
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/06F76408F7DA11EE95AA666EC4F9AE02.roa
File: 06F76408F7DA11EE95AA666EC4F9AE02.roa (raw, json)
Hash identifier: ZiiUzj8bMNiGhXdBnFkMEwHqOK4ijOyQ+Eaeb3fYxz8=
Subject key identifier: 23:4C:1C:62:2F:53:C3:F6:07:43:B8:03:BF:10:70:B0:BD:CF:16:EF
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 209D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/06F76408F7DA11EE95AA666EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:06:06 +0000
ROA not before: Thu 28 Aug 2025 14:51:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151913
IP address blocks: 157.66.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8349 (0x209d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:12 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a609cd-cced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f0:0c:4a:ac:e2:e1:1f:3d:ff:b8:da:51:c7:
cd:06:9d:97:ab:08:69:e2:71:42:f6:fe:0f:c4:ad:
0d:7a:1e:fa:5f:1d:ee:84:16:32:5d:0a:8d:fd:92:
88:26:d9:0b:4b:22:7e:1e:78:8a:e3:70:a6:6f:34:
b4:73:97:96:40:26:ed:3c:cb:ba:f3:44:b1:73:b3:
93:25:0f:f0:b2:b5:45:31:68:bd:7d:25:29:d0:9e:
4b:87:70:10:10:a0:5a:da:64:da:21:9b:ab:25:2d:
09:87:3a:d1:54:b9:8b:3a:89:7a:01:6d:98:67:5c:
12:e8:d9:be:8b:f3:5a:3d:5c:7c:ae:2b:7e:b1:ba:
95:09:03:9f:0e:e4:f9:8a:89:ef:49:84:12:32:a3:
21:11:b8:eb:2f:33:41:3f:0d:cf:94:a9:33:28:0b:
14:6e:34:0b:0f:b4:a2:36:42:50:ae:59:fc:06:3e:
48:d5:66:da:2a:74:d5:11:e1:83:15:0d:85:21:fe:
f9:b4:b6:ad:06:00:e1:c1:6d:bd:30:ac:b7:65:bb:
d5:1d:4a:f5:a9:c7:7f:f7:df:19:a5:5d:9f:83:ec:
4d:b9:ad:f0:51:3b:3d:f0:51:11:eb:16:e7:e0:a4:
04:f8:46:8d:f7:21:46:57:03:1c:52:63:bc:d3:01:
71:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:1C:62:2F:53:C3:F6:07:43:B8:03:BF:10:70:B0:BD:CF:16:EF
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/06F76408F7DA11EE95AA666EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.66.10.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:57:f7:7d:a3:db:b5:58:0f:ea:2f:b4:28:d3:c9:f2:01:64:
cf:45:b1:86:12:8f:9c:78:23:ad:fb:37:34:c4:12:ba:a0:c1:
ce:05:f3:98:82:05:e6:bc:73:17:7d:d8:5a:f9:19:33:85:f8:
64:99:e2:bc:c2:e5:b6:0c:74:22:c0:5a:6a:41:2f:4d:3f:ba:
28:09:fa:8b:2d:06:ce:28:76:5f:51:05:69:7d:4b:2c:72:68:
95:ba:3e:95:06:05:c8:67:2b:5f:3f:29:98:37:54:ff:c0:1a:
5f:5e:98:7a:6e:ff:6f:7d:5e:6b:83:1e:8f:c9:db:2e:b0:46:
92:bb:12:bd:63:c1:dc:b9:e5:a9:bd:68:5c:db:19:6f:be:98:
ea:a3:ce:4c:30:01:ba:61:82:ab:43:0d:f8:46:3d:fd:d2:ae:
5d:d2:b7:85:95:84:2d:52:81:b6:91:df:5e:35:9c:c4:38:03:
29:7a:31:97:db:be:07:8d:d4:c7:b2:96:92:7c:4f:e2:e5:df:
41:19:f0:d2:3b:db:f5:68:7b:b4:66:12:22:bf:6a:3b:6d:d6:
da:e6:5a:d7:30:eb:d7:a6:8d:fc:52:d3:3b:5d:9f:3e:c8:5a:
94:a8:7f:0f:b3:4a:23:9c:3a:c7:2f:98:21:ee:95:05:12:20:
7f:91:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:51:31 2026 by rpki-client