
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FC257CA38A911F1A83F6BB4CC833773.roa
File: 5FC257CA38A911F1A83F6BB4CC833773.roa (raw, json)
Hash identifier: 3I04D/M1zjsJ40sPKTvDV2WzbZHGGJS7YQp8ZC8zX4Y=
Subject key identifier: DC:BA:1D:B8:DA:F4:82:86:C7:82:5D:A1:33:C2:5E:58:7F:AF:18:92
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 239F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FC257CA38A911F1A83F6BB4CC833773.roa
Signing time: Fri 02 Oct 2026 15:18:15 +0000
ROA not before: Fri 02 Oct 2026 15:18:15 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151905
IP address blocks: 157.15.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9119 (0x239f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:18:15 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb36-483e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:4b:c3:d9:74:8f:43:ee:93:bb:cd:27:27:
03:63:65:6d:3f:b2:5c:95:72:18:66:8a:07:9a:9b:
8b:1b:bf:23:31:4d:3d:33:b6:b7:4b:b4:19:cf:a8:
72:de:2a:76:57:1b:de:4b:55:f4:f9:46:59:41:ae:
03:55:b1:de:a5:7a:25:50:f0:4d:69:e1:65:69:b1:
85:7d:3c:7c:39:df:98:e1:37:df:9f:dc:c5:d3:8f:
bb:49:9e:0a:e8:31:9f:db:09:f2:4b:b9:e1:99:a6:
3d:7f:2c:f4:cd:e7:a8:6e:f6:2e:54:94:0c:86:38:
20:cf:fc:fa:e0:e5:02:f2:85:33:9a:b2:83:62:a7:
24:60:7f:9c:ff:62:c9:74:5e:24:f1:eb:85:25:3d:
0b:6b:27:d0:4f:6a:d3:71:8b:72:de:f4:5c:26:15:
f5:54:47:7d:96:cb:b8:ae:3c:4e:db:65:8a:46:73:
ad:df:b2:35:cb:25:6a:90:98:64:07:58:bb:7b:92:
e2:fd:04:7c:f8:46:1f:29:af:b5:d3:02:b7:61:a4:
be:4d:2a:1d:25:f0:20:a0:a5:59:2d:02:ec:ee:d3:
45:9d:d7:24:d6:82:58:71:49:1e:42:ed:cd:79:98:
38:4a:fc:64:c0:1e:c3:92:4a:72:0b:12:08:e4:80:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BA:1D:B8:DA:F4:82:86:C7:82:5D:A1:33:C2:5E:58:7F:AF:18:92
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FC257CA38A911F1A83F6BB4CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.84.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:02:20:4c:df:85:4f:d2:b7:3c:db:2e:2e:3c:f3:38:c1:10:
5a:b2:ef:f2:b0:bf:0f:dd:9d:83:c6:bb:97:f7:ae:64:b2:b0:
d4:24:45:84:e7:59:bd:6a:67:8d:56:ea:44:07:66:db:fa:48:
e7:7c:7b:cd:71:0e:85:ad:18:28:71:d6:8e:81:46:f2:a2:92:
5f:3d:ad:36:f3:ab:95:f4:88:a1:24:4b:9c:b5:e2:30:7c:8e:
07:d9:a6:c7:d3:9b:ef:42:ce:b0:c2:ed:fb:7a:ea:c6:7a:92:
60:59:b3:9f:4a:84:47:03:2e:c2:45:77:4f:24:c2:fd:24:83:
8f:3b:0d:fd:95:5c:5b:dc:6e:1d:a2:36:f3:2f:26:3b:66:ff:
18:02:c8:0b:a8:be:e8:b3:50:09:89:a6:a2:ac:8e:6d:58:63:
c1:89:e7:72:e3:e1:fa:36:1c:3f:69:e2:53:9c:7f:d2:9e:43:
40:81:dd:93:9e:9f:fc:7e:be:b3:18:c3:ae:df:0a:9c:e7:2a:
e2:70:c5:c7:d0:f5:ad:f8:2c:5c:49:a0:fd:ef:de:f4:6d:1e:
45:d2:fb:57:49:fa:e6:59:94:ed:59:7b:f6:97:a0:fe:2e:67:
ed:c3:07:72:d8:b9:f1:1c:80:99:c7:fa:44:85:d1:ab:a3:75:
74:09:e5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:53 2026 by rpki-client