
$ rpki-client -vvf rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
File: 8A73482EEF9F11F0944076B3686F56BC.roa (raw, json)
Hash identifier: pcCsBzKqUgzcXsKOhwNOykqhfBGrL18UoxZtq1vp4oY=
Subject key identifier: F1:C4:7F:23:7E:DC:78:FD:C5:70:1D:28:64:B8:AE:05:F4:DC:EF:9D
Certificate issuer: /CN=A91940AE/serialNumber=9969A18B3A01B3EBAB5D563D2B0DC1E79FE1E165
Certificate serial: 20
Authority key identifier: 99:69:A1:8B:3A:01:B3:EB:AB:5D:56:3D:2B:0D:C1:E7:9F:E1:E1:65
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
Signing time: Mon 02 Mar 2026 14:11:41 +0000
ROA not before: Mon 12 Jan 2026 10:14:55 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154036
IP address blocks: 165.101.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.crl
rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91940AE, serialNumber=9969A18B3A01B3EBAB5D563D2B0DC1E79FE1E165
Validity
Not Before: Jan 12 10:14:55 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a59a9d-f688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:99:3a:de:b5:e2:b1:3c:88:e0:9d:4e:69:
19:2e:21:79:4d:60:a1:ae:de:cc:43:2f:fe:54:aa:
16:16:ea:cd:0f:6a:ef:59:6c:59:ba:2a:02:e3:bc:
e0:f0:de:1f:6c:87:b2:a4:14:f1:eb:4b:9a:c7:db:
77:90:d0:2d:e2:ed:91:69:7d:ec:35:0a:d7:9f:86:
a8:23:3a:33:7e:04:df:e9:52:12:23:1c:7c:19:03:
3c:59:a3:ad:6c:92:ba:fd:86:02:7c:ab:26:2f:fb:
5e:76:e7:3a:4a:eb:0f:2b:06:3e:c3:34:84:11:60:
00:13:79:39:c2:5e:bd:42:92:15:89:8f:d7:53:ba:
9d:c7:41:15:ef:fa:39:33:e6:7a:59:f4:9c:33:f7:
f9:a5:c9:5c:0c:03:ce:cc:2d:fb:33:9f:a8:62:a9:
40:5b:74:20:7b:b2:d8:03:77:cd:d7:7f:c8:54:ff:
23:83:ef:c0:d4:4d:d6:c4:ec:92:ad:a2:1c:15:d0:
06:eb:0a:aa:f0:62:6e:81:af:f4:05:ac:8f:6a:c3:
96:58:c2:77:fe:2b:90:08:9f:cd:7d:7a:8e:60:a0:
bf:78:d2:02:6c:22:aa:9e:23:bd:67:6f:11:c5:96:
49:14:c7:8c:5c:bb:92:c4:44:b0:b8:48:4d:57:56:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:7F:23:7E:DC:78:FD:C5:70:1D:28:64:B8:AE:05:F4:DC:EF:9D
X509v3 Authority Key Identifier:
keyid:99:69:A1:8B:3A:01:B3:EB:AB:5D:56:3D:2B:0D:C1:E7:9F:E1:E1:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:34:9f:cc:68:72:71:a1:c4:e0:47:fb:28:5e:09:a4:4c:83:
a5:30:79:6f:da:84:21:54:90:27:97:d2:e1:56:24:aa:75:d0:
cf:58:9f:6b:75:4d:71:29:d2:0f:3e:34:e6:a0:d3:ac:7f:cf:
78:b9:ae:f1:92:10:06:c7:90:0f:05:b5:20:fb:b5:0f:0a:6f:
ee:94:8d:46:e6:17:4b:f5:12:a4:f2:e5:39:ca:ae:04:ae:8c:
50:e2:b9:99:be:6d:8b:51:39:27:47:df:7e:f5:ad:61:0c:2a:
77:d9:e1:3b:11:62:13:3d:1c:4e:6b:69:6c:e8:93:9e:b7:d9:
a8:6d:98:7b:1c:ff:e4:5a:be:96:40:76:ef:84:b9:80:15:9d:
a2:a6:41:bf:fa:97:07:72:96:4e:cb:0e:2c:c3:fd:24:f0:6f:
93:a1:1d:16:84:14:7e:1b:13:0f:dc:3a:fa:20:96:d8:2c:58:
fd:2e:46:37:ce:63:34:fc:e7:f3:98:5d:23:96:79:cc:ba:b7:
52:41:a3:b2:ed:f7:8b:6e:87:d9:19:08:9c:c2:b6:5d:1b:0d:
80:04:71:a6:48:47:f2:31:10:e9:b7:a2:92:56:54:97:6e:dc:
8c:ab:e8:99:98:2e:b1:d9:94:77:43:e6:03:76:82:50:8c:a4:
3d:46:26:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:58 2026 by rpki-client