
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/246A33168BEF11F1ACDDCCF43911F970.roa
File: 246A33168BEF11F1ACDDCCF43911F970.roa (raw, json)
Hash identifier: gCFF0Q2ZwbsUUaQyHh3frrYjgtR3Y10EKfitU5Uk3LE=
Subject key identifier: F5:12:E5:8F:D6:FA:9E:85:25:F6:90:3B:C9:02:52:5C:16:66:0F:BA
Certificate issuer: /CN=A91930DA/serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62
Certificate serial: 02
Authority key identifier: 05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/246A33168BEF11F1ACDDCCF43911F970.roa
Signing time: Thu 30 Jul 2026 08:17:45 +0000
ROA not before: Thu 30 Jul 2026 08:17:45 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 136969
IP address blocks: 160.236.166.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.crl
rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 08:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91930DA, serialNumber=05E8C67B286589E08DD53E8D7C5FCB19AD7B9D62
Validity
Not Before: Jul 30 08:17:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a6b08a9-caf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:16:cd:88:b3:30:6b:b0:d7:06:cd:0e:db:2b:
8a:f3:42:18:bd:c2:86:39:e0:88:86:33:e4:46:66:
48:da:c2:01:1a:47:f8:cc:87:f2:ac:78:c4:6b:0a:
ef:b2:23:1b:14:61:60:1b:74:80:d7:ac:7d:c8:ad:
3e:d2:b6:b6:86:62:39:0b:0c:48:58:9a:38:3c:df:
45:cc:33:b6:b2:1f:6d:f1:25:36:61:91:a8:f8:09:
b1:90:1a:4c:f7:65:f3:1d:b3:37:24:07:04:5e:b5:
8d:1b:ca:dd:d7:e0:26:17:03:b7:05:ef:94:7b:f7:
f4:05:e4:20:b5:cb:a0:00:ec:06:b6:d0:ba:2c:b0:
b6:67:e3:e8:08:9f:e3:0c:60:95:10:04:6b:b2:42:
b3:27:c1:8f:04:a4:6c:c3:d3:34:c9:59:e9:72:d3:
15:61:a8:54:f8:a6:da:65:c6:8e:70:87:29:f7:4d:
d0:e3:ab:97:40:22:f1:21:31:9c:89:1b:73:3d:79:
00:75:fa:22:42:4f:6a:02:49:15:0e:82:b5:69:b0:
a9:23:1e:33:9c:48:33:52:36:5a:2d:35:81:c9:68:
c4:f2:a4:9d:a4:81:50:fc:af:f8:7f:84:11:a9:a1:
18:53:78:c6:ef:81:7f:52:39:be:1b:aa:79:8d:a1:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:E5:8F:D6:FA:9E:85:25:F6:90:3B:C9:02:52:5C:16:66:0F:BA
X509v3 Authority Key Identifier:
keyid:05:E8:C6:7B:28:65:89:E0:8D:D5:3E:8D:7C:5F:CB:19:AD:7B:9D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/BejGeyhlieCN1T6NfF_LGa17nWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BejGeyhlieCN1T6NfF_LGa17nWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91930DA/1C06C24E8BEE11F1A8488A7A3911F970/246A33168BEF11F1ACDDCCF43911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.166.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:f4:54:24:b7:01:94:b5:42:68:87:b0:4f:23:a7:b5:53:b8:
8b:21:07:2e:b1:10:b6:7e:ef:95:21:64:9c:35:2a:8c:ca:ce:
8a:d0:45:4a:68:cf:41:06:71:36:67:5b:6e:96:42:d3:9c:49:
d2:bb:47:ef:fa:02:0f:fd:6e:95:e7:8c:2a:cb:e6:59:ec:c1:
da:bd:82:34:94:2b:ae:89:14:0e:e0:0e:19:90:c9:72:14:5c:
97:06:66:25:60:fd:17:9d:36:22:ee:8e:1a:56:ad:51:f4:34:
a2:0b:97:3d:dc:bb:d4:6f:c9:bf:fd:1d:e3:42:a1:08:d6:dd:
7b:68:4c:b6:3b:1b:c9:c1:5e:64:69:b2:7f:e1:0d:e1:72:37:
bb:fc:93:65:0f:d7:b6:f1:32:74:8f:d6:6f:dc:d4:3d:fc:ce:
05:2f:54:2d:91:2b:c5:a2:af:40:67:cf:0f:34:01:7c:7b:aa:
95:9c:e9:3b:e2:0a:cd:05:ff:9f:77:a4:fe:03:9f:25:a8:9c:
07:b0:ed:55:a9:2d:7f:b5:17:1d:b0:a2:2e:af:2f:1d:db:f3:
ed:c7:f6:66:fe:ed:ac:82:3b:bb:98:b0:ae:31:2d:19:0d:9a:
be:f4:f9:ba:c8:4d:d9:dc:2f:a9:e4:34:4a:35:43:2d:70:0b:
b7:03:50:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:13 2026 by rpki-client