
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2BACF3E0503311F19EEBDD3DCA833773.roa
File: 2BACF3E0503311F19EEBDD3DCA833773.roa (raw, json)
Hash identifier: /MoUsy5V47x47FceRDaSbJt6J0MW0q3Fr+X58vRHhR0=
Subject key identifier: 69:C9:3F:AA:EA:4C:D6:B1:8F:D5:3B:B5:3E:86:90:0C:7A:08:54:AF
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 22B6
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2BACF3E0503311F19EEBDD3DCA833773.roa
Signing time: Fri 15 May 2026 07:53:33 +0000
ROA not before: Fri 15 May 2026 07:53:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45903
IP address blocks: 162.4.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 14:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8886 (0x22b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: May 15 07:53:33 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a06d0fd-6ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:8c:19:9c:fd:60:61:b2:38:a4:33:20:35:
a0:0a:16:ab:0c:a9:0c:13:a4:0c:a4:b5:c4:1e:ff:
d1:80:ae:19:5e:1c:e2:ce:28:9f:37:ab:dd:f6:bf:
39:a4:00:a8:df:40:70:fa:60:89:4b:e0:61:7b:53:
b9:0f:a9:f3:57:80:9c:d5:a5:08:8c:f8:46:25:e7:
2c:6a:7b:e1:89:5c:7d:81:f7:2f:c1:07:70:0b:a7:
71:86:78:92:7e:95:2b:22:bd:41:88:11:84:4e:47:
d1:f6:fc:63:59:92:a6:d6:de:05:ac:4d:45:63:57:
12:15:ac:ae:e6:af:b6:9a:0c:ca:2f:73:2f:cb:05:
da:0b:69:f6:e1:30:c9:c8:67:cb:b4:fe:27:36:a5:
52:1d:05:33:93:25:7f:6e:a3:32:e8:7c:10:5f:d5:
ef:45:14:b1:40:ae:ce:de:86:f4:b6:39:e7:eb:a7:
84:a7:ba:e8:6a:fa:69:60:4c:a0:d1:27:a9:f7:87:
8f:e8:cb:28:a6:39:50:c8:c7:a4:3c:f8:89:46:23:
0c:32:63:e5:9a:8b:0e:90:57:76:56:7f:db:e2:27:
a1:4b:08:88:73:04:97:c0:aa:28:62:fd:b3:e5:b6:
9d:f6:4f:18:71:02:9e:19:c2:3f:63:a1:51:61:f6:
db:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:3F:AA:EA:4C:D6:B1:8F:D5:3B:B5:3E:86:90:0C:7A:08:54:AF
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2BACF3E0503311F19EEBDD3DCA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:a8:e7:56:e7:35:16:b4:67:29:88:51:b4:19:fb:da:8f:97:
11:38:59:45:ea:b9:33:57:20:d3:3e:47:03:71:3a:8b:11:fb:
b4:b0:3f:00:ea:c0:d6:cd:89:7f:d8:77:37:5d:73:ea:d0:20:
29:86:41:21:93:cf:54:69:e5:f9:f0:ab:6b:a2:ac:43:5a:4b:
b2:dc:10:b4:29:a0:14:9e:f0:98:cc:91:c2:b6:a5:27:c4:41:
31:28:07:33:32:b5:45:45:12:6a:5b:a0:de:a2:0d:6b:be:36:
a7:d3:6b:e8:65:f5:05:1f:53:6f:14:45:3c:98:c7:c6:d7:2d:
f1:b2:b9:4c:14:ee:75:f9:41:29:f3:ed:d0:75:0a:65:45:4e:
f0:d6:4d:44:89:59:51:43:33:66:f2:d3:0e:de:d5:8e:b2:c8:
3f:f8:30:20:f5:5a:60:9a:6d:08:0c:9c:21:23:7b:df:6b:85:
70:85:af:2c:ef:f0:d5:d8:25:ca:2c:ba:13:ab:1f:29:ff:ee:
5c:03:18:97:9f:17:ca:f7:f6:6f:e8:43:89:72:7f:2c:17:b2:
57:ed:ec:70:c9:19:32:e0:d7:fb:96:f5:be:38:f1:9a:ff:01:
5d:70:99:41:d1:b7:81:c5:28:ea:05:48:5c:47:d6:3e:f2:ba:
61:77:6a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:38:57 2026 by rpki-client