
$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/D5A3117E85DF11EFA2C33754C4F9AE02.roa
File: D5A3117E85DF11EFA2C33754C4F9AE02.roa (raw, json)
Hash identifier: i2D61RcLKQP58CDCbPDGvuB2d5cTYj011lg/w0u6Ink=
Subject key identifier: 11:8C:8B:52:25:92:0B:4C:15:79:F3:D8:2D:C9:BF:2A:43:E9:CE:15
Certificate issuer: /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial: 0113
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/D5A3117E85DF11EFA2C33754C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:44:52 +0000
ROA not before: Wed 13 Aug 2025 07:16:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153183
IP address blocks: 160.30.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Validity
Not Before: Aug 13 07:16:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a264-2421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:24:9b:8a:d8:c9:53:d2:78:23:6d:86:2f:
2a:b0:b1:e2:ea:7a:51:f6:8b:08:7a:5e:e5:13:35:
40:ae:2d:94:20:d8:64:bb:59:b0:ba:8b:69:b9:dd:
e0:16:2a:21:4e:94:95:08:c3:ba:0f:e4:22:02:fd:
af:6d:c3:26:d7:24:be:bf:5d:e4:f5:4f:41:a3:95:
ba:88:c7:95:7d:3a:40:ac:03:fd:49:c4:15:ea:e7:
89:86:1c:5b:5b:41:7b:2d:19:d3:55:52:29:15:07:
da:ca:01:c3:3c:aa:83:e3:27:7f:81:bc:33:2b:ba:
a7:87:9c:da:a0:f5:51:44:b3:a9:c1:eb:1a:8b:27:
1e:22:c6:1c:e8:2b:1b:5b:e8:b4:ab:5e:2e:1d:81:
c8:da:8e:7e:4e:aa:f1:1c:0f:c5:fa:81:43:09:62:
d4:e8:35:de:f2:3d:a9:95:10:ae:d9:f1:3c:b9:a7:
bf:cc:34:00:96:c7:ab:4d:39:16:54:99:11:a3:27:
f8:2f:05:99:0b:d2:81:c7:f0:c9:c6:17:d1:4c:13:
a9:e9:3b:c6:6d:e1:7c:b2:93:8a:c3:ad:9c:a5:ce:
b4:a9:72:12:96:e9:50:0e:1d:1b:76:68:88:94:ac:
d6:57:28:da:b1:d2:71:c9:f0:49:4e:c1:36:66:6c:
08:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8C:8B:52:25:92:0B:4C:15:79:F3:D8:2D:C9:BF:2A:43:E9:CE:15
X509v3 Authority Key Identifier:
keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/D5A3117E85DF11EFA2C33754C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:18:bf:48:9e:44:c9:c1:87:bb:d8:d2:47:7a:83:c4:a5:68:
b7:a1:d5:9b:bf:c0:31:34:d4:d8:70:01:3d:c8:c2:d4:5b:5e:
96:e7:d4:03:56:86:cd:e2:84:d5:ff:4d:cb:8a:d1:8b:c3:67:
a7:9e:a5:ca:a8:97:c8:4f:d8:04:4e:07:24:13:4a:c1:a3:88:
b5:a5:63:51:af:7f:fe:7a:3e:0f:ca:84:bf:e8:b7:7b:ab:77:
1f:c9:52:a3:68:5f:db:a2:2c:ee:0e:94:ac:cf:f9:7a:2c:05:
32:3c:28:b4:bd:a1:83:3d:bd:a5:8c:46:52:3c:8f:2f:c6:77:
57:23:65:d8:7b:0f:e5:26:16:15:88:c4:2f:c5:1a:6b:84:98:
68:5e:0e:f0:9b:e5:21:87:04:b5:1f:58:5e:af:7b:06:84:e6:
17:e4:6d:47:12:ee:ef:05:f7:f0:60:af:ca:83:fe:df:71:14:
e1:43:59:7e:b0:7e:48:e8:d5:7b:c7:6a:65:93:7a:fd:b4:59:
ae:c5:a5:8e:08:7f:c4:8d:eb:c6:d7:5a:9f:1e:8a:e8:53:6f:
97:f2:57:14:fa:02:5c:12:98:f3:cc:31:dc:16:b6:6d:79:5a:
97:a0:e5:1e:03:f5:75:29:30:fe:8f:2a:ae:dc:e7:05:0b:51:
59:65:48:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:04 2026 by rpki-client