
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/1C247386C63411F18D09886A5211F970.roa
File: 1C247386C63411F18D09886A5211F970.roa (raw, json)
Hash identifier: M3jFNc5AL7aOL1gnvOVGMM8mcs2Z7pXUWJsdP4ebfLU=
Subject key identifier: 54:2B:03:6D:59:0A:E5:4A:42:99:95:B7:0A:9B:47:4F:77:C3:D1:A5
Certificate issuer: /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial: 017F
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/1C247386C63411F18D09886A5211F970.roa
Signing time: Mon 12 Oct 2026 11:57:34 +0000
ROA not before: Mon 12 Oct 2026 11:57:34 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 153347
IP address blocks: 160.187.128.0/23 maxlen: 23
160.187.128.0/24 maxlen: 24
160.187.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 05:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383 (0x17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Validity
Not Before: Oct 12 11:57:34 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acccb2e-abb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:28:30:47:35:81:24:44:8e:90:d6:59:7b:c0:
91:35:bb:86:b2:e8:39:14:7e:80:6e:02:fa:98:f1:
2d:52:0e:e9:d1:e5:5e:ca:8a:1e:5b:c4:70:f4:44:
46:ea:9e:e2:e3:c5:d5:1f:df:11:3b:26:ed:29:20:
24:80:8b:d9:2f:79:c1:7c:17:15:3c:62:86:9d:8e:
66:d9:91:c1:76:5a:cf:f6:31:6c:d1:2c:36:d8:f6:
5c:94:8d:e1:1c:0a:47:e1:a7:5e:a0:3a:63:68:e1:
8b:d2:8f:db:1a:57:e8:63:45:a5:79:66:47:a9:0c:
89:40:3b:8a:d5:04:f8:d2:cb:1d:07:a3:30:bb:02:
bd:f5:7b:c3:f9:a2:8c:88:d8:94:ab:7b:b4:72:38:
d0:96:8c:17:b2:b7:5b:10:ea:36:f2:56:03:9f:ab:
ad:fe:f1:90:c8:aa:7d:ad:23:88:2c:72:3a:9b:1c:
e1:73:b8:15:b0:eb:d4:d8:12:05:7e:9f:92:44:3f:
3a:95:13:66:ed:72:f1:da:f0:ce:e9:a7:46:0b:6c:
2a:db:1d:cc:d0:78:4c:d9:ee:d2:12:01:33:bb:1f:
34:55:64:09:2f:14:27:12:28:31:a2:28:de:64:d5:
71:ca:6f:45:cc:a2:e4:6c:ea:82:6c:60:33:86:34:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2B:03:6D:59:0A:E5:4A:42:99:95:B7:0A:9B:47:4F:77:C3:D1:A5
X509v3 Authority Key Identifier:
keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/1C247386C63411F18D09886A5211F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.128.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:01:49:da:8a:68:45:f4:14:16:e6:37:ab:39:72:2b:14:39:
66:b4:73:96:0d:76:3d:ff:04:78:eb:ef:9c:1b:37:f8:68:b9:
65:e9:79:cf:51:14:cb:09:9f:fa:54:66:90:06:44:15:ca:dc:
47:c7:d5:1a:70:95:79:27:df:dc:94:40:e1:02:60:b7:f2:50:
69:96:10:b7:ba:d9:2a:c5:b6:44:15:72:05:40:a8:8a:1a:3c:
4f:3f:d8:de:66:78:7e:78:6e:83:b7:f5:7c:53:4c:91:a5:66:
56:09:87:b4:e3:49:f4:bd:23:07:06:bb:eb:a1:25:f6:55:61:
20:2d:5f:fd:1e:12:92:bd:35:89:36:f0:96:d8:c0:c2:47:55:
e1:87:76:27:7f:34:c2:1e:df:fe:61:e0:68:6a:20:a0:74:6a:
0f:d2:85:be:8a:a5:12:0c:3c:d6:09:55:f1:37:34:d5:15:1c:
f4:ed:a2:98:11:3a:92:cb:66:67:f5:98:66:de:97:38:0f:ee:
ec:27:e7:d8:48:a7:6b:6e:4e:e3:da:04:00:56:38:a3:5f:1e:
0b:22:36:77:da:78:44:43:6f:3d:89:d5:78:46:f8:3a:b5:e8:
c2:c1:39:27:2d:8c:9a:95:63:7b:8e:6c:91:e0:77:b2:be:2e:
4d:97:b3:3d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy
RjZEMjY1NjIwHhcNMjYxMDEyMTE1NzM0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNjY2IyZS1hYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ygwRzWBJESOkNZZe8CRNbuGsug5FH6AbgL6mPEtUg7p0eVeyooeW8Rw9ERG
6p7i48XVH98ROybtKSAkgIvZL3nBfBcVPGKGnY5m2ZHBdlrP9jFs0Sw22PZclI3h
HApH4adeoDpjaOGL0o/bGlfoY0WleWZHqQyJQDuK1QT40ssdB6MwuwK99XvD+aKM
iNiUq3u0cjjQlowXsrdbEOo28lYDn6ut/vGQyKp9rSOILHI6mxzhc7gVsOvU2BIF
fp+SRD86lRNm7XLx2vDO6adGC2wq2x3M0HhM2e7SEgEzux80VWQJLxQnEigxoije
ZNVxym9FzKLkbOqCbGAzhjRGMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFQrA21Z
CuVKQpmVtwqbR093w9GlMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD
QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA3QkIvMDFEMjM5QTQ3Q0IzMTFFRjk2QzlGMjUwQzRGOUFFMDIvMUMyNDczODZD
NjM0MTFGMThEMDk4ODZBNTIxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLuAMA0GCSqGSIb3DQEBCwUAA4IBAQB/AUnaimhF9BQW5jerOXIr
FDlmtHOWDXY9/wR46++cGzf4aLll6XnPURTLCZ/6VGaQBkQVytxHx9UacJV5J9/c
lEDhAmC38lBplhC3utkqxbZEFXIFQKiKGjxPP9jeZnh+eG6Dt/V8U0yRpWZWCYe0
40n0vSMHBrvroSX2VWEgLV/9HhKSvTWJNvCW2MDCR1Xhh3YnfzTCHt/+YeBoaiCg
dGoP0oW+iqUSDDzWCVXxNzTVFRz07aKYETqSy2Zn9Zhm3pc4D+7sJ+fYSKdrbk7j
2gQAVjijXx4LIjZ32nhEQ289idV4Rvg6tejCwTknLYyalWN7jmyR4Heyvi5Nl7M9
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:28:15 2026 by rpki-client