
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/93F271D679C411F1B75D87215DA30FBC.roa
File: 93F271D679C411F1B75D87215DA30FBC.roa (raw, json)
Hash identifier: Smlpwn7aPLtcnYyZN/TcW/e1arUdtZG3ICvfzvKQ7yk=
Subject key identifier: 56:94:93:9B:59:0D:B0:06:4B:44:97:6C:A0:5A:CE:1A:7A:05:E6:CE
Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial: 61
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/93F271D679C411F1B75D87215DA30FBC.roa
Signing time: Tue 07 Jul 2026 05:27:43 +0000
ROA not before: Tue 07 Jul 2026 05:27:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 152176
IP address blocks: 151.158.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 09:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Validity
Not Before: Jul 7 05:27:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a4c8e4f-bb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:db:94:53:89:88:c5:ca:b0:b1:b2:c1:1f:
58:3f:09:77:18:7a:14:bb:62:9d:8a:06:9d:ef:e5:
3f:8f:8c:e6:9b:d8:cf:0e:ca:8d:0b:03:6e:fd:23:
bc:40:c0:a8:99:9f:f7:05:fd:00:ef:11:51:50:a2:
44:71:52:35:47:16:82:48:91:b6:f9:c0:24:c2:66:
d3:d6:1c:d6:0d:c5:ec:72:aa:f1:2a:44:a4:f4:bf:
28:0f:e9:fe:35:c8:c7:85:2c:95:37:9f:18:0a:d4:
82:7f:fe:53:15:fc:ad:51:77:86:2b:40:a6:59:40:
79:9e:89:54:47:aa:1c:7f:a3:a6:85:3b:2e:9f:32:
9a:d2:7d:9f:b7:20:cf:bf:0f:86:d0:76:4c:a9:c7:
6e:a8:49:49:b7:32:83:7d:b7:89:93:1d:35:a5:2a:
1f:76:73:9b:db:ce:f3:3f:1e:e0:cc:31:3b:09:c1:
24:0e:ef:c9:9d:f3:2c:b3:53:55:e5:af:7b:ca:74:
83:52:fa:88:8b:ec:06:7d:8f:a9:33:99:a9:89:31:
bc:09:91:5d:7c:82:17:5d:db:26:9f:71:61:d8:d3:
9b:12:23:14:7f:8d:56:cf:cc:af:b6:49:a0:9b:ed:
92:a3:23:68:54:16:27:3d:46:17:fc:19:20:11:46:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:94:93:9B:59:0D:B0:06:4B:44:97:6C:A0:5A:CE:1A:7A:05:E6:CE
X509v3 Authority Key Identifier:
keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/93F271D679C411F1B75D87215DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.217.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e3:01:0f:d1:63:af:86:81:21:8e:6d:aa:be:36:99:5b:80:
35:07:5b:6b:4b:7d:84:cf:1d:d3:e0:09:f2:c1:a5:1e:af:5a:
56:9d:be:72:3c:68:fb:34:dc:ee:f0:8a:d3:2b:1c:bb:7d:90:
cc:9f:72:d5:14:9a:a2:e0:d8:59:e6:3e:85:35:38:67:54:c8:
1e:45:9f:40:06:22:28:b0:df:86:27:6e:54:cc:78:8d:08:ec:
e7:3a:27:42:b4:fa:9b:7e:ed:ec:42:5b:ed:79:1e:4d:94:4e:
79:cd:75:5b:d1:3d:47:85:02:32:73:95:98:47:b8:43:32:02:
3a:bd:ac:41:9d:e7:67:6b:58:c4:bc:57:fa:ed:98:2b:0e:70:
c4:a1:a9:9d:e9:57:a1:6e:45:6f:a6:60:3a:d1:25:f2:0b:c3:
d4:db:f0:39:ec:3c:29:b0:65:fa:0d:a8:46:a3:2e:bf:e6:37:
c4:68:05:d2:ee:b0:d2:ae:ba:7e:0b:82:07:81:dd:3a:a0:1d:
0f:6a:9d:ea:bd:b7:22:1e:43:b8:52:76:20:30:de:8d:7f:d9:
76:44:45:f8:da:0f:19:40:40:50:93:76:a1:ad:68:3b:2c:ea:
5b:80:2b:bd:1a:ee:2f:4a:c0:75:8c:5b:30:98:86:65:a6:51:
1d:11:22:2f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBYTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODE1NzExMC8GA1UEBRMoOTFEQTNBMTc2MzdDRDI5MkNFQTQ2NzBERDEzQTcyRDg2
RUFBMkQ5MTAeFw0yNjA3MDcwNTI3NDNaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNGM4ZTRmLWJiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCq6tuUU4mIxcqwsbLBH1g/CXcYehS7Yp2KBp3v5T+PjOab2M8Oyo0LA279I7xA
wKiZn/cF/QDvEVFQokRxUjVHFoJIkbb5wCTCZtPWHNYNxexyqvEqRKT0vygP6f41
yMeFLJU3nxgK1IJ//lMV/K1Rd4YrQKZZQHmeiVRHqhx/o6aFOy6fMprSfZ+3IM+/
D4bQdkypx26oSUm3MoN9t4mTHTWlKh92c5vbzvM/HuDMMTsJwSQO78md8yyzU1Xl
r3vKdINS+oiL7AZ9j6kzmamJMbwJkV18ghdd2yafcWHY05sSIxR/jVbPzK+2SaCb
7ZKjI2hUFic9Rhf8GSARRvyZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUVpSTm1kN
sAZLRJdsoFrOGnoF5s4wHwYDVR0jBBgwFoAUkdo6F2N80pLOpGcN0Tpy2G6qLZEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzI1MDgzOEFFMTE0
MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxa
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIva2RvNkYyTjgwcExPcEdjTjBUcHkyRzZxTFpFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
ODE1Ny8yNTA4MzhBRTExNDIxMUYxOUQzNzYyOEYyMTNEOEM2Ny85M0YyNzFENjc5
QzQxMUYxQjc1RDg3MjE1REEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXntkwDQYJKoZIhvcNAQELBQADggEBAIrjAQ/RY6+GgSGObaq+Nplb
gDUHW2tLfYTPHdPgCfLBpR6vWladvnI8aPs03O7witMrHLt9kMyfctUUmqLg2Fnm
PoU1OGdUyB5Fn0AGIiiw34YnblTMeI0I7Oc6J0K0+pt+7exCW+15Hk2UTnnNdVvR
PUeFAjJzlZhHuEMyAjq9rEGd52drWMS8V/rtmCsOcMShqZ3pV6FuRW+mYDrRJfIL
w9Tb8DnsPCmwZfoNqEajLr/mN8RoBdLusNKuun4LggeB3TqgHQ9qneq9tyIeQ7hS
diAw3o1/2XZERfjaDxlAQFCTdqGtaDss6luAK70a7i9KwHWMWzCYhmWmUR0RIi8=
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:09:09 2026 by rpki-client