
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa
File: 0CA779BCAB1011EFA3DA074FC4F9AE02.roa (raw, json)
Hash identifier: mK912bJT4DfZPpgfNDZXhGf67BuQ9+CzfwC9n76ULtQ=
Subject key identifier: 23:94:BD:27:80:45:1B:DC:14:8C:6F:36:C9:1B:8F:B6:CB:E7:D9:B8
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23B0
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:18:51 +0000
ROA not before: Fri 02 Oct 2026 15:18:51 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152947
IP address blocks: 160.25.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9136 (0x23b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:18:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb5b-6f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:fd:60:e3:3b:23:50:dd:65:8d:ad:06:f5:
2b:f0:8d:af:81:fc:3b:3d:4d:9f:75:23:7a:fd:98:
ac:d7:cd:8e:4c:5f:ac:f6:c3:e1:aa:76:fc:3e:65:
81:ea:97:6a:23:ff:87:bd:e0:1a:12:03:77:c0:e2:
a4:53:56:56:04:8a:f7:2c:89:60:83:35:81:4d:10:
bc:29:70:03:84:6b:22:4c:09:9d:d3:cc:42:bc:3c:
c5:fa:ab:79:1c:c9:3c:c8:09:32:f2:8a:02:32:2d:
f8:11:eb:d5:0a:d3:0c:37:ad:ea:ac:3a:13:da:a8:
90:84:8e:56:a8:9c:8b:da:51:bb:77:c8:be:b2:2e:
59:f9:35:bb:78:5e:34:d6:34:58:ed:e5:af:f1:77:
f0:cf:46:35:38:dd:ef:1c:a6:49:61:ed:26:50:0d:
80:dd:c1:17:61:1d:8a:6d:eb:99:59:73:b8:b2:06:
d4:4b:22:f3:d3:50:d3:7a:c7:93:e7:a4:0d:10:14:
76:62:c0:b9:35:d1:36:47:f7:d7:21:4b:5c:4d:68:
a9:38:ab:e2:f6:b8:b5:88:a7:d1:bb:05:e8:1c:a6:
fe:05:02:1f:8d:2a:da:3a:a2:22:8c:97:d3:4e:34:
b7:fa:93:de:6d:13:2b:d5:e1:fb:7e:5d:c6:a4:ca:
de:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:BD:27:80:45:1B:DC:14:8C:6F:36:C9:1B:8F:B6:CB:E7:D9:B8
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.148.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:84:7a:32:f4:f5:e3:2e:fa:a6:04:93:a8:6e:51:8a:0d:e3:
44:95:3e:03:f7:0c:b7:9a:4d:4b:f7:6c:88:1e:7a:84:00:83:
67:db:1d:f6:8e:15:c5:bd:b9:2d:b5:1d:2e:d2:33:8b:45:f5:
f6:d3:59:4e:fe:c5:67:87:30:c2:b9:af:49:96:4f:1a:9c:16:
52:83:38:06:13:61:f3:c2:13:49:b5:bf:5f:b1:cb:2d:71:f5:
6b:82:59:29:ca:e5:9f:c8:be:70:12:28:24:00:50:e4:2e:66:
e7:9e:d8:87:2a:e1:d5:4e:9b:15:08:55:11:30:22:55:dd:6f:
da:e9:a1:c4:d0:5a:90:f2:2e:8e:ec:30:56:ee:09:0f:5f:81:
27:5b:f3:fd:2f:74:19:50:93:28:c5:4a:be:f2:4a:b0:d8:be:
0d:21:9e:d0:10:f3:d4:b1:2d:63:a7:cd:45:b3:ad:99:76:66:
25:8b:2c:59:55:21:d0:0b:42:00:25:b4:c0:9a:ff:7a:dd:0a:
1c:af:ba:44:e8:bd:12:d2:39:c1:fe:06:a0:67:72:b7:41:83:
9a:37:1d:ae:6b:8f:de:35:5f:f2:a7:42:2e:00:77:25:81:3f:
32:58:ac:dd:9a:62:2b:0f:fe:54:ac:48:21:f4:ed:65:dd:71:
d0:c4:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:43:38 2026 by rpki-client