
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/26D098AC4B3711EF9BAECA83C4F9AE02.roa
File: 26D098AC4B3711EF9BAECA83C4F9AE02.roa (raw, json)
Hash identifier: KtjMkLbO9TEqbrjDErrcBN8YkIy6QlodzM5gaK5oAP4=
Subject key identifier: 0E:B7:FD:DB:B3:0E:EA:B6:B4:CF:93:E3:FC:8C:F4:4C:EA:47:66:B1
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23A0
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/26D098AC4B3711EF9BAECA83C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:18:17 +0000
ROA not before: Fri 02 Oct 2026 15:18:17 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151908
IP address blocks: 157.20.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 14:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9120 (0x23a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:18:17 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb38-ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:be:b0:c1:bb:2a:d3:b1:ac:61:8e:0b:68:
a0:62:3d:10:58:81:cb:0c:24:b6:3d:49:74:06:a7:
ca:1a:1f:e7:87:0a:82:ea:b4:6c:23:fe:73:5a:95:
bd:84:33:64:43:2f:de:a8:66:fe:74:e4:8d:ff:ec:
a3:76:f3:7e:79:35:7d:4d:33:f8:30:18:e9:b8:60:
a5:27:fe:27:2b:29:cb:8b:c3:3d:79:7d:ab:32:1b:
fe:e6:7e:c2:05:b3:95:fc:5f:43:1c:34:0e:78:cd:
c5:05:8a:fa:7f:69:57:4b:28:b4:bb:45:2f:43:77:
4e:cd:c7:e2:e3:e2:27:25:d4:ae:32:3e:ba:ea:20:
c5:8b:4a:83:9a:2b:85:b9:48:7b:16:4b:be:ae:52:
a2:33:7f:2d:71:0a:d3:52:b9:8e:96:aa:cc:a7:1b:
35:49:ba:c2:2d:8c:f5:44:2f:ac:da:5b:87:ce:0a:
91:58:5f:b7:f3:13:32:0f:95:31:ef:83:94:75:60:
ec:0c:e5:b2:0f:6d:0d:4a:c4:98:14:b3:1e:2b:e1:
e2:9b:fe:75:e2:3f:25:46:8a:2c:6c:1e:ec:59:32:
42:c9:a2:0c:fb:2f:63:b2:0c:b9:2f:8b:a2:3e:08:
7a:87:1c:09:c7:68:e8:3f:83:15:7d:3f:60:ca:5f:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:FD:DB:B3:0E:EA:B6:B4:CF:93:E3:FC:8C:F4:4C:EA:47:66:B1
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/26D098AC4B3711EF9BAECA83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.60.0/23
Signature Algorithm: sha256WithRSAEncryption
08:5b:5a:ab:4f:1b:07:7d:2b:29:fd:ad:77:28:aa:d7:89:1a:
1c:1e:5b:85:c8:72:ca:12:67:13:bd:c7:01:71:b1:59:4e:37:
77:fd:80:52:40:de:68:3d:24:49:e3:36:8c:83:49:b1:6a:bf:
c7:c3:bc:ee:51:be:4d:3a:77:4f:0d:6b:2b:bf:04:b9:80:6c:
0b:bc:31:6a:43:68:88:37:a7:bb:ba:12:ac:14:34:05:20:de:
05:5b:fd:90:76:67:aa:48:95:b7:2e:05:31:33:7d:27:61:4c:
17:4b:79:68:de:eb:59:20:85:5d:3d:e8:9a:fd:b8:d6:ff:bc:
46:92:68:fa:5e:8f:98:34:e9:d2:23:85:e2:85:5f:51:67:39:
1a:10:43:b5:91:93:fa:73:19:c6:3a:36:84:51:3e:1b:3a:0d:
dc:7e:8c:54:b6:1d:87:ea:d6:b4:20:3a:1a:db:e6:12:31:42:
c1:a6:7d:01:e2:09:2e:96:73:ed:8c:a0:fe:47:b6:f6:e7:f8:
32:8d:9d:32:70:f2:d5:0c:5c:e8:db:ca:9a:43:0b:fb:15:3e:
62:8b:08:5b:f3:a0:53:92:6c:aa:6b:99:14:47:72:63:6b:8d:
bb:33:fd:8a:d2:9f:3a:54:38:8b:c3:21:11:ab:77:aa:83:09:
e7:b4:b8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:29:48 2026 by rpki-client