
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
File: A2516E42DE4511EF8C37E320C4F9AE02.roa (raw, json)
Hash identifier: xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=
Subject key identifier: 4F:0C:96:1A:B5:0B:FD:29:29:26:82:4A:D2:EF:B9:B6:FE:AE:34:F6
Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial: 01C8
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:07:24 +0000
ROA not before: Fri 27 Feb 2026 04:23:21 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 152462
IP address blocks: 157.15.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Validity
Not Before: Feb 27 04:23:21 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43a0c-2fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:b0:23:3f:2c:db:b6:8c:4a:b8:3c:f1:53:
60:cf:09:97:c6:a7:38:c6:8a:a4:74:4c:2a:5e:aa:
9e:c2:9e:33:8a:30:8f:a1:21:40:7a:be:7f:26:04:
ad:54:00:0e:2c:f4:4b:ee:ee:67:54:3a:ff:97:83:
d9:b9:d9:b9:e0:eb:d5:ea:62:36:6f:4f:37:e6:16:
43:02:08:b4:c4:27:3f:a5:15:d4:cd:00:ef:41:ae:
3b:a7:5e:cf:ee:76:18:b2:bc:f8:aa:e2:47:bb:97:
a1:f5:8e:f6:4a:0a:27:5b:8a:74:55:ad:35:86:f2:
9d:69:7d:4e:2c:89:bb:95:cc:81:d5:eb:80:ce:f2:
e2:24:20:43:67:b0:f0:9a:be:8f:64:d5:9d:76:6d:
65:14:49:04:20:61:66:ff:72:be:94:7a:fb:29:89:
8d:2a:d3:a2:3b:3c:a7:8a:be:01:32:ea:0c:5c:20:
cc:a6:f4:17:d1:ef:94:4a:a5:a3:e1:72:3f:2a:d1:
4d:df:cc:5f:22:f1:c9:01:14:b5:52:3f:54:c7:10:
db:8f:2a:05:60:8b:a2:f2:a2:0d:1c:98:00:60:8a:
4e:0e:90:7c:4c:d2:45:3a:eb:23:d7:da:e1:31:c5:
a3:41:16:89:00:1d:2d:a0:b5:7d:e5:3a:8b:70:a4:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0C:96:1A:B5:0B:FD:29:29:26:82:4A:D2:EF:B9:B6:FE:AE:34:F6
X509v3 Authority Key Identifier:
keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:ef:fe:83:9a:9d:80:be:c1:3c:3b:aa:8c:88:de:ae:9c:
a3:c3:61:25:45:c4:61:56:6b:a4:f1:d6:ff:ce:6e:32:5d:4a:
a4:d6:c7:a5:d7:24:3a:1b:f7:18:38:20:96:ec:6a:8e:87:67:
d8:45:42:16:3d:8c:f5:a5:79:a3:f4:15:89:de:ea:f7:10:31:
24:47:d2:27:9b:ca:4b:22:1e:f4:33:c4:f2:d1:ee:e0:a2:73:
3f:25:dc:d8:fe:7a:05:26:5d:45:28:31:d7:84:49:a2:46:d0:
0f:07:38:dc:5d:25:d1:83:82:2e:c1:93:6b:a2:29:79:0c:40:
eb:36:ce:01:e1:23:27:16:7a:e4:63:b0:71:37:20:c0:6d:87:
2c:71:11:35:9b:45:78:3e:5b:e1:02:9b:a2:5c:26:cf:f3:3c:
3f:e5:b0:19:02:56:99:f0:3e:c9:94:f9:e3:1e:cf:40:a5:ed:
e2:42:40:4e:ba:c6:a8:0c:32:6f:90:36:f8:a7:df:2d:d3:52:
24:b2:53:dd:ef:d4:5e:22:f4:5b:86:00:8e:76:42:24:cd:ef:
dc:a7:a4:bf:34:c3:a3:f7:6c:05:a4:bc:b8:86:db:40:06:a4:
53:f1:58:86:85:9f:f2:08:54:7e:aa:41:1d:0f:7a:64:b3:d7:
90:b6:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:30:27 2026 by rpki-client