
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/675CAE1C097B11F089FAE77FC4F9AE02.roa
File: 675CAE1C097B11F089FAE77FC4F9AE02.roa (raw, json)
Hash identifier: UQkvKEtmPCHJz+Q8ZNQvg67RXBCPC2Ebr74K46kUePA=
Subject key identifier: 7F:A8:C4:AE:E4:24:20:67:A0:FA:07:CB:25:DF:AE:9B:D1:1D:44:A5
Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Certificate serial: 018A
Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/675CAE1C097B11F089FAE77FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:36:17 +0000
ROA not before: Tue 13 May 2025 04:56:17 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152474
IP address blocks: 157.15.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394 (0x18a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Validity
Not Before: May 13 04:56:17 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a59251-bf26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:61:7b:f1:ed:59:6e:f4:26:69:52:a8:52:
1a:ae:5b:de:48:d3:4b:7d:89:df:c0:38:ca:9c:79:
dc:e1:7a:1e:74:04:e8:9b:5f:b8:db:9e:ca:79:8d:
fe:8a:9b:d8:44:c4:56:0f:86:4b:61:29:25:71:67:
fe:fe:4e:8a:65:39:c7:a7:c0:65:ab:7a:f9:9d:a4:
fe:16:e2:a8:b4:bc:4d:dc:48:6e:e7:45:4c:a9:69:
8a:cc:ea:4c:62:71:7a:0a:f0:c2:6b:f1:31:21:d1:
7b:32:46:59:86:79:1d:73:ae:a6:04:bb:2d:9f:5e:
1c:26:eb:1d:2b:cd:32:21:80:77:0b:6d:39:25:c7:
3c:7e:42:db:c2:d5:2c:8d:bf:01:48:94:b4:79:76:
74:26:0d:9d:87:e9:f7:0e:43:ba:d7:ca:2a:af:ec:
b9:a5:03:4e:2d:fd:7c:66:ed:0f:8a:01:b5:28:33:
63:a1:18:6a:98:83:e9:0a:42:87:07:5e:44:61:6c:
6f:4d:95:3e:13:e5:e3:8e:ec:c6:df:87:f7:38:9f:
fc:bd:12:bc:36:aa:91:8e:c8:f2:e1:7b:2e:5c:06:
cf:94:94:6d:3f:f1:c6:71:58:bf:db:82:ef:79:81:
42:a7:16:b9:6f:3f:7e:9c:b7:d6:0e:a3:02:cc:65:
ca:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A8:C4:AE:E4:24:20:67:A0:FA:07:CB:25:DF:AE:9B:D1:1D:44:A5
X509v3 Authority Key Identifier:
keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/675CAE1C097B11F089FAE77FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0d:34:e3:02:34:2b:64:14:44:f5:91:63:b4:58:41:af:2d:
b0:76:78:7d:c6:3a:6e:be:4d:7a:ad:5e:ab:aa:2e:22:e5:4a:
2b:52:3f:e1:19:2e:79:4f:7d:54:3c:ea:0a:d6:a4:08:bd:f2:
8f:02:99:97:02:17:c4:1a:99:fd:03:a1:c4:0d:44:65:82:39:
12:f3:d1:96:29:63:f5:d5:50:4a:38:29:d0:72:73:8e:3e:8a:
fe:e0:3c:f3:6e:c1:6b:c8:f5:19:7e:6d:04:c5:aa:fe:6f:bd:
0b:5b:70:aa:f4:0f:d5:5d:0f:06:93:19:08:93:55:a2:e4:ae:
42:5d:93:8b:da:92:45:d3:38:0f:b2:4d:b9:8d:fc:20:ca:dd:
d5:ce:dc:4b:ee:ab:49:cb:79:d8:77:c7:13:b0:f2:51:c9:af:
13:dc:67:4d:0f:38:d0:f7:e5:f1:39:6c:ec:24:b7:b0:32:aa:
f8:31:fb:a0:1f:e4:f3:5b:47:6c:a4:0b:4d:b6:9c:76:b7:c3:
36:9f:a1:2f:fd:6d:60:9d:38:18:6d:5e:6f:69:16:fc:a3:38:
04:f9:43:3e:c8:b3:45:5e:5e:81:bf:8c:d5:42:2d:20:db:f6:
4f:da:f2:f5:dc:24:73:d6:09:e2:70:ef:57:a3:64:4b:43:31:
29:a9:8f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:03 2026 by rpki-client