
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa
File: AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa (raw, json)
Hash identifier: YD6V2HI2hUFrH/8EXeFP7xfUl76wgNpHMjQUF10dCIA=
Subject key identifier: CA:A3:27:64:A2:EE:E3:D1:3C:86:6D:29:06:85:39:AE:35:74:FD:64
Certificate issuer: /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial: 0178
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:06:35 +0000
ROA not before: Tue 06 May 2025 20:42:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152605
IP address blocks: 157.20.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Validity
Not Before: May 6 20:42:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5996b-ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:18:80:0d:69:1f:b2:b6:1c:61:fe:b2:d2:
22:74:e4:79:d8:e2:3e:6d:54:89:89:6a:f8:8f:76:
3a:e7:6d:c3:ef:60:d0:37:cc:13:39:7b:b6:19:65:
bb:b7:57:7f:a4:27:f1:3e:3a:b7:4d:94:b9:e3:c5:
e2:4e:aa:98:f4:33:7f:72:e8:bd:6f:78:8c:90:bb:
f8:74:6c:c6:db:c0:46:6a:c2:67:83:7d:1d:80:6a:
9d:ec:03:0f:c9:8e:e6:5a:6a:b6:ac:d3:29:30:38:
96:b5:c6:e2:51:de:0d:04:38:69:61:5b:54:22:76:
38:e3:e6:38:b2:14:38:39:34:5f:9d:95:d6:f2:c6:
e1:fd:4b:ff:ee:21:ca:e4:7e:0c:b3:bc:50:9c:c9:
81:91:3b:bf:b3:d6:54:0b:9f:24:47:b1:7f:a9:19:
7f:bc:18:d8:cb:b1:f2:df:18:ee:b0:71:2b:d6:f8:
27:0a:1c:4f:eb:15:d9:d8:e5:c3:7b:03:c5:66:56:
64:27:4f:f2:93:97:45:72:fb:a6:9b:34:44:55:00:
34:52:f2:e4:0e:1c:7a:5a:69:4d:fb:cd:09:f3:29:
df:f1:e8:e3:81:28:e8:e7:d0:a3:e1:ab:78:59:29:
1f:84:51:1b:e5:cf:95:8c:d7:3a:b1:0d:21:42:ac:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:27:64:A2:EE:E3:D1:3C:86:6D:29:06:85:39:AE:35:74:FD:64
X509v3 Authority Key Identifier:
keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/AE2FD9C4DA5411EE83E9E67EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.146.0/23
Signature Algorithm: sha256WithRSAEncryption
26:12:44:69:d3:f5:ea:a5:bf:60:e7:db:ae:3b:3c:e3:17:96:
27:e5:f3:d2:2e:9f:c8:2d:0b:a9:38:6e:d5:38:fb:c2:fb:c0:
e3:6f:14:5a:d6:d3:2d:f7:46:e7:bb:46:e1:88:89:bc:66:5d:
e4:4a:54:91:ae:2e:e9:dd:25:a6:d2:7d:17:f3:52:39:47:9e:
5e:c7:55:e4:43:3f:b4:b9:28:31:d4:f1:a9:a6:e7:b5:86:ad:
f5:af:0f:9b:ca:fe:6a:46:95:28:83:68:14:c0:5d:72:6a:f7:
64:d4:d9:f3:55:f8:28:a9:ae:f5:f8:ff:33:0b:72:67:2d:6c:
e4:f2:15:27:64:95:c1:e8:dc:8b:90:ad:97:81:3c:8d:4d:01:
8f:d0:e2:b8:fb:2d:e0:41:16:96:16:c7:3c:e7:ba:8b:f5:50:
f9:bb:c4:b4:c0:83:f8:d4:1c:a4:d5:26:f7:ea:8b:78:ee:c2:
1e:f5:da:66:3c:82:73:a8:4b:6c:33:74:2a:25:ca:17:82:56:
e2:8d:79:0f:5a:19:c4:31:10:af:6a:24:70:1f:9e:72:90:10:
c5:09:97:d9:6c:ed:53:4a:31:cc:83:9b:81:5b:c5:ba:a3:7a:
e3:e9:b1:66:ba:7c:33:d0:4e:a1:6b:00:85:53:ca:e2:bf:c6:
19:10:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:19:35 2026 by rpki-client