
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa
File: 6241069011E111EFBBB70B32C4F9AE02.roa (raw, json)
Hash identifier: SoGKG5lRlJDmBi3+hkgBMlRuJcm8XEuk0vZ81unwhDg=
Subject key identifier: 8B:4F:DC:24:21:6F:A5:DD:C2:A0:0F:3A:A9:7F:B2:60:B2:A3:4F:F1
Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial: 019B
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:08:56 +0000
ROA not before: Thu 13 Feb 2025 07:08:09 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 152339
IP address blocks: 157.10.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Validity
Not Before: Feb 13 07:08:09 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a599f8-82bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:2a:6e:be:31:d0:dc:70:6b:d6:2b:76:6d:
c9:58:30:1c:33:8a:7e:b8:38:9e:f0:11:73:c2:68:
a2:64:b4:47:16:0f:55:0d:89:60:56:dc:4c:b0:ec:
13:e1:df:1b:16:34:92:3a:f7:1e:b9:5b:ab:5d:e0:
27:4f:7b:08:5e:31:58:75:b4:97:aa:5f:82:4e:cc:
90:9a:93:4d:bf:f4:a7:1b:3b:6b:0c:b4:fe:80:2f:
9d:33:1e:aa:5a:36:71:57:14:28:dd:3d:33:7c:dc:
58:29:29:48:91:de:b4:cf:de:cd:5e:0b:55:34:d9:
06:19:b3:7f:fa:a0:00:7f:6b:a0:18:97:17:90:17:
4f:16:3b:8c:d8:a1:1f:d2:cb:43:0a:57:05:ec:ab:
70:f9:25:f2:05:bc:e3:4f:88:20:28:e3:9d:d5:5d:
fe:9d:25:27:58:1d:cd:27:9b:aa:bf:ca:57:1f:2e:
31:2d:53:02:06:ec:8e:86:c0:d8:53:0b:d1:29:fd:
70:61:a0:74:c4:95:1b:0c:08:0e:40:c7:15:99:7c:
80:f2:74:93:91:45:8e:5c:c9:3c:75:79:34:7f:86:
bb:ac:49:af:b5:c5:09:38:36:29:7e:c1:99:60:ce:
53:4f:9d:7f:df:40:7a:be:48:b3:e4:29:e4:ed:7c:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4F:DC:24:21:6F:A5:DD:C2:A0:0F:3A:A9:7F:B2:60:B2:A3:4F:F1
X509v3 Authority Key Identifier:
keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:46:8e:4e:76:6d:be:75:fe:97:3f:4b:f5:66:26:1d:2d:a1:
c2:06:0c:32:57:6f:f6:51:c9:c8:c8:47:17:f4:51:c8:ed:a8:
f7:1b:93:22:d1:0a:9e:cd:59:94:d3:f4:57:a7:32:f3:26:3b:
6b:8c:f6:eb:26:cf:b7:f2:3e:52:98:66:79:2f:08:4b:2e:f3:
02:e4:f1:b3:fb:71:1e:bd:63:dd:d1:0c:23:b2:62:b4:a1:52:
9c:35:75:9c:9b:5d:9c:7f:4a:7b:83:df:90:72:2b:d6:77:d4:
59:54:21:6d:45:7b:8f:ef:ea:ca:1f:6b:a1:8c:b5:a3:7a:b1:
16:9d:65:7d:d7:6e:4a:39:73:c9:c2:1a:53:80:70:a5:10:16:
8f:de:27:33:a9:2f:64:c3:47:59:95:d8:83:60:d6:9a:4a:0b:
7a:37:73:4f:07:ed:e7:04:a2:83:05:8f:d5:23:a4:f8:23:66:
46:ca:a6:88:3b:6d:bf:b0:aa:2b:95:7c:b6:04:d5:76:f5:65:
29:8d:8e:01:eb:e0:c1:de:0c:4f:21:d0:ff:4e:fa:18:e9:7a:
92:5d:e8:15:53:43:ff:4e:18:02:88:42:1b:0f:3c:27:07:65:
32:a2:c0:85:0e:76:a3:63:2f:f5:37:40:ac:e2:1a:9e:ae:6d:
be:14:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:18 2026 by rpki-client