
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/D386B66251D411F185203A1790833773.roa
File: D386B66251D411F185203A1790833773.roa (raw, json)
Hash identifier: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=
Subject key identifier: 21:5C:50:C0:3A:9F:4F:33:29:55:98:6D:6A:4F:2C:3B:27:2A:F3:85
Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial: 3F
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/D386B66251D411F185203A1790833773.roa
Signing time: Sun 17 May 2026 09:43:15 +0000
ROA not before: Sun 17 May 2026 09:43:15 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 58655
IP address blocks: 151.158.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Validity
Not Before: May 17 09:43:15 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a098db3-273b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:b4:59:00:d0:8c:df:e4:7b:a6:78:70:21:
bb:63:01:89:e0:ce:c2:3b:bb:03:bb:27:04:13:6b:
b7:9c:84:60:98:f0:b8:96:a7:e5:06:a1:95:da:39:
56:65:84:fb:ab:43:db:58:bb:33:17:eb:11:80:96:
e0:92:05:cc:b5:8d:f9:ad:2d:88:42:10:21:0b:ae:
45:eb:fd:62:15:3a:2a:2a:d8:33:10:e7:ef:5d:d5:
51:91:91:60:b5:39:9b:21:c7:02:6f:4d:1d:66:ab:
09:0e:e9:8c:9b:83:b6:5e:d7:bf:fb:63:f8:15:80:
09:74:9c:ed:e1:62:61:e8:d5:6d:8d:67:40:ca:08:
08:25:30:76:e9:6e:55:37:d6:01:a7:ea:a8:6b:c8:
f4:4b:7c:f2:ac:25:e2:69:16:8a:11:ce:ac:3e:2d:
dd:8b:69:7a:6b:b0:00:33:3e:03:d6:16:a1:08:ec:
d2:aa:af:df:9e:96:29:03:12:02:19:29:a2:f7:ba:
ca:28:44:ee:68:af:cc:7e:dc:8e:fd:9c:86:b4:61:
0e:0a:15:df:ca:d1:4b:df:d5:2d:49:6a:e0:56:a1:
89:f5:b6:62:d5:73:b7:e8:76:ad:b6:88:f1:0e:9a:
5e:64:d8:6e:81:aa:8f:47:57:f6:49:a6:ea:d0:ce:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5C:50:C0:3A:9F:4F:33:29:55:98:6D:6A:4F:2C:3B:27:2A:F3:85
X509v3 Authority Key Identifier:
keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/D386B66251D411F185203A1790833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.216.0/24
Signature Algorithm: sha256WithRSAEncryption
53:05:2f:ed:04:17:b2:54:65:04:bc:c4:f2:aa:84:f2:65:6d:
b9:2f:d6:17:0c:c2:76:78:4a:a8:c0:98:b2:6b:a2:f5:d8:e9:
fa:3b:69:33:70:29:bd:c4:3a:44:d5:57:67:60:50:dc:66:f6:
a1:cb:a2:72:31:db:99:d7:c9:e3:e3:4a:fd:09:23:77:93:11:
0d:48:b4:32:2a:07:13:51:b0:3d:0b:c1:58:06:26:0e:7b:ef:
7c:19:ea:f3:e5:d2:64:d4:0e:4e:9e:99:1a:67:17:40:bb:0e:
16:84:f0:fa:c6:25:66:09:f8:43:f8:c2:b8:3a:b9:df:15:d2:
5f:ea:d1:47:4b:6f:8b:fa:c6:92:71:9e:46:32:77:e3:0f:8f:
ea:5d:34:e4:c2:c4:a5:6e:f6:c0:26:a1:60:12:a3:62:71:7e:
d7:61:80:0a:6e:42:e9:c8:1e:bb:15:ea:c4:c1:62:70:6a:7f:
df:cc:9e:c9:19:a3:6c:e5:43:b5:59:98:15:c4:0c:d1:af:0f:
03:9a:e5:97:6c:59:11:7f:e1:86:99:d9:6e:ba:a8:8c:5b:3d:
29:52:2b:98:30:33:f9:36:9d:cb:7c:a1:68:61:93:32:9a:77:
fb:e0:2f:6e:45:d4:d8:04:95:d0:1e:01:cb:50:63:3a:4a:e1:
dc:f6:54:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:06:21 2026 by rpki-client