
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/26D098AC4B3711EF9BAECA83C4F9AE02.roa
File: 26D098AC4B3711EF9BAECA83C4F9AE02.roa (raw, json)
Hash identifier: jdXw25ynqmPwSreaGOp2FVPeByN582cB9SqgChStzYI=
Subject key identifier: F9:96:62:B5:51:CC:81:08:41:8A:DC:C9:E1:B2:30:16:E7:F7:28:20
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 209B
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/26D098AC4B3711EF9BAECA83C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:06:04 +0000
ROA not before: Thu 28 Aug 2025 14:51:10 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151908
IP address blocks: 157.20.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8347 (0x209b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:10 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a609cc-70bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:69:d0:45:f4:96:ce:5b:5e:e0:63:ac:d7:
50:fb:ba:ca:fd:6d:20:20:2f:5c:f5:95:f7:42:d6:
7b:cf:34:3f:31:6d:98:05:30:0f:b2:26:a9:b4:54:
af:b1:fc:f3:8d:c2:21:23:9c:6e:a6:86:b9:be:c9:
65:2c:45:81:56:8d:00:da:e9:20:90:a9:ae:af:e9:
55:ad:dd:cf:46:c4:f5:99:30:98:ab:d5:a8:55:eb:
50:14:1c:1b:80:c1:dd:71:18:44:4a:64:85:8b:5d:
a3:86:20:47:4e:c3:ed:5f:72:49:6b:b9:f3:4e:78:
c4:2e:e5:a3:95:ed:7a:c9:ce:57:12:b6:47:d1:e2:
78:00:cb:45:27:11:ed:02:a4:da:17:dd:34:8d:4e:
b8:dc:7c:82:85:08:78:d5:8b:64:e1:b1:92:17:74:
70:e7:91:de:22:6d:a4:05:2f:e8:ee:e2:c5:a0:ec:
da:9a:ae:49:f1:f6:74:28:f5:f8:3a:34:be:1c:b4:
34:a3:f4:99:49:99:b6:d4:a5:7e:b2:c4:d7:f6:0e:
c8:a5:e9:d7:b1:27:b4:d2:a0:19:3d:e9:38:32:11:
d0:62:0b:e2:b7:89:e0:f3:d8:f2:17:7a:df:f3:04:
16:b4:4d:19:fc:29:3d:3b:75:f0:0e:88:90:40:ef:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:96:62:B5:51:CC:81:08:41:8A:DC:C9:E1:B2:30:16:E7:F7:28:20
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/26D098AC4B3711EF9BAECA83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:06:b8:ac:7f:0b:86:05:ac:69:19:e3:a5:a4:78:2e:8a:a8:
77:b5:5d:4d:79:bd:83:fa:72:b0:63:42:cf:1c:b9:5a:c6:37:
64:54:75:75:92:53:5a:4f:7c:d1:e9:b2:d7:b0:9d:f5:44:ca:
0d:47:81:85:66:2d:83:3a:12:5a:89:65:9a:55:34:16:3e:7d:
1e:13:00:0f:6f:c3:ec:0c:13:c4:d9:0a:8b:72:e6:e4:0b:b5:
c9:92:29:49:38:a7:c7:1b:78:bf:06:05:36:cb:cf:5e:e6:12:
9e:1d:23:48:12:2a:55:3a:81:18:2d:93:fa:8f:b1:3e:a9:d5:
84:c4:e3:fa:70:ac:9a:99:39:af:49:31:f6:14:e0:78:a3:4b:
3c:2e:5d:9a:87:53:cc:94:db:fa:59:cd:1f:86:e9:76:d0:7f:
7d:e5:52:65:50:b3:a1:10:7b:c4:5c:78:76:c6:14:3b:1d:e9:
20:db:9b:44:79:6a:14:a9:63:13:28:63:dd:ec:06:ea:eb:35:
75:6d:64:f1:9a:28:08:87:94:b3:35:cb:cf:bc:f3:a2:d1:df:
ec:0d:64:c5:4b:be:37:01:dd:f9:e5:a1:30:6d:26:ad:55:8b:
7a:d4:c5:ef:16:50:03:38:3c:a1:e3:1e:4b:24:1a:48:dd:82:
81:20:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:31 2026 by rpki-client