
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/C19B197610BA11F1B3CC5F673F3D8C67.roa
File: C19B197610BA11F1B3CC5F673F3D8C67.roa (raw, json)
Hash identifier: zEwtakxDcwXpBW6tfp6qiEVzh9N2H4WhRhhG0wv9d54=
Subject key identifier: 53:69:EE:9A:E8:88:CB:38:02:61:B4:DB:A6:72:F1:8E:48:36:3B:8D
Certificate issuer: /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial: 0D
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/C19B197610BA11F1B3CC5F673F3D8C67.roa
Signing time: Mon 02 Mar 2026 15:12:02 +0000
ROA not before: Mon 23 Feb 2026 13:22:52 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135651
IP address blocks: 151.158.206.0/24 maxlen: 24
151.158.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Validity
Not Before: Feb 23 13:22:52 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a5a8c2-a031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:fe:25:b3:9d:13:d9:84:7d:51:b4:69:be:
78:93:0c:dc:ba:85:b1:86:44:ac:90:ae:8c:98:99:
0a:44:09:a9:ca:72:29:0e:54:ef:6f:55:68:9f:85:
b7:ac:dc:b5:1b:33:db:2b:96:2f:e7:6a:ce:33:d5:
66:ee:95:e0:61:f0:1f:79:bd:56:e7:28:76:d1:06:
26:b6:d5:17:4a:ad:df:7f:1e:3f:cd:cf:90:2f:1b:
8d:88:74:24:d0:1a:b3:ee:84:b3:ba:08:e0:46:37:
d9:ec:e1:4e:1d:63:8f:d2:e0:d0:4e:86:54:ec:42:
22:37:d8:8c:8f:45:71:7b:e4:c5:f2:45:d2:74:31:
e7:b3:39:43:9a:4f:aa:86:59:d0:04:2e:c7:85:df:
15:68:4e:25:c6:46:dc:58:cb:da:72:d4:26:14:be:
b5:8e:83:83:ac:9b:79:01:46:5c:ae:09:e8:8f:c3:
c2:78:c6:96:0d:80:a4:c3:8c:76:d0:58:2f:3d:c4:
3d:85:52:19:73:d9:42:b0:15:19:0f:3c:b1:c5:4e:
31:41:f9:1f:fa:e4:db:6c:51:f1:c0:92:11:c9:16:
72:76:44:41:c4:7d:04:03:5f:06:49:43:1a:d6:13:
42:a5:5f:40:53:b1:08:78:63:0e:97:1d:c9:ce:eb:
d5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:69:EE:9A:E8:88:CB:38:02:61:B4:DB:A6:72:F1:8E:48:36:3B:8D
X509v3 Authority Key Identifier:
keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/C19B197610BA11F1B3CC5F673F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
151.158.206.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:0c:18:e5:a4:b1:a7:48:32:f6:33:02:b5:07:59:a1:d6:4f:
70:b0:76:8b:1b:09:de:4d:54:0d:17:4d:2f:8d:3b:62:aa:ff:
ab:be:1e:7b:9d:00:d7:b1:3f:78:0c:f8:a9:10:1a:16:c1:0e:
08:58:ce:5a:39:cf:18:32:a2:21:38:b9:06:29:5e:87:b1:04:
15:a6:00:c7:68:3e:f5:f6:85:e6:91:6c:44:f6:f3:fb:27:5f:
4a:d5:7a:f2:73:e7:49:fd:8a:44:99:72:0a:bc:c0:dc:fe:66:
61:d7:f9:74:a2:3d:9b:97:3b:e4:39:e9:1f:5e:c1:f1:f0:bf:
63:d3:2f:6c:c6:3c:c4:9f:7a:04:f9:14:fa:29:58:36:c0:8d:
bd:2b:eb:03:6f:da:4d:b4:10:e1:7b:8e:fe:86:04:f6:92:74:
5b:97:91:51:92:1a:e9:3e:2b:d7:7a:e1:d4:52:4b:4d:df:f0:
f4:a2:d7:c3:16:06:38:ec:1d:67:48:31:05:dd:8a:be:10:89:
81:b6:aa:f4:44:f1:75:91:26:52:5e:c2:50:b2:8f:19:a6:f2:
e9:8f:b2:e3:03:36:f7:44:e2:28:1f:0d:d8:1a:95:2a:f9:c3:
a7:1c:23:b0:ed:0c:01:93:0d:fd:ce:b1:65:ca:6e:05:94:92:
a5:9e:95:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:06:58 2026 by rpki-client