
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2829EA645E3711F08BB53F42C4F9AE02.roa
File: 2829EA645E3711F08BB53F42C4F9AE02.roa (raw, json)
Hash identifier: K4VQaZvwb56aA/1vFbYr2MOqYQtWbgXOF/yDu2hjq/4=
Subject key identifier: D0:45:F5:E9:1A:42:04:52:05:8A:77:D9:A9:0D:F4:1C:FD:A3:D5:30
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 212E
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2829EA645E3711F08BB53F42C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:21:52 +0000
ROA not before: Thu 28 Aug 2025 14:51:59 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153983
IP address blocks: 165.101.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8494 (0x212e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:59 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61b8f-eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:14:f4:e5:6d:f6:f1:6a:26:06:fe:74:95:
da:d0:8e:a8:07:85:cc:9e:b9:cd:6f:e8:41:cd:17:
71:49:57:d6:33:30:8f:93:5c:ce:51:69:37:11:a9:
e9:46:df:65:af:cc:19:cd:82:fa:1b:a8:bb:0b:28:
ef:43:ab:4e:b0:7c:5b:bf:72:0d:da:1b:ae:02:f6:
4c:c0:8c:41:d2:69:9a:2e:92:52:85:83:9e:61:38:
42:27:cc:13:14:87:bd:92:d6:78:a9:cf:59:37:7e:
8f:f8:b6:a1:21:5e:3b:ca:97:5f:eb:9c:65:1f:03:
39:98:a0:29:ea:40:f5:25:32:a3:18:7e:46:a3:ad:
4d:7d:0b:16:81:63:18:5c:97:f4:94:0b:89:a8:f5:
67:07:7e:c0:23:2f:1a:72:34:06:71:aa:c8:1c:ad:
fc:e0:26:3c:cf:1f:07:4f:08:57:29:98:78:c6:c7:
68:9f:10:48:99:fc:16:89:5e:fa:9e:17:f6:e5:80:
d9:99:d4:58:db:c4:d8:18:41:43:27:f7:f2:18:a5:
c1:fa:7d:f8:a4:c6:17:3d:f5:e1:ba:81:03:aa:e3:
9f:67:03:3d:21:ea:0a:58:d1:8d:72:ce:cd:9a:96:
83:72:92:75:68:79:af:66:13:32:d7:f1:70:44:3b:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:45:F5:E9:1A:42:04:52:05:8A:77:D9:A9:0D:F4:1C:FD:A3:D5:30
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2829EA645E3711F08BB53F42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.46.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:ac:5d:30:4f:41:e6:b6:e2:20:b6:b2:ff:d0:a5:8d:69:69:
20:56:60:9d:e2:ed:77:7b:e0:8a:77:24:8d:b4:cb:b0:94:2c:
83:47:fc:a6:08:fc:96:5d:d4:14:30:3e:8b:4f:b3:98:ff:db:
3b:0a:ff:8b:05:ec:58:22:db:7a:13:ea:f7:e2:1e:1c:41:1b:
ac:45:01:a8:11:c7:2f:3f:1a:6e:3b:a1:5d:57:d2:0b:18:50:
fa:73:24:56:af:8c:9e:57:f5:3c:84:c8:01:e6:14:df:93:90:
d0:bf:4c:b0:6c:d3:25:86:80:56:ef:95:91:16:8b:0a:bd:c5:
66:09:fb:af:e2:d0:25:f7:aa:dd:d0:62:84:ba:a4:1a:da:da:
da:38:0a:67:5c:4f:60:f5:83:76:c5:05:09:11:ab:68:a8:bc:
6b:92:4a:13:74:5b:da:df:17:02:e8:bb:cc:95:0c:1e:7d:2b:
dd:ce:d3:7f:4b:f1:96:62:4f:fb:50:fc:cf:d8:95:11:1d:de:
90:5a:6b:f8:94:66:b5:24:d8:f2:18:bc:dc:66:79:6a:79:c8:
71:b5:de:ab:a6:2b:38:cb:6d:39:fe:c1:57:35:d9:62:cd:5d:
9d:ce:2c:8b:08:67:d1:77:11:54:65:55:38:24:0f:0c:cd:2e:
61:d2:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:23 2026 by rpki-client