
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/56C9937C28C911F086331776C4F9AE02.roa
File: 56C9937C28C911F086331776C4F9AE02.roa (raw, json)
Hash identifier: hLHf0yHg07NxcBaia4emdp8wLJZ5yswiWeZpuukCb8M=
Subject key identifier: F7:54:FF:D2:55:95:09:74:4A:15:D5:B0:45:D3:1E:17:53:21:20:87
Certificate issuer: /CN=A91F3989/serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Certificate serial: 0173
Authority key identifier: 9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/56C9937C28C911F086331776C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:45:43 +0000
ROA not before: Sun 01 Mar 2026 06:24:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152605
IP address blocks: 157.10.6.0/24 maxlen: 24
157.10.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 03:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 371 (0x173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3989, serialNumber=9A47BF40BD4887E2241533279E7F1D7F2A5F6FBB
Validity
Not Before: Mar 1 06:24:13 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3eea7-6a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:2b:32:94:66:e3:78:f9:0e:d4:13:3f:31:
9f:b4:1e:84:bd:e0:c3:b7:1e:06:7b:71:48:79:7e:
71:22:c4:88:f7:37:fb:0a:9e:32:13:09:38:a1:5c:
ea:32:11:a7:59:fd:ae:60:8f:6d:44:a9:c2:1e:d6:
17:55:12:2c:60:bd:37:bb:fd:d0:49:de:66:14:b8:
54:86:1e:f2:6d:77:22:12:5b:2b:77:20:d5:aa:dd:
79:16:df:6e:86:7a:92:e1:43:75:45:24:b3:0a:ae:
e0:cb:83:2c:b0:02:57:ca:d7:36:69:b7:f8:11:63:
b9:89:bd:71:d6:aa:32:23:73:7f:72:3c:df:37:c0:
a0:6e:f8:31:9d:55:83:5d:50:b1:da:b7:da:13:56:
0a:eb:cd:5f:61:a7:0b:76:be:2f:99:80:bb:d4:bf:
dd:8d:9f:af:3c:a3:0d:5e:cf:82:10:20:e2:e0:bd:
47:fa:74:07:12:cf:7b:78:fd:ff:05:d0:24:3e:f0:
5d:44:a9:c5:94:d6:9d:39:11:b5:41:45:f4:b7:08:
b6:11:3f:07:e5:ef:c5:92:86:ae:a5:b2:c8:92:40:
89:03:18:b9:6c:02:2e:d1:58:b5:11:60:20:5c:43:
00:c1:08:24:96:5a:fd:24:fb:a3:68:84:2d:96:c5:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:FF:D2:55:95:09:74:4A:15:D5:B0:45:D3:1E:17:53:21:20:87
X509v3 Authority Key Identifier:
keyid:9A:47:BF:40:BD:48:87:E2:24:15:33:27:9E:7F:1D:7F:2A:5F:6F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/mke_QL1Ih-IkFTMnnn8dfypfb7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mke_QL1Ih-IkFTMnnn8dfypfb7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3161C37EECD011EE8A224D49C4F9AE02/56C9937C28C911F086331776C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:38:c2:e1:f5:a1:a6:c6:18:69:c8:19:4e:79:96:76:c3:9d:
61:e9:6d:24:6e:6c:03:35:98:94:81:58:9d:c7:80:dd:2a:69:
61:5e:02:75:24:80:df:13:b2:ff:e0:c3:e9:75:e9:4d:aa:84:
94:6e:8d:d5:e1:b6:dc:c1:0f:f6:c4:61:51:52:3f:60:73:25:
61:7c:a9:a6:29:dd:d7:38:18:81:73:bf:7c:0f:59:f8:7f:fe:
7d:fa:7e:b3:6f:23:ee:6f:47:95:9e:23:fa:28:52:39:02:55:
df:a8:1c:b2:8e:6e:c1:ee:dd:70:21:b5:19:00:e5:ac:61:ce:
66:2e:e6:30:12:20:de:fc:90:4d:33:b6:20:1c:26:03:c6:d9:
96:6e:2b:4a:44:f3:e7:d8:e4:56:d1:49:3a:89:48:ec:b2:c1:
85:95:c2:e2:6c:92:d7:ff:c7:4f:95:d7:47:39:fa:ef:11:ff:
94:3e:c6:b4:e7:55:3e:8e:a5:32:95:81:3f:e7:fd:17:24:af:
66:bb:1e:3c:7d:8a:e9:fe:eb:9f:02:b0:66:5a:24:f1:da:0a:
20:4f:d8:2b:27:e0:39:89:87:f1:18:f3:ba:5f:4a:f3:20:cf:
a7:4b:51:1d:8c:5e:48:5e:2d:1b:2c:a3:19:ab:1b:eb:b2:e3:
23:b6:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:26:34 2026 by rpki-client