
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/09E42D1E921B11EF829E0041C4F9AE02.roa
File: 09E42D1E921B11EF829E0041C4F9AE02.roa (raw, json)
Hash identifier: SDwSi/u1Twlfmf5SHraNC99SEJgc829wXFAGy78aUeI=
Subject key identifier: BA:B5:E7:06:16:E2:50:38:71:A9:F8:43:91:D6:70:41:40:36:F0:2D
Certificate issuer: /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial: 0191
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/09E42D1E921B11EF829E0041C4F9AE02.roa
Signing time: Tue 27 Jan 2026 03:23:09 +0000
ROA not before: Tue 27 Jan 2026 03:23:09 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152334
IP address blocks: 157.10.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Validity
Not Before: Jan 27 03:23:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69782f9d-2eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:da:d9:1c:e6:f9:4d:2f:a9:00:1a:e4:64:
43:be:04:06:e5:02:f5:5a:3e:d3:ce:8e:dc:36:26:
38:85:2e:27:1a:09:5d:23:9d:63:00:d7:c6:de:b7:
e0:11:21:a5:93:7a:12:68:6f:64:ec:f8:90:1e:11:
bd:14:19:30:89:35:52:89:e2:87:98:c1:63:e6:63:
88:ad:aa:a3:2d:e0:82:fb:35:96:b5:68:33:00:ba:
3a:1c:e4:f2:0f:ae:32:f1:4c:fc:12:3e:3e:83:ed:
5e:ee:e1:ce:c3:b7:6c:af:27:fb:65:de:5a:07:db:
8a:14:9d:15:a6:89:24:aa:bb:2f:9a:33:c7:d3:7a:
33:27:4e:96:91:59:2b:30:2a:9a:1b:0f:3e:31:ae:
47:e1:fe:06:d6:48:74:f2:4e:eb:69:7c:9b:fe:8d:
9e:bd:07:b7:8e:11:e6:dc:d9:2c:a3:10:9d:55:56:
d1:e3:cb:ec:24:a9:dc:32:df:cb:7a:89:83:7a:00:
35:ef:87:22:f9:5f:94:62:eb:1b:ab:3a:84:fd:a4:
ca:cf:fb:87:f4:81:fd:d2:44:2d:99:58:4c:86:a3:
96:75:18:8b:69:2f:cd:84:72:06:26:10:a2:00:3b:
4f:35:fe:60:5b:62:71:ef:68:70:17:7e:e5:52:f0:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B5:E7:06:16:E2:50:38:71:A9:F8:43:91:D6:70:41:40:36:F0:2D
X509v3 Authority Key Identifier:
keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/09E42D1E921B11EF829E0041C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.10.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8b:f4:76:22:a6:be:56:99:0f:c3:5a:66:17:0f:c0:c9:9e:
26:42:69:be:7b:30:8e:e8:ce:86:99:77:40:c0:7a:93:ee:9c:
cc:ad:dd:ea:06:eb:46:3e:af:9c:c6:eb:4a:fb:f2:48:25:0c:
13:4e:e1:8e:e7:f6:5b:09:ff:fe:ca:80:44:e8:76:e0:91:da:
61:3b:cd:e3:8f:99:c4:e3:6e:d8:46:be:6a:58:51:e4:58:ea:
a2:a8:86:50:9a:7f:0d:8f:38:20:45:9f:bf:c7:f9:13:55:9b:
6c:a5:72:2c:88:eb:e5:5c:0a:a0:de:fa:14:98:a6:5a:3e:ff:
48:d9:00:41:af:fd:e8:42:32:c4:0e:a5:8d:4c:60:c9:5e:b6:
4e:27:67:2d:29:12:7c:83:e7:9d:f5:7c:64:8f:82:9c:bf:86:
d3:da:d5:3a:8e:aa:85:a3:0b:6d:3c:10:34:ae:11:3f:21:b4:
9e:e3:49:d4:52:ce:61:b3:86:79:10:81:69:ee:52:bd:3c:68:
19:ee:1e:83:aa:58:26:ae:58:24:27:0b:97:b5:38:19:2f:b4:
8c:c3:11:5e:47:8f:5d:05:27:b7:58:75:7e:00:d7:ef:1a:11:
56:1e:4f:f3:69:26:b5:ce:5e:2c:ac:c2:40:ba:c4:06:94:83:
49:ac:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:30 2026 by rpki-client