
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0F3C9F928A0711EFB933C33AC4F9AE02.roa
File: 0F3C9F928A0711EFB933C33AC4F9AE02.roa (raw, json)
Hash identifier: aiRkDyGARA4/DjqfQck74jUlNbsHd15JCD98XXxVM30=
Subject key identifier: F7:A3:C5:5D:50:74:75:F1:A5:F0:BB:7F:7B:10:92:4B:69:E3:8C:10
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2148
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0F3C9F928A0711EFB933C33AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:22:17 +0000
ROA not before: Thu 28 Aug 2025 14:51:38 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152993
IP address blocks: 160.187.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8520 (0x2148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:38 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61ba9-2727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:d8:d2:71:a0:2b:c3:3e:ad:d9:18:c2:22:
97:58:75:ed:84:79:8a:58:41:7e:dc:a3:87:f6:4e:
56:6e:c1:41:dd:e0:9a:c1:98:37:65:77:95:c0:8f:
1f:0a:96:3b:5a:c7:35:19:9e:04:57:53:6a:82:66:
f6:4a:d2:56:5d:b4:e7:9c:71:02:58:73:6d:f1:f2:
49:5a:70:02:25:e5:1a:bc:e5:1c:91:9b:f5:7a:5d:
c1:ec:49:ee:ff:f7:0f:9f:0c:0b:45:e6:ab:5a:db:
c1:00:11:71:6c:10:e3:a6:d5:6c:b0:de:78:03:66:
2c:12:62:a9:bf:74:3a:8f:0d:e3:72:b5:8b:36:a7:
4b:09:43:ed:52:75:e0:98:eb:40:aa:ee:03:ed:6a:
57:e8:6d:2a:03:fc:da:05:c7:ca:6f:a8:0a:11:0d:
bd:59:2a:d5:6e:d5:17:e4:6f:b8:91:93:78:32:e6:
b6:56:fd:8e:0b:5c:59:2e:a3:b2:73:7c:a3:b8:0a:
b8:4a:bd:10:df:cc:56:27:70:c7:92:91:ba:92:7b:
00:a1:fb:de:20:b9:be:6e:3e:99:d4:a3:6b:78:6c:
a6:43:bc:cb:c8:85:7f:4d:8a:1d:85:98:02:84:34:
5a:ad:cb:1f:a4:87:e1:9a:e7:a1:da:9e:e9:37:82:
f9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:C5:5D:50:74:75:F1:A5:F0:BB:7F:7B:10:92:4B:69:E3:8C:10
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0F3C9F928A0711EFB933C33AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.2.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:bc:76:c3:ea:cf:ec:69:0c:0e:3c:91:eb:67:4d:6d:58:20:
63:8e:c3:a3:0c:1f:5c:e5:73:59:05:3a:dd:de:ba:82:a6:9e:
69:07:e7:cb:81:df:0e:9c:41:a9:34:c0:a2:47:8f:cf:f5:e1:
d9:14:80:8c:ed:1b:3f:b6:50:4f:0e:1f:b9:0d:cd:fe:dc:13:
8c:e3:e8:6a:53:a8:92:49:5d:a9:19:0e:3f:7e:46:31:8a:db:
af:5e:ba:fb:35:e0:9c:a5:87:13:ad:b6:af:e9:4b:2e:cb:51:
7e:f2:af:f6:00:dd:4e:e0:78:69:02:71:a5:35:7a:78:8e:b3:
ce:d2:ec:7b:2e:2e:4a:32:af:29:7e:ae:1a:34:3e:8e:c5:b4:
14:9b:ac:08:80:51:f1:cc:9a:2c:71:fc:1c:7b:3b:7d:c4:1a:
59:92:7d:c6:14:17:44:09:18:28:b8:17:6d:37:ee:6f:c2:d8:
59:f0:43:89:66:2a:35:4a:fe:61:09:46:ec:8f:4a:b6:ec:9c:
13:a6:1d:8e:f5:6f:d2:1c:e1:d9:13:35:c5:76:41:62:55:ed:
40:f1:c1:9b:b5:6b:c9:57:29:a3:62:52:c8:e8:9a:71:00:71:
96:0c:e6:dd:b0:6a:03:5a:eb:1b:5a:a8:de:0e:c0:e0:c6:47:
04:ea:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:36 2026 by rpki-client