
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0F3C9F928A0711EFB933C33AC4F9AE02.roa
File: 0F3C9F928A0711EFB933C33AC4F9AE02.roa (raw, json)
Hash identifier: xVVHUL3DR2/atUb5jqlsUKfotsrrPaXQHf7nhOc3QBQ=
Subject key identifier: D8:29:BD:98:22:AD:8D:95:99:CC:C3:F6:B5:62:75:7C:D1:D1:7C:0A
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23C4
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0F3C9F928A0711EFB933C33AC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:19:33 +0000
ROA not before: Fri 02 Oct 2026 15:19:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152993
IP address blocks: 160.187.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9156 (0x23c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:19:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb85-88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:8d:7c:ff:22:d4:cb:07:59:f5:7a:ee:80:
7a:36:db:08:a7:0d:e8:ed:5e:f4:46:a3:5f:f8:3f:
23:02:2a:77:99:3e:83:ea:db:b3:2b:81:17:b1:46:
e9:21:9e:0c:04:29:20:a8:bc:8f:32:75:03:62:9a:
01:bb:1f:58:6f:7c:bc:95:e5:e2:9c:60:d7:30:d5:
01:15:db:31:a0:43:1a:0f:9e:a3:7c:c0:6d:38:6b:
bd:ae:eb:87:47:27:72:ff:36:b7:9c:d8:8f:f2:07:
b2:aa:11:23:e9:b1:05:f4:26:cd:b3:0a:a7:21:cb:
53:30:d3:75:f2:b0:70:96:34:8a:74:4f:21:99:a9:
10:9c:bd:6e:88:05:bd:cc:d5:90:bb:ce:ed:26:02:
98:bb:c6:34:e4:39:e4:fb:7f:d7:3c:38:69:c9:bc:
48:ee:41:8c:a6:d5:f8:5a:be:0e:48:ae:0b:05:6e:
a6:84:27:6d:dd:81:0e:46:7c:ec:f9:14:07:7c:d5:
55:fa:d5:89:74:14:40:e8:86:b2:bc:c5:8a:18:75:
58:2a:87:5b:57:0b:73:90:25:2f:d5:f2:66:5a:ef:
1a:8d:a3:21:8d:1b:b8:06:5b:84:39:9f:e8:10:7c:
68:b9:c9:19:c3:fc:06:8e:39:74:c0:46:73:be:aa:
d8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:29:BD:98:22:AD:8D:95:99:CC:C3:F6:B5:62:75:7C:D1:D1:7C:0A
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0F3C9F928A0711EFB933C33AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.2.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:ff:dd:45:be:82:cc:41:49:5c:6f:18:3a:f6:2c:f3:07:54:
e3:97:a7:37:d7:7b:bb:f1:e2:c4:3a:67:5b:e8:c5:06:ae:6c:
41:d0:52:bc:e7:82:92:d1:14:50:a3:f4:c8:db:b6:06:58:56:
2d:1c:08:7b:5e:a6:5a:f9:48:49:8c:ec:21:61:de:cd:6e:de:
88:1c:f7:65:74:fc:5d:d7:95:dc:a1:75:f1:47:f5:07:11:4a:
ee:b0:50:99:0b:d6:97:f9:91:29:42:14:1e:01:30:22:c7:39:
97:fb:16:8b:6d:ab:a5:67:7c:a5:33:81:80:dc:8c:c1:2f:70:
f8:a4:06:7e:14:90:72:a7:b4:a2:74:44:01:84:44:37:54:56:
ca:7e:1c:6b:92:c8:5e:22:3d:c2:b1:25:78:02:98:34:ef:fd:
89:6c:a7:62:48:62:72:6a:b8:4d:16:94:82:ae:4b:eb:fc:55:
88:24:c0:07:ec:9e:76:b9:c4:8e:c0:4e:58:79:22:e5:64:0f:
b3:d4:ab:8d:98:dc:a2:47:cd:91:d6:24:89:ed:60:d6:77:b9:
b5:e5:29:a4:42:1f:3e:8b:5f:3c:19:f4:e9:aa:1d:8f:57:ee:
2a:87:6b:98:4a:35:49:f5:00:82:ac:b3:a6:e3:be:16:d5:82:
f4:e8:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:32 2026 by rpki-client