
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa
File: 8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa (raw, json)
Hash identifier: bftdBso1mml0Q1/+cWJpkSjMix1VwOHFqUWRrzEzQoc=
Subject key identifier: 41:0A:74:78:6B:AE:E7:D9:09:16:9A:4F:62:83:6A:67:C8:3B:88:61
Certificate issuer: /CN=A91FABEF/serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Certificate serial: 0188
Authority key identifier: 61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:51:10 +0000
ROA not before: Thu 23 Jan 2025 04:18:34 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137190
IP address blocks: 157.10.162.0/23 maxlen: 23
157.10.162.0/24 maxlen: 24
157.10.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FABEF, serialNumber=619040E835BAD3DCF5C201396D8571995A7ACC50
Validity
Not Before: Jan 23 04:18:34 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a5a3de-6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0c:bd:9d:cc:f1:0d:df:c8:da:0b:f0:5c:98:
4b:e5:0a:8b:08:1d:8e:82:f3:27:69:bc:ce:55:3e:
f4:61:3f:e1:f6:12:8a:68:36:59:d5:9b:24:8b:4a:
88:ba:3a:b8:71:46:59:0d:4e:2e:3e:d2:d0:f1:b4:
ce:f5:56:d7:17:79:b5:39:a1:a3:6e:2a:da:db:b3:
53:c2:ff:cb:37:15:19:9b:6b:5f:d2:f6:d0:b4:8f:
ba:60:ab:07:e1:a5:f1:dd:c7:e4:70:2f:f7:28:f5:
01:53:79:ce:4b:ba:f8:e0:4f:09:85:f3:0b:89:e3:
d4:9c:0d:43:7f:7d:d7:af:ab:9b:7a:a8:e7:62:0b:
a9:99:e1:54:54:22:26:4c:cc:b3:36:e6:6e:51:b4:
20:d8:d9:d7:3a:4b:3f:23:b7:fe:bd:a3:80:4e:63:
d3:51:be:f0:5c:52:69:78:35:77:13:3f:b1:75:15:
e1:69:dd:de:4c:c8:0e:5c:1c:30:02:bd:07:c8:37:
16:a2:21:26:af:f5:4a:40:db:a6:b7:86:ff:d4:54:
fd:1d:c3:b7:41:09:be:ee:e4:63:33:02:bb:0b:62:
07:97:f2:b5:be:1b:7e:cb:d8:b7:84:1a:0e:9d:91:
fc:bc:91:78:b4:1b:04:d9:fe:aa:8c:8d:69:56:57:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:74:78:6B:AE:E7:D9:09:16:9A:4F:62:83:6A:67:C8:3B:88:61
X509v3 Authority Key Identifier:
keyid:61:90:40:E8:35:BA:D3:DC:F5:C2:01:39:6D:85:71:99:5A:7A:CC:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/YZBA6DW609z1wgE5bYVxmVp6zFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YZBA6DW609z1wgE5bYVxmVp6zFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FABEF/C0764572CB1911EE815FAB68C4F9AE02/8045E9A4CEEC11EEAFFC5E36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:bf:af:11:f9:af:e4:06:65:31:22:52:4d:3b:0e:96:70:18:
f0:f1:48:c4:97:f4:72:0e:e1:ab:e1:c4:51:44:3c:c2:ba:da:
dd:60:df:2f:ce:bd:98:b4:bb:4a:18:03:35:6f:40:37:54:b3:
d2:43:b6:10:60:b9:83:77:e1:e0:da:30:16:05:b0:27:a2:02:
a3:46:8b:05:9d:7a:16:f5:db:c5:81:b7:65:5d:6c:4b:42:5b:
e4:df:fb:94:38:96:44:fd:60:d0:2e:76:2b:9f:25:77:ae:58:
fe:d6:98:ab:84:5f:42:fb:47:ca:19:d9:99:80:9e:f1:2f:aa:
25:04:9b:7e:1b:35:18:65:d8:95:41:eb:17:65:14:f5:dc:3b:
e7:e8:37:4a:dc:fb:d7:ba:8c:f3:ed:1f:84:7d:11:01:4f:79:
22:fb:b5:46:9d:87:27:d1:5a:eb:0e:76:b4:a0:9c:b9:e0:e4:
6d:45:c2:98:bd:dd:a3:2e:1c:be:01:c2:49:ab:e6:b3:93:a6:
d2:48:3b:bf:09:30:65:70:3a:b3:bf:91:a8:b1:67:0f:f2:d1:
81:c4:c7:d8:98:74:f6:00:91:b3:92:64:7e:31:75:07:82:03:
41:38:5c:c2:7c:75:61:79:c7:71:88:ad:9f:1f:c2:9b:e1:00:
77:f3:2a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:18 2026 by rpki-client