kmY0qRrvIDIK9Tv6KUtstC/wtlPYaFhtrXRSIWFN1NU=
Subject key identifier: 90:2F:F7:32:2B:DD:D1:D9:A5:7E:C8:1F:A9:1B:6B:F4:32:F3:AC:2B
Certificate issuer: /CN=A9166D02/serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Certificate serial: 17
Authority key identifier: CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/01AB053800E611F1BE6C33EC376F56BC.roa
Signing time: Mon 02 Mar 2026 12:44:51 +0000
ROA not before: Tue 03 Feb 2026 09:52:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 142259
IP address blocks: 151.158.134.0/23 maxlen: 23
151.158.134.0/24 maxlen: 24
151.158.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166D02, serialNumber=CDC690832F2D1235DABF1EF317F11B695EEBDA4F
Validity
Not Before: Feb 3 09:52:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a58643-45f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:6d:84:8a:b2:fd:08:dc:9f:0c:58:a4:98:
e5:8b:a3:79:96:30:ea:cd:23:c4:9b:66:6b:47:ea:
36:d1:13:53:0a:f7:28:c0:a2:83:0b:5a:63:a7:75:
0c:00:16:fa:28:31:cb:0f:38:45:ad:1b:af:41:d6:
1a:8b:e3:b0:06:19:d3:43:26:79:96:0a:56:81:8e:
ae:95:42:c1:42:eb:85:2b:30:61:ae:8f:c8:d1:1b:
65:01:b5:1b:3a:e0:dc:0a:96:e6:e9:43:73:65:bc:
13:5d:21:de:1b:ef:ef:60:3c:6e:30:07:93:62:ab:
e1:b7:f5:05:87:5c:c4:f1:4e:7f:06:d9:6a:a5:cd:
d2:f4:fc:2e:d9:87:a2:70:87:87:df:4b:f8:55:de:
ab:b3:16:d3:6f:05:7c:ce:0e:1a:da:6b:c6:d1:21:
cf:e5:cd:43:84:92:ad:c9:59:4e:70:2b:58:b2:b3:
f4:a4:6c:8f:2d:d2:1a:4e:0f:f8:2f:ac:cc:64:de:
a0:7c:57:32:80:da:d2:16:a5:30:3b:0f:76:d8:1a:
bf:65:02:15:a4:2c:f5:c3:3e:3a:e3:ee:3a:82:60:
31:a7:85:46:d9:b0:10:51:b3:41:c6:6f:95:a7:30:
dd:fd:af:23:93:ed:5d:ab:2c:5e:4b:30:9b:55:df:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:F7:32:2B:DD:D1:D9:A5:7E:C8:1F:A9:1B:6B:F4:32:F3:AC:2B
X509v3 Authority Key Identifier:
keyid:CD:C6:90:83:2F:2D:12:35:DA:BF:1E:F3:17:F1:1B:69:5E:EB:DA:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/zcaQgy8tEjXavx7zF_EbaV7r2k8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zcaQgy8tEjXavx7zF_EbaV7r2k8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/E1A66F1800DE11F1AD84AD84756F56BC/01AB053800E611F1BE6C33EC376F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.134.0/23
Signature Algorithm: sha256WithRSAEncryption
38:f0:5c:cf:46:fd:16:ce:08:cf:ce:fe:12:3c:6e:46:c3:d8:
1e:94:5d:cd:01:ad:dd:4a:be:73:c1:54:d4:12:83:07:8a:d9:
22:fe:c3:c0:09:85:e7:e5:12:5d:af:71:c5:63:17:c6:f2:01:
ed:99:d2:4a:44:1d:b1:09:d8:55:f3:c4:c6:4f:4f:e7:d6:27:
21:c7:cf:02:33:74:33:6d:0d:ed:ee:dc:7e:6f:83:5c:ab:97:
a3:27:6b:f0:43:cb:63:c1:b1:24:4b:ff:67:a4:d7:34:66:8e:
1b:5d:6c:0c:0e:8c:4d:5a:58:3a:c5:4a:6e:57:9c:05:16:4b:
27:1a:ac:b9:11:0b:7f:40:a1:76:66:e4:31:8b:3b:59:fc:05:
7b:0f:f9:bb:80:0d:c6:b6:90:46:36:8c:0e:68:4e:b9:6d:6f:
87:2f:15:97:ec:f0:42:a7:44:80:6f:ae:dd:30:13:a3:10:6e:
5d:b4:7f:c2:b6:97:58:14:f2:09:fa:8f:39:fa:a1:3e:b1:b2:
41:6e:6c:81:6c:39:a6:64:d2:5b:8d:e1:e5:cc:8c:83:76:4d:
5c:09:9a:48:f3:50:45:54:b6:69:f2:e7:87:30:3b:9e:30:4c:
a7:ea:59:e0:2d:79:4e:4a:93:91:1b:69:9c:ac:85:6d:8a:23:
d3:2b:a4:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:08:19 2026 by rpki-client