
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
File: 139C500E3FEE11EFADFD8221C4F9AE02.roa (raw, json)
Hash identifier: goU/R3liuVU3nqbQEstO/ouByITssw37QythhRIvbQ8=
Subject key identifier: A7:5A:31:26:9D:FF:1D:58:9D:37:EA:B6:1E:50:64:7B:DC:2C:0F:70
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 20A2
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:06:10 +0000
ROA not before: Thu 28 Aug 2025 14:51:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152933
IP address blocks: 160.22.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8354 (0x20a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:16 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a609d2-67ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:69:fb:0e:0d:71:69:c2:99:83:fb:27:8f:
1e:b8:f9:17:35:0c:d9:e0:61:15:42:52:f9:46:1d:
55:a2:8b:a9:b3:fe:8f:a7:36:a0:8c:5e:29:2e:3c:
25:42:e0:3a:dc:db:09:3b:a9:3c:c9:ba:2d:c1:ee:
df:f3:fc:48:d7:d0:9c:04:64:17:74:0e:87:79:ca:
8a:a5:6a:5a:ad:7c:92:d1:fa:2d:71:5b:38:e2:d9:
38:e7:37:24:60:fd:49:3e:43:41:9b:83:23:d5:78:
62:24:7c:eb:50:0f:0e:23:c9:54:e2:5a:1c:1c:93:
da:5d:fc:10:26:d1:9a:ff:e5:d4:5f:6a:63:94:89:
3a:b0:b4:37:86:3f:f4:2d:5c:94:7c:b3:e2:b3:a2:
70:97:37:90:bc:2f:00:58:a7:7a:4d:30:bf:b4:24:
6e:68:b6:b3:b6:0f:d2:3d:fb:9f:fe:ac:d3:51:71:
5d:b6:28:e0:81:64:75:6f:5a:73:a6:58:95:02:07:
da:bd:22:30:94:9e:3a:62:a8:9b:3b:10:8d:cd:94:
fe:4c:1b:35:5a:a7:0c:9d:fc:5b:13:54:7e:72:bd:
00:81:55:77:3c:88:cf:d6:0f:64:c9:bb:94:30:c9:
43:a3:3c:53:0b:26:58:2b:35:1f:f3:41:ce:51:c0:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:31:26:9D:FF:1D:58:9D:37:EA:B6:1E:50:64:7B:DC:2C:0F:70
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:08:85:70:95:95:bd:47:26:7e:79:53:1b:ba:aa:da:bf:cd:
93:f5:94:20:39:07:15:17:5b:9c:3e:51:d8:9d:05:d2:3b:36:
aa:23:3d:91:7d:c3:c5:bb:01:16:f8:ed:fb:a8:a0:da:a6:42:
35:8e:02:88:17:a7:ff:aa:f8:47:f2:d4:a8:ad:39:d3:67:bb:
6e:93:ec:c9:3b:76:c9:ec:a9:fb:65:c6:77:b4:5d:ca:51:4b:
ad:fe:63:23:5a:ed:bc:f4:cd:8c:4d:a9:0c:26:9d:0a:8a:cb:
3c:32:fb:82:1a:60:fb:a0:c3:42:82:15:f9:34:49:7a:3c:06:
27:c4:17:ee:62:19:8d:ca:d2:2f:f5:43:7f:e8:97:f1:20:aa:
e1:70:4d:d0:b6:c7:fa:f8:c4:ef:94:39:6d:dc:30:a0:02:ab:
c6:c1:f0:3b:73:41:da:4d:3a:76:c1:03:fc:03:6f:5e:be:5f:
6f:26:c5:36:74:f6:21:5e:f6:d6:55:08:3d:5f:8f:0c:88:fa:
32:90:b3:05:96:e4:31:07:fb:fc:14:4c:20:b2:b2:62:80:fb:
de:63:5d:21:1c:f8:14:9a:d2:fa:8e:63:67:52:dc:de:69:c5:
ca:19:c3:5a:48:e1:60:65:52:77:c3:e3:4a:a7:a6:76:63:e2:
d1:d1:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:30 2026 by rpki-client