
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
File: 08A46B6A1B5111F18293DF0B253D8C67.roa (raw, json)
Hash identifier: M0me32VWIkqnuz7MBUnSl/7bq5vUN601Gcov3G32K2I=
Subject key identifier: ED:96:9F:0F:42:30:D1:B0:BE:BB:C4:92:3D:76:EE:F7:28:67:72:A2
Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
Certificate serial: 7C
Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
Signing time: Tue 20 Oct 2026 03:19:47 +0000
ROA not before: Tue 20 Oct 2026 03:19:47 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140959
IP address blocks: 151.158.191.0/24 maxlen: 24
151.158.191.4/32 maxlen: 32
151.158.191.100/32 maxlen: 32
151.158.191.101/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl
rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
Validity
Not Before: Oct 20 03:19:47 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ad6ddd3-3438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:a6:08:41:c1:bb:6f:6e:83:96:bc:0e:f6:
0f:a7:c0:8a:9b:81:35:09:fe:bb:60:d0:59:57:a4:
39:2e:78:e0:2e:07:7b:96:ea:42:3b:c1:05:e2:2f:
73:83:80:ca:62:66:bc:c2:13:ee:b9:8d:b1:3a:f2:
a1:c4:8d:27:53:98:01:dd:1f:12:94:75:9f:87:62:
5f:32:70:65:3b:b2:b4:cf:12:fe:1e:08:42:b5:d4:
bd:e1:3d:b4:00:e6:6b:52:52:8d:51:60:6b:cc:e2:
f2:31:f3:bd:e7:92:df:90:93:fa:b1:7b:b6:c6:53:
d6:ac:b1:a5:3b:11:4b:b5:d2:e4:10:e2:a6:98:de:
a8:f7:82:c7:ff:9d:97:df:4e:05:4d:a6:10:04:43:
58:6e:2a:7a:e4:01:73:9a:b5:b5:32:72:f9:85:fc:
8b:ba:f0:92:ee:71:4e:d2:ed:67:ae:11:9d:ca:78:
e7:15:44:48:64:d8:79:e1:c2:68:3f:63:d9:b5:36:
ae:cd:06:21:36:fa:de:e0:96:9a:34:7a:83:56:84:
f2:c2:a0:bc:c5:15:3c:0c:23:0d:b6:ce:27:af:9b:
50:eb:87:7f:69:73:b7:1a:95:f2:11:45:24:aa:15:
82:94:e7:6f:2b:7a:36:98:ab:19:9b:77:31:83:92:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:9F:0F:42:30:D1:B0:BE:BB:C4:92:3D:76:EE:F7:28:67:72:A2
X509v3 Authority Key Identifier:
keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.191.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8e:fa:27:cf:e3:19:4d:11:8e:4e:56:05:14:4e:a3:69:f1:
29:e0:94:8b:32:dd:e9:b8:66:1d:71:4d:9d:d5:57:a8:16:fa:
d6:aa:f1:b4:6b:21:b8:d7:82:c4:df:59:38:96:76:5e:aa:95:
5e:75:02:1a:c1:83:ed:9c:dd:36:7e:15:24:5b:7b:17:a8:63:
17:1e:c1:21:ba:d5:e2:a9:00:53:9b:6b:71:93:87:f0:df:8d:
ac:bf:5b:28:d6:49:9b:53:d7:13:88:1f:35:44:e7:ab:bc:1a:
ba:e8:5d:f2:2b:b4:79:d1:a9:6c:5c:b7:dd:ec:41:56:3b:c6:
a0:cc:b9:b3:42:d7:73:02:f5:a8:a8:b7:21:0a:d5:6e:a5:8c:
7e:fa:89:f2:3b:40:c7:2e:66:74:ea:28:66:42:13:47:75:a4:
e9:8b:fe:2f:7c:6e:3d:93:22:2f:74:56:38:f7:6f:53:15:3b:
79:dc:92:67:66:fe:9e:aa:e8:9a:68:66:a8:61:3c:21:a6:63:
dc:c1:a6:4d:b2:2a:9c:a8:b7:b4:53:17:5e:c5:30:2b:8c:75:
37:ed:e1:69:2d:79:31:db:79:be:db:3e:c7:59:a1:17:b2:75:
69:88:28:90:25:3d:3c:d4:b7:c9:a4:af:12:d6:f8:f2:ce:20:
1c:79:8e:cc
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE
OTlDOUExMTAeFw0yNjEwMjAwMzE5NDdaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhZDZkZGQzLTM0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVxqYIQcG7b26DlrwO9g+nwIqbgTUJ/rtg0FlXpDkueOAuB3uW6kI7wQXiL3OD
gMpiZrzCE+65jbE68qHEjSdTmAHdHxKUdZ+HYl8ycGU7srTPEv4eCEK11L3hPbQA
5mtSUo1RYGvM4vIx873nkt+Qk/qxe7bGU9assaU7EUu10uQQ4qaY3qj3gsf/nZff
TgVNphAEQ1huKnrkAXOatbUycvmF/Iu68JLucU7S7WeuEZ3KeOcVREhk2Hnhwmg/
Y9m1Nq7NBiE2+t7glpo0eoNWhPLCoLzFFTwMIw22zievm1Drh39pc7calfIRRSSq
FYKU528rejaYqxmbdzGDkhmFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU7ZafD0Iw
0bC+u8SSPXbu9yhncqIwHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1
MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RTdDNS8zMzA3NDk0NjFCNTAxMUYxQkQ1QUQwRTgyNDNEOEM2Ny8wOEE0NkI2QTFC
NTExMUYxODI5M0RGMEIyNTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXnr8wDQYJKoZIhvcNAQELBQADggEBACWO+ifP4xlNEY5OVgUUTqNp
8SnglIsy3em4Zh1xTZ3VV6gW+taq8bRrIbjXgsTfWTiWdl6qlV51AhrBg+2c3TZ+
FSRbexeoYxcewSG61eKpAFOba3GTh/Dfjay/WyjWSZtT1xOIHzVE56u8GrroXfIr
tHnRqWxct93sQVY7xqDMubNC13MC9aiotyEK1W6ljH76ifI7QMcuZnTqKGZCE0d1
pOmL/i98bj2TIi90Vjj3b1MVO3nckmdm/p6q6JpoZqhhPCGmY9zBpk2yKpyot7RT
F17FMCuMdTft4WkteTHbeb7bPsdZoReydWmIKJAlPTzUt8mkrxLW+PLOIBx5jsw=
-----END CERTIFICATE-----
Generated at Fri Oct 23 10:42:39 2026 by rpki-client