
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1B78EDBC768511F199B9825161A30FBC.roa
File: 1B78EDBC768511F199B9825161A30FBC.roa (raw, json)
Hash identifier: +8cHDDEzm9tvMWpHvID+W6JjhDjVYdYp0pcB8jNmidk=
Subject key identifier: 28:42:04:F7:C4:1C:8A:C3:42:C8:81:9A:1A:52:72:C8:57:CE:57:FB
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2381
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1B78EDBC768511F199B9825161A30FBC.roa
Signing time: Fri 02 Oct 2026 15:17:10 +0000
ROA not before: Fri 02 Oct 2026 15:17:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135983
IP address blocks: 157.15.86.0/23 maxlen: 23
157.66.80.0/23 maxlen: 24
160.187.240.0/23 maxlen: 24
165.99.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 14:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9089 (0x2381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:17:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcaf6-12a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:8e:10:7b:94:cd:94:53:96:1b:bd:48:83:
c6:53:10:47:c5:d6:81:46:98:6d:32:6d:2a:76:8a:
8b:6d:30:da:33:34:91:92:b3:28:df:71:84:78:f4:
8b:79:f1:01:d3:cf:9f:9b:16:a2:63:e6:14:c5:9f:
88:1c:1a:58:2d:47:8a:40:c3:53:88:60:58:51:d4:
fd:17:2e:e3:d4:41:79:8c:d7:33:0c:60:2e:e3:3d:
70:21:3a:28:85:ec:9f:36:f9:45:59:0c:4a:22:56:
2b:1f:1e:87:ed:c2:67:e5:21:c5:4d:33:63:c2:39:
6b:1f:58:13:10:ec:41:a3:e9:88:df:2f:a4:c9:2a:
61:f0:4c:1e:58:62:db:26:f4:18:70:08:c4:85:ed:
6d:eb:2a:3b:a6:c3:71:be:3f:ab:c8:97:7d:8e:2a:
e8:00:b4:a2:a9:11:de:85:51:bd:5e:be:46:06:fa:
49:37:c7:6b:9b:e5:3f:13:e3:48:a3:1e:3d:e1:c6:
88:59:18:39:fa:d8:ce:5f:f9:09:a4:06:51:b0:3d:
68:f4:f8:01:df:93:9c:21:43:66:be:38:b0:12:b6:
58:81:8c:ad:3e:06:bf:53:e6:6f:7c:e3:06:f9:bd:
eb:a3:5e:69:eb:3c:cb:74:ae:52:70:77:89:67:e2:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:42:04:F7:C4:1C:8A:C3:42:C8:81:9A:1A:52:72:C8:57:CE:57:FB
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1B78EDBC768511F199B9825161A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.86.0/23
157.66.80.0/23
160.187.240.0/23
165.99.16.0/23
Signature Algorithm: sha256WithRSAEncryption
47:19:c1:ff:4f:09:7e:a5:94:5e:f1:0c:e4:f3:cd:39:7c:a2:
0c:7b:47:e8:e5:e4:ff:9e:e4:f2:bb:ca:d9:4b:9a:a6:bc:0c:
9e:90:9e:0c:e2:dc:f7:69:ee:b3:64:fa:54:59:30:f6:70:3e:
26:7a:f5:60:9b:07:d2:9a:11:c1:00:27:60:d4:e1:30:23:07:
51:26:14:19:82:ca:61:1b:e5:59:d3:4b:e4:15:b4:0c:44:0b:
b4:85:6c:b6:fc:15:40:de:36:ee:e3:01:c2:4a:68:87:06:66:
c2:7a:39:10:f2:07:a6:3d:cb:85:31:fd:be:df:83:32:49:cd:
73:c8:6a:03:f4:01:84:0a:9a:e4:0c:dc:77:a4:7a:9f:ce:12:
b2:7e:e1:74:56:e9:ad:82:a9:2d:0c:65:f8:f4:84:e7:b3:fe:
ad:73:2f:90:ac:cc:fb:42:67:1e:c7:ee:56:62:c8:42:32:5b:
e3:e9:2e:28:85:b1:30:31:36:af:7a:e6:cf:d4:30:37:56:b8:
71:b0:ff:d9:75:26:1a:72:03:e1:82:b4:82:f7:36:a2:d4:2a:
30:01:95:1e:04:40:c0:ee:96:43:6d:39:da:de:14:c3:1c:93:
79:ab:b7:50:d4:6d:00:0f:ac:c2:f5:a2:95:c4:4f:1c:7a:0f:
7e:1e:e8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:38:41 2026 by rpki-client