
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa
File: 40CD7F9A4F4711EFA3EF0919C4F9AE02.roa (raw, json)
Hash identifier: Ln8usY0mUMxT/5mPWsBF+kwlqvsC2FgCLs3b59HK+Ac=
Subject key identifier: 43:FF:5E:E0:DF:9E:93:D8:1F:DF:2F:FB:62:D4:34:C4:D0:1C:4F:0F
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 237C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:16:59 +0000
ROA not before: Fri 02 Oct 2026 15:16:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135912
IP address blocks: 160.19.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9084 (0x237c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:16:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcaeb-b52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:64:8f:ec:54:52:a1:05:c8:eb:15:d3:8b:
d0:de:e9:75:1e:1c:45:bf:c5:d7:b4:b2:38:c3:5d:
30:8e:90:4f:b2:dd:18:70:83:18:38:67:f2:ea:e4:
b5:b4:2b:ae:6a:d0:fe:58:80:30:0a:a5:81:44:40:
c5:f2:43:09:5c:87:1b:54:a8:5d:aa:ef:a2:7f:73:
94:4d:11:12:df:d8:79:3b:4e:1e:4d:ec:90:04:19:
ee:71:e2:5e:38:8b:fc:f8:ac:7a:fb:ba:af:5e:6d:
a1:1f:e6:b1:33:06:c8:9a:95:d3:e5:27:f3:b9:56:
9c:10:05:80:9c:ea:dd:6b:44:30:f8:8e:66:03:81:
30:ef:fd:54:5d:38:47:0a:64:3a:3a:0b:7b:09:9c:
65:60:3b:2f:34:44:4c:1e:33:9a:7b:97:f5:3d:05:
d8:21:87:8c:17:de:9e:74:cb:3f:bf:1c:45:14:18:
15:1c:c7:c3:d2:b7:c2:1a:04:80:78:f0:44:6d:c1:
a5:ed:43:ae:f3:31:68:e9:86:dd:ca:a9:66:19:1d:
71:07:dd:12:dd:f2:3a:a6:b1:62:5c:12:e2:64:a2:
f5:06:d7:f2:ad:8b:20:b6:78:cd:8b:e0:1a:f9:4c:
82:e2:5c:f3:72:fd:a4:da:09:39:7f:38:40:a3:66:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:5E:E0:DF:9E:93:D8:1F:DF:2F:FB:62:D4:34:C4:D0:1C:4F:0F
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.19.159.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:f3:03:74:8a:26:0e:64:55:9b:06:d4:c0:07:24:b0:87:
26:30:d8:50:57:a9:62:93:c8:e0:31:1b:1d:45:3c:69:dc:7f:
45:69:ce:6a:f2:8a:39:43:52:8e:2a:99:33:3b:5b:6f:50:64:
cf:17:c1:9f:07:d4:e8:5d:7a:7b:2d:40:f6:23:66:a3:30:a9:
a0:92:aa:fe:75:0b:99:19:bb:10:6f:7e:bd:ed:f3:8a:e4:b5:
c9:b1:86:ec:4e:d8:ae:e2:25:ba:34:c2:95:78:2d:0e:6a:40:
3c:10:32:ca:c5:8e:ee:68:8e:d4:1c:10:0f:80:7f:73:0c:11:
f4:e6:02:db:81:58:50:45:67:50:73:8c:47:87:cf:02:e4:d3:
d2:f4:0b:27:fb:d0:8f:d4:73:fe:c6:af:72:7f:2b:7c:36:dd:
e8:ea:09:cf:48:92:82:64:60:db:85:c9:49:80:47:13:b9:55:
54:27:50:cf:ef:e5:a5:1b:43:db:f9:66:96:7c:3d:49:ff:03:
c9:a8:07:36:60:8e:72:fb:fc:65:6b:dc:5b:6d:35:7b:53:aa:
46:f4:bd:e9:d1:41:ae:16:12:1a:73:4b:ca:12:7e:86:83:44:
1e:e6:ae:4e:e0:34:4a:3c:9d:02:8b:9d:27:ea:8a:9a:ae:81:
59:0d:9e:30
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUxNjU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2FlYi1iNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoSpkj+xUUqEFyOsV04vQ3ul1HhxFv8XXtLI4w10wjpBPst0YcIMYOGfy6uS1
tCuuatD+WIAwCqWBREDF8kMJXIcbVKhdqu+if3OUTRES39h5O04eTeyQBBnuceJe
OIv8+Kx6+7qvXm2hH+axMwbImpXT5SfzuVacEAWAnOrda0Qw+I5mA4Ew7/1UXThH
CmQ6Ogt7CZxlYDsvNERMHjOae5f1PQXYIYeMF96edMs/vxxFFBgVHMfD0rfCGgSA
ePBEbcGl7UOu8zFo6YbdyqlmGR1xB90S3fI6prFiXBLiZKL1BtfyrYsgtnjNi+Aa
+UyC4lzzcv2k2gk5fzhAo2ZhvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEP/XuDf
npPYH98v+2LUNMTQHE8PMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDBDRDdGOUE0
RjQ3MTFFRkEzRUYwOTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBOfMA0GCSqGSIb3DQEBCwUAA4IBAQBlS/MDdIomDmRVmwbUwAck
sIcmMNhQV6lik8jgMRsdRTxp3H9Fac5q8oo5Q1KOKpkzO1tvUGTPF8GfB9ToXXp7
LUD2I2ajMKmgkqr+dQuZGbsQb3697fOK5LXJsYbsTtiu4iW6NMKVeC0OakA8EDLK
xY7uaI7UHBAPgH9zDBH05gLbgVhQRWdQc4xHh88C5NPS9Asn+9CP1HP+xq9yfyt8
Nt3o6gnPSJKCZGDbhclJgEcTuVVUJ1DP7+WlG0Pb+WaWfD1J/wPJqAc2YI5y+/xl
a9xbbTV7U6pG9L3p0UGuFhIac0vKEn6Gg0Qe5q5O4DRKPJ0Ci50n6oqaroFZDZ4w
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:53:40 2026 by rpki-client