
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/097C10E4F92B11F090A6283D396F56BC.roa
File: 097C10E4F92B11F090A6283D396F56BC.roa (raw, json)
Hash identifier: WvPz4TjN9G7hZe9oGin0ZXtjETCsaK24q7BQUFzt1Xg=
Subject key identifier: 95:78:7E:4F:57:FE:02:E9:EE:ED:7C:21:A8:FD:39:4B:41:0D:E8:4B
Certificate issuer: /CN=A91CCB81/serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Certificate serial: 21
Authority key identifier: F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/097C10E4F92B11F090A6283D396F56BC.roa
Signing time: Mon 02 Mar 2026 13:56:19 +0000
ROA not before: Sat 24 Jan 2026 13:46:09 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138926
IP address blocks: 151.158.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 07:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCB81, serialNumber=F0D71120A92A858DB729496FCCBF1825C9F03C63
Validity
Not Before: Jan 24 13:46:09 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a59703-8585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:d5:3c:a2:0a:6d:29:a9:b3:b0:c6:e0:ec:
10:f1:72:bd:bb:44:a4:c0:7d:de:3f:a1:4c:9b:df:
9d:27:0a:36:7b:83:e5:dd:c5:42:d5:b2:5e:d0:8b:
c1:9b:8b:c2:c7:91:f2:22:4d:2c:ed:fb:62:f4:4f:
3a:89:e8:18:14:7c:ad:bf:d7:45:dd:0e:20:56:c2:
63:ed:c6:c1:02:e7:0b:6f:02:12:60:89:d0:cc:5b:
8f:09:30:31:bd:a2:14:c3:bd:e6:7a:5c:ef:79:a0:
00:be:9f:66:62:f2:4d:b3:18:b5:10:97:74:b4:61:
12:0f:66:37:f4:70:f2:be:c8:4e:00:03:37:a9:76:
a2:a1:56:17:01:c0:3e:f6:18:e8:1d:d3:c7:31:aa:
7a:98:9a:66:56:ae:21:aa:ee:bb:bc:7d:db:76:2b:
0f:fc:3f:d5:bc:2f:e2:89:fd:14:95:36:58:03:80:
fc:6c:52:60:e0:df:b5:29:7e:e8:43:01:71:9b:f0:
22:66:ea:df:30:e7:b9:74:a5:f6:6a:3a:b4:a2:93:
22:67:2d:51:36:6c:c8:f0:12:5d:81:8d:ea:98:ec:
b3:eb:70:c7:f9:81:21:3d:be:e9:ed:30:20:c8:8a:
fb:69:77:d7:8e:05:49:9f:00:23:a9:6d:c6:6d:d0:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:7E:4F:57:FE:02:E9:EE:ED:7C:21:A8:FD:39:4B:41:0D:E8:4B
X509v3 Authority Key Identifier:
keyid:F0:D7:11:20:A9:2A:85:8D:B7:29:49:6F:CC:BF:18:25:C9:F0:3C:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/8NcRIKkqhY23KUlvzL8YJcnwPGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/8NcRIKkqhY23KUlvzL8YJcnwPGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCB81/41FDD388F86A11F0B4BBAF3C4A6F56BC/097C10E4F92B11F090A6283D396F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b7:fc:24:04:4e:0a:77:65:d3:1e:f1:2c:a3:d7:9b:cb:aa:
2e:16:15:75:4c:8d:56:5b:2c:1e:77:6f:08:40:9d:eb:5c:87:
3a:39:bc:45:88:5f:1c:cb:6e:b7:81:bb:6e:b5:88:28:c6:04:
a7:28:74:e8:c0:f8:79:0b:79:0f:09:85:45:a0:5a:12:9c:f1:
5b:2a:61:a7:29:33:26:d5:27:94:bd:02:d3:1c:01:3e:45:44:
64:c3:19:0d:f1:ca:2c:e0:e2:54:4e:29:99:e0:15:e7:f8:ee:
b5:f0:0b:5c:4a:cb:9f:03:47:ff:a7:3f:40:78:f7:fd:84:71:
80:58:6f:77:cd:0b:5d:39:d1:8a:ca:c8:f7:47:d0:58:7b:02:
04:98:19:3c:a0:b4:16:bb:0c:48:4b:28:44:36:64:bb:eb:9a:
5b:41:70:99:3d:36:ab:15:5d:f8:3c:c5:d3:f9:89:88:0b:bc:
2e:5a:4d:fd:5a:e7:6d:c5:08:83:06:4f:79:e6:81:9f:c0:77:
ab:50:89:b9:07:20:af:f5:15:b4:ae:ad:2f:3f:73:56:79:5a:
e6:e6:69:9e:ae:bf:1e:a4:c1:48:53:91:ab:66:7b:b0:7c:51:
a9:88:d4:36:79:68:19:16:f2:ae:a9:7f:30:20:ab:6a:8e:96:
e1:f7:5b:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 14 09:00:43 2026 by rpki-client