
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/317DA71E8B0811F1AFBFDAB07011F970.roa
File: 317DA71E8B0811F1AFBFDAB07011F970.roa (raw, json)
Hash identifier: +L2oo7I2NyWXR7Gmxsy+W4+QlgF/xiRL96eRRBz2uDo=
Subject key identifier: 97:8E:92:A0:4D:4E:AC:6D:05:64:2D:B6:FD:64:B8:9E:D8:3F:01:EF
Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial: 38FE
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/317DA71E8B0811F1AFBFDAB07011F970.roa
Signing time: Fri 02 Oct 2026 15:38:25 +0000
ROA not before: Fri 02 Oct 2026 15:38:25 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 142055
IP address blocks: 151.158.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14590 (0x38fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Validity
Not Before: Oct 2 15:38:25 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcff1-1524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:0a:30:26:41:fb:c0:47:46:f8:3f:57:2c:
5a:8a:0a:4d:7b:fd:95:93:9f:3b:87:e8:fb:74:44:
fc:21:0b:de:c6:92:68:e6:a5:66:8a:0d:80:17:a5:
9f:cc:d9:d7:dd:0e:5d:a4:f1:da:3e:42:34:5e:9a:
cf:b4:e5:f6:5d:52:34:6b:51:b0:8a:36:2b:34:34:
61:8f:f4:08:61:f4:99:af:50:bf:37:30:4a:6e:56:
09:05:65:a7:76:d8:e1:74:41:8e:6d:8b:3a:b5:55:
42:cf:f8:9e:f9:96:7f:65:9b:fb:0f:45:59:e6:41:
8a:ac:32:5a:0b:a9:b8:45:db:0f:6a:f7:d0:98:d2:
f7:be:06:36:54:c0:e0:e2:b5:59:a5:f8:14:82:f2:
b6:1a:8a:1b:d0:05:5d:bd:59:1f:a8:1a:12:9d:f7:
28:b3:d1:06:e5:81:93:ff:ea:b6:47:55:4a:0d:04:
d1:d2:e7:7f:d3:eb:c9:7e:b7:59:5d:d4:0a:0a:34:
cb:a5:a6:0a:7f:19:c8:31:df:9f:5e:54:20:1d:2f:
6e:75:85:79:7e:f2:e6:ec:cc:9e:b8:8c:6a:9b:75:
3b:fe:5a:37:bd:6a:24:e2:92:37:a6:8b:16:8d:a4:
6b:ff:39:d2:bb:b3:41:bd:8a:b6:99:1b:fb:17:31:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:92:A0:4D:4E:AC:6D:05:64:2D:B6:FD:64:B8:9E:D8:3F:01:EF
X509v3 Authority Key Identifier:
keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/317DA71E8B0811F1AFBFDAB07011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:09:8b:d4:1f:35:06:3e:32:19:45:4c:55:e0:4c:33:33:7a:
50:14:91:9f:a7:c4:0e:bb:32:5b:69:8e:8f:0f:43:1c:3b:ee:
47:0f:6d:01:33:1c:00:40:a9:3d:c3:eb:6b:a7:9e:4b:e9:a7:
92:0d:63:a6:de:cd:f3:48:77:e6:c6:d2:90:9d:50:3e:ee:4b:
46:00:f8:e7:6d:4b:6c:ff:19:44:6c:91:6a:da:81:1b:78:2a:
c0:8f:fc:65:8a:1f:e1:ac:c6:fa:a7:7d:02:b0:78:3e:d6:e3:
bb:81:7e:6d:c9:54:57:08:19:65:d9:e6:c7:1b:aa:df:51:42:
38:be:8a:48:a8:77:9a:19:ab:fb:6e:73:d3:bd:bf:a9:26:97:
82:e0:63:08:cf:75:d7:85:ef:31:9b:46:da:4c:ae:c6:be:d5:
a6:26:92:6c:d5:4d:7b:5f:f5:2e:2a:b3:71:1c:e5:be:ef:a4:
28:a7:1b:b6:ed:96:41:36:09:9c:cb:f7:29:0f:3c:85:75:3a:
9c:bd:2f:89:ab:ae:12:dc:4d:0a:48:75:38:3e:0a:74:87:e5:
0e:9d:73:c1:78:54:b2:17:d2:41:37:27:c0:22:5a:cf:78:65:
54:c7:6c:ab:f0:cd:43:58:95:7b:0f:d3:75:05:43:6b:20:4c:
f9:84:70:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICOP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB
RjM3RDVEQkQwHhcNMjYxMDAyMTUzODI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2ZmMS0xNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfoKMCZB+8BHRvg/VyxaigpNe/2Vk587h+j7dET8IQvexpJo5qVmig2AF6Wf
zNnX3Q5dpPHaPkI0XprPtOX2XVI0a1GwijYrNDRhj/QIYfSZr1C/NzBKblYJBWWn
dtjhdEGObYs6tVVCz/ie+ZZ/ZZv7D0VZ5kGKrDJaC6m4RdsPavfQmNL3vgY2VMDg
4rVZpfgUgvK2Goob0AVdvVkfqBoSnfcos9EG5YGT/+q2R1VKDQTR0ud/0+vJfrdZ
XdQKCjTLpaYKfxnIMd+fXlQgHS9udYV5fvLm7MyeuIxqm3U7/lo3vWok4pI3posW
jaRr/znSu7NBvYq2mRv7FzFGkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJeOkqBN
TqxtBWQttv1kuJ7YPwHvMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQjk5NTNEQkExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzE3REE3MUU4
QjA4MTFGMUFGQkZEQUIwNzAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl55eMA0GCSqGSIb3DQEBCwUAA4IBAQDFCYvUHzUGPjIZRUxV4Ewz
M3pQFJGfp8QOuzJbaY6PD0McO+5HD20BMxwAQKk9w+trp55L6aeSDWOm3s3zSHfm
xtKQnVA+7ktGAPjnbUts/xlEbJFq2oEbeCrAj/xlih/hrMb6p30CsHg+1uO7gX5t
yVRXCBll2ebHG6rfUUI4vopIqHeaGav7bnPTvb+pJpeC4GMIz3XXhe8xm0baTK7G
vtWmJpJs1U17X/UuKrNxHOW+76Qopxu27ZZBNgmcy/cpDzyFdTqcvS+Jq64S3E0K
SHU4Pgp0h+UOnXPBeFSyF9JBNyfAIlrPeGVUx2yr8M1DWJV7D9N1BUNrIEz5hHDT
-----END CERTIFICATE-----
Generated at Thu Oct 22 05:55:28 2026 by rpki-client