
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/5E1227E22DD511EF9AFE395EC4F9AE02.roa
File: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (raw, json)
Hash identifier: SKhqrlepkMrk6BddxM6G2PMvfO6t8Ob/zKNcmmPpDSU=
Subject key identifier: 7D:1F:D5:9E:7E:2F:47:30:98:AF:86:BC:4C:C1:A6:ED:03:C6:9E:A2
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 0143
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/5E1227E22DD511EF9AFE395EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:03:56 +0000
ROA not before: Thu 31 Jul 2025 06:11:54 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 149635
IP address blocks: 160.22.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:51:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: Jul 31 06:11:54 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a598cc-ca5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:8c:fd:d1:8a:31:86:3c:de:27:25:79:26:
c5:9e:f9:62:26:41:98:7a:6c:90:97:d0:3e:bc:fd:
f1:31:0d:97:8e:08:08:19:6f:01:16:06:0f:2c:a8:
16:77:d1:01:6d:b6:77:47:6e:62:e0:bb:a7:86:04:
33:74:87:d1:4f:49:be:00:aa:42:8a:3c:fc:bd:d4:
c8:88:e6:2e:7a:59:12:e0:23:20:bf:64:a5:08:91:
f4:4b:e0:df:11:51:0a:25:7e:76:25:e4:ae:3e:67:
18:a1:fa:ba:de:9a:67:47:af:88:98:5f:20:de:1e:
86:78:e2:ee:39:ba:d6:a5:8c:35:c4:ed:5b:ff:3a:
43:a7:bb:f6:20:6e:ba:7d:d1:8d:41:ad:c9:14:0e:
10:42:85:36:0a:3e:b0:79:0d:2c:f4:07:da:a3:fd:
ff:e3:58:cb:0f:95:b6:45:d9:24:0f:51:ba:06:eb:
ff:4a:7a:54:3d:46:83:c6:e4:bf:50:1c:9a:f5:34:
4a:41:e7:a5:1b:2c:a6:3d:6d:cd:63:75:c6:bc:a1:
ad:91:24:c5:11:4b:98:1c:6c:a2:af:f7:ae:87:8f:
15:d4:5a:db:28:ae:76:09:26:91:69:df:ca:65:a0:
34:cf:89:60:4f:c3:63:f2:41:d7:19:c2:18:03:39:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1F:D5:9E:7E:2F:47:30:98:AF:86:BC:4C:C1:A6:ED:03:C6:9E:A2
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/5E1227E22DD511EF9AFE395EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.144.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:df:f4:ba:27:85:98:84:16:3a:e9:ec:11:b4:05:7a:e2:
28:89:2b:c0:ec:76:cd:c8:51:5c:c8:90:fc:68:61:1e:4c:a2:
c9:dd:f9:a7:59:eb:a6:2b:0e:d6:e0:b0:22:0e:5f:c4:96:ad:
44:ad:ef:ea:b5:36:2d:14:50:a7:2e:85:02:ac:2f:ee:c0:64:
61:24:fe:9c:cc:51:0b:01:35:a6:19:c2:33:20:61:44:c9:5d:
78:91:48:cd:f5:9c:31:2b:bf:8d:dc:6c:b3:bf:87:8c:1e:0a:
65:6b:f1:fb:ab:58:a8:1a:5a:10:5a:13:ea:9a:0c:9d:6a:6e:
98:b1:47:a5:95:2d:98:14:ea:b5:dd:80:1e:10:89:4e:92:b7:
24:a5:3f:b0:4e:1a:95:76:c4:c8:67:c4:41:fc:45:67:6d:f7:
62:9f:45:d0:b0:52:5d:1d:42:1e:18:7c:9c:02:9f:0f:1d:39:
7a:a7:f0:f3:d3:30:c2:a9:83:4d:71:c5:77:cf:69:05:85:3c:
cf:a4:39:c0:05:f2:5e:5f:32:27:6e:d2:d0:32:9c:fe:9d:7d:
33:a3:36:45:a9:5b:31:c7:4b:2b:d7:de:13:d6:a0:99:bb:28:
3b:8a:65:2c:18:3a:94:56:c3:28:4b:f0:a8:ab:88:94:19:5f:
68:7d:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:47 2026 by rpki-client