
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/38D7A57E02B311F1B5A042A33E3D8C67.roa
File: 38D7A57E02B311F1B5A042A33E3D8C67.roa (raw, json)
Hash identifier: TB0gLypezyvhSYXKuhRx9hDReeYJv2R0PPBMOqgwTZc=
Subject key identifier: 62:14:C4:A0:FD:AF:50:79:67:EA:48:2D:8D:8A:9D:6B:92:BA:99:18
Certificate issuer: /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Certificate serial: 04
Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/38D7A57E02B311F1B5A042A33E3D8C67.roa
Signing time: Thu 05 Feb 2026 16:56:38 +0000
ROA not before: Thu 05 Feb 2026 16:56:38 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 151965
IP address blocks: 151.158.136.0/23 maxlen: 23
151.158.136.0/24 maxlen: 24
151.158.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:23:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Validity
Not Before: Feb 5 16:56:38 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6984cbc5-6276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:97:fb:94:1b:14:cc:7d:ad:47:0b:e8:91:0d:
49:f6:f4:5f:a4:ad:52:50:59:1f:89:ce:c7:31:2a:
72:db:7c:02:61:46:f9:56:f1:d3:07:49:43:d2:56:
18:93:29:b6:05:1d:f5:77:1b:c3:39:21:2f:90:1a:
c4:e5:f1:1f:b4:86:c6:f7:0b:8f:12:17:b4:6b:91:
ce:54:64:59:51:4d:8f:35:d0:fa:b1:5d:57:9d:cf:
f2:56:b8:ad:85:78:fd:89:9f:4c:54:57:ed:56:7f:
c6:a6:1b:37:44:5d:dc:41:ab:e4:33:d1:36:b1:ad:
a7:f5:d3:7e:b2:d8:26:f9:d0:e1:4b:c3:5c:3b:aa:
ad:a8:f7:66:79:8e:62:c4:6e:80:7d:e1:60:31:f0:
76:45:1f:68:c7:3f:17:b6:a2:c1:9d:2e:b5:63:36:
e4:3c:59:48:ba:c6:ab:bf:0b:89:96:5c:0e:ae:92:
7d:b2:16:b2:46:e8:b6:b2:81:f7:21:96:fe:f3:dc:
73:8d:40:ac:0d:f1:da:88:f7:f4:85:ca:f6:55:0a:
fa:e3:9e:9a:08:d3:e1:19:8f:f9:17:bf:e9:64:67:
2b:d6:05:c2:29:27:92:09:1e:0d:d2:d3:8d:8e:ec:
a0:09:89:00:45:cd:b4:13:9a:f0:a1:f8:8d:ac:49:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:14:C4:A0:FD:AF:50:79:67:EA:48:2D:8D:8A:9D:6B:92:BA:99:18
X509v3 Authority Key Identifier:
keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/38D7A57E02B311F1B5A042A33E3D8C67.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
151.158.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:94:43:3f:35:ac:92:1c:0f:f1:5f:c6:2f:b8:16:d7:86:ed:
ba:16:fa:ad:be:1b:58:30:03:43:6b:07:0e:6d:9d:37:af:d5:
f2:6e:56:d8:7d:0d:33:e3:64:5d:9d:d9:d7:d3:af:f8:28:07:
a9:d1:28:af:fc:36:0a:68:8a:e7:9d:a5:2c:e3:44:11:e8:5a:
88:d6:99:93:3b:20:3d:b6:a9:4c:86:e8:70:99:9c:a3:b8:2a:
25:ec:bb:3e:03:c2:dc:05:2c:07:01:83:93:e5:a7:7a:b0:f2:
35:96:8d:ae:93:16:09:20:a4:8f:25:6d:7c:7b:7d:36:23:82:
cb:2e:20:7e:be:93:06:c0:7f:b9:0d:93:b2:f6:4d:b4:38:6a:
82:3e:92:9e:1b:04:fc:82:b5:f0:dd:0d:16:9e:80:53:3e:64:
8f:d5:44:11:fb:36:bf:5d:5d:4f:b7:b6:6b:0e:1b:54:f3:2f:
88:d9:19:04:c0:07:cb:06:4d:4f:14:05:61:71:08:a6:8b:79:
ca:4e:79:ca:29:94:00:b2:13:bf:12:c8:49:5b:c4:b9:81:d8:
b8:92:26:b9:ef:df:d7:22:00:dc:5a:8c:2d:56:4e:92:8f:75:
bf:a0:9a:44:47:e1:7e:7d:57:df:08:04:53:f2:31:91:54:d5:
70:27:3a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:10 2026 by rpki-client