
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/4B0168EC7FAF11F1A17F79617AA30FBC.roa
File: 4B0168EC7FAF11F1A17F79617AA30FBC.roa (raw, json)
Hash identifier: 0P0pS4UJ4YzyHW+VAlxnw88NQ6ONSb5oPJHZ3YNIn98=
Subject key identifier: 16:7F:10:51:86:03:90:F7:D3:6A:3D:20:13:79:F6:73:86:19:4C:F8
Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial: 086B
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/4B0168EC7FAF11F1A17F79617AA30FBC.roa
Signing time: Tue 14 Jul 2026 18:10:28 +0000
ROA not before: Tue 14 Jul 2026 18:10:28 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154324
IP address blocks: 14.207.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:43:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2155 (0x86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Validity
Not Before: Jul 14 18:10:28 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a567b94-c2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:49:a6:3d:bd:5b:fd:7e:95:2b:4f:7b:fe:
fb:7e:2b:7d:99:71:de:a4:2d:66:cb:e3:e4:04:21:
65:96:cf:1b:21:6a:e7:f5:38:1b:2d:d8:83:2f:8b:
19:ad:97:f4:57:08:67:6b:ab:02:16:f0:12:39:ca:
45:53:af:8d:fa:cb:b3:e7:e8:85:26:07:da:bd:35:
ed:58:2e:0f:a3:61:f4:b8:84:98:f7:48:73:67:8d:
b0:4e:c0:4e:2d:6f:6c:73:b7:fd:eb:fc:34:f7:a2:
a6:8b:c6:a8:dd:fe:73:a6:5a:ad:00:4e:cb:92:d1:
ca:5b:e7:57:b1:eb:3d:84:4b:22:a8:ac:ea:88:af:
8f:2a:48:16:9b:7b:32:18:14:09:9d:83:df:04:88:
c1:ea:ba:b6:0e:37:f5:93:85:2a:d3:e3:31:9d:25:
10:93:29:8a:6c:36:f1:e9:8d:f1:ce:c7:6a:10:f2:
4c:2e:0c:37:ea:80:65:a6:50:92:c9:f6:d1:34:b6:
b5:2d:29:b1:81:c0:9f:d3:1d:0b:79:73:09:d7:3b:
29:cf:79:cf:94:69:90:9e:20:be:92:50:be:78:be:
e4:68:84:73:b1:99:03:08:94:9e:9b:bd:6c:fd:2a:
0b:ec:a0:d9:53:f9:21:59:71:39:19:7c:dc:68:d8:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:10:51:86:03:90:F7:D3:6A:3D:20:13:79:F6:73:86:19:4C:F8
X509v3 Authority Key Identifier:
keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/4B0168EC7FAF11F1A17F79617AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.207.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ef:af:7e:64:3c:94:75:a9:9a:e8:45:f4:74:4c:4d:d4:74:
14:c3:12:ae:b0:3b:6f:75:a6:19:89:fd:f1:ef:61:26:22:74:
b7:a0:f9:3c:c9:45:10:a6:37:4b:de:2a:2b:28:83:4f:06:b1:
07:e0:48:6c:81:54:0e:72:e8:92:b2:b2:24:60:a4:ef:eb:08:
25:a3:f6:36:71:4e:e9:4d:20:53:7d:ec:e1:a9:57:49:2c:38:
ab:3b:b2:cc:fd:60:48:78:44:f1:45:b4:0b:97:4b:6d:ac:c2:
4a:7a:25:be:a0:6b:86:d7:2b:26:84:1b:01:99:f5:fc:8d:1c:
60:77:c5:41:7a:48:6e:21:9b:08:9c:5a:64:cc:d5:42:fe:0e:
f8:d9:40:35:26:0d:c1:92:7f:ae:06:9e:30:f2:5a:4d:51:39:
c6:f4:4a:72:2c:05:8e:b2:81:cf:d4:21:99:b0:19:51:47:32:
bc:6e:a2:22:33:83:37:2b:91:c6:9f:4b:13:c9:dd:26:ed:90:
5b:26:02:f0:a4:e1:80:8a:fc:f1:8d:08:61:96:11:39:ae:e4:
1f:dc:71:ea:49:3f:2a:4e:c8:cd:5e:c5:bc:7f:eb:2f:06:b2:
5c:08:57:f2:23:7a:82:b1:a1:29:67:1f:60:f6:fd:cd:5a:9f:
50:4e:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:52 2026 by rpki-client