
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0612FCC62F11F096D6631CC4F9AE02.roa
File: 3A0612FCC62F11F096D6631CC4F9AE02.roa (raw, json)
Hash identifier: c7QEXt0j5lHrXaofHuK6cfMtsNHuh/t+q2fuMqRcJhE=
Subject key identifier: F1:B7:D7:E0:C6:83:9C:61:C9:A1:69:D4:7C:6F:B2:CD:F5:F7:35:24
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23D7
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0612FCC62F11F096D6631CC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:20:11 +0000
ROA not before: Fri 02 Oct 2026 15:20:11 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153450
IP address blocks: 160.250.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9175 (0x23d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:20:11 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcbab-f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:29:60:ab:e3:fe:ab:70:af:cc:a3:58:21:
76:ed:5f:4d:99:ca:7c:97:2b:1a:8c:95:d7:ad:ee:
7c:62:6a:5e:34:16:1f:fb:17:fe:cb:aa:00:d1:4f:
a2:04:ba:71:88:21:d9:54:a1:37:73:f4:e4:5c:a4:
1e:8c:3b:21:bb:b5:ba:e3:84:b9:0c:b9:31:6d:4e:
8d:b1:c0:12:03:8e:be:c1:4b:64:21:13:74:60:a9:
6f:57:2f:4f:85:5d:40:5d:0d:f7:19:0d:57:77:28:
18:2a:69:3e:1d:82:d8:48:4d:63:84:06:97:73:78:
42:15:84:0f:79:36:fe:90:70:b4:32:ed:0b:96:19:
e1:87:7f:f6:b9:a3:d5:43:ed:ff:b2:36:d7:87:22:
07:4f:ad:84:52:b4:92:e4:63:c4:99:45:40:e9:02:
90:8e:68:7f:69:55:78:a3:70:02:a0:79:af:39:02:
cd:9f:4c:dd:50:ec:8b:0f:54:ba:8c:1f:09:ab:74:
9f:31:22:f5:1b:29:01:e6:e3:fb:fd:a1:7c:94:d0:
83:97:d0:66:ae:15:31:b9:89:dc:89:76:34:1e:82:
94:15:18:6f:21:b2:5d:23:a3:24:79:6b:7d:51:1c:
9c:25:0d:39:43:0c:21:c2:ff:86:cb:4a:a0:5f:b9:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B7:D7:E0:C6:83:9C:61:C9:A1:69:D4:7C:6F:B2:CD:F5:F7:35:24
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0612FCC62F11F096D6631CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.250.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:29:cf:29:2e:a3:53:7b:c5:47:6f:fa:b0:a9:ff:01:c1:bd:
76:bc:2c:b3:b1:4e:92:78:08:bb:4b:27:bb:ed:6f:3e:e0:fb:
95:69:e7:09:2c:40:93:82:0f:b9:a4:74:65:b5:33:02:57:68:
43:14:be:27:2f:8b:51:63:a8:20:62:41:b1:33:56:8b:37:31:
d2:8b:48:3a:e2:82:1c:ca:f0:c3:a7:11:ad:c3:9d:bf:45:ac:
c9:a1:3f:87:77:0f:46:02:bb:5c:ca:c8:64:3f:0c:9a:b4:4e:
d7:fb:36:2a:cc:74:d4:1d:ef:75:4b:0b:f1:aa:8d:eb:be:a6:
41:56:35:80:e2:8f:ef:11:23:85:5d:b8:44:da:47:fa:5a:f2:
84:3f:98:5e:a7:ca:0a:51:09:12:27:54:6d:08:e7:6c:78:2b:
f4:a4:85:19:6f:9e:4f:16:13:c4:16:cc:91:02:05:d1:cd:d1:
79:a3:27:93:ff:ac:9d:03:06:e4:57:b4:fc:3c:08:59:d4:e9:
00:22:7c:d1:9b:3e:e7:ae:8a:58:54:11:9a:0b:0a:69:84:f1:
3f:be:41:ae:61:09:54:c0:22:19:13:7e:4c:ba:2c:90:2d:bd:
e6:bc:2c:dd:10:86:15:ef:9b:8e:71:69:ae:46:be:57:9e:f9:
e2:6f:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:53:57 2026 by rpki-client