
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa
File: 4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa (raw, json)
Hash identifier: tmGwm4qnlZaAxxh7hHKzDTTc6KBhoM572ek3uFQkeLw=
Subject key identifier: DA:D0:05:54:88:C0:EE:53:AF:0F:D3:E1:99:62:EB:0E:14:CE:65:1C
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2142
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:22:12 +0000
ROA not before: Thu 28 Aug 2025 14:51:42 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153013
IP address blocks: 160.191.32.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8514 (0x2142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:42 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61ba4-e412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:16:9b:1a:7d:84:38:03:c4:62:34:b6:76:
2e:fa:34:4b:3b:b6:2b:37:af:0a:51:8e:0b:96:17:
d3:26:53:33:18:a8:c4:07:9c:cc:af:5c:2c:40:88:
6f:ca:c7:69:4e:35:e3:47:ae:9f:1c:d2:86:6c:97:
0b:d9:c5:74:2a:bb:f8:9c:bf:0c:b4:b6:ca:d1:71:
0a:04:93:37:82:c7:e1:79:ea:0b:ea:f3:41:e6:af:
d2:48:4b:72:0c:39:d0:73:48:d2:92:62:1e:fa:34:
1d:1e:4e:6b:dd:23:28:eb:65:29:2e:52:06:a9:d8:
6f:ca:4e:93:6b:01:a1:e4:ce:e1:37:d4:4c:ca:d3:
31:bc:f9:1f:bf:9c:5d:0c:ca:0f:aa:cc:bb:b7:14:
70:76:44:6c:9a:ea:1e:b9:80:bc:e6:0a:b4:a4:78:
1a:ec:8c:dc:25:b0:7c:5e:d9:04:68:c6:02:d8:79:
2d:f6:ff:5a:bb:61:8e:30:e2:c9:09:71:5e:72:30:
54:0a:de:af:a5:98:19:e2:fd:70:43:47:97:51:7c:
2d:68:b0:24:c2:d4:c6:5d:fe:c6:e0:a4:67:f2:e2:
96:26:47:9e:ed:07:d0:89:d5:45:2b:5a:18:65:ed:
f1:77:5f:6d:a1:9e:1c:8e:8e:a4:d5:2c:92:f0:69:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:05:54:88:C0:EE:53:AF:0F:D3:E1:99:62:EB:0E:14:CE:65:1C
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.32.0/23
Signature Algorithm: sha256WithRSAEncryption
30:43:9f:08:71:e6:f8:6e:ad:19:f0:7b:ac:bf:c8:aa:54:e7:
0d:e4:15:a3:41:63:b4:6f:e6:7b:55:56:8b:70:68:05:23:23:
ba:52:73:aa:0a:e2:88:26:4a:e8:22:67:2e:c8:b8:8e:a8:be:
bb:b8:c1:d5:a5:92:32:a6:a7:8c:ef:3f:b8:ae:1a:01:f3:29:
88:53:44:d3:cc:19:68:60:a9:b2:b9:61:10:88:d3:52:00:d8:
97:f7:76:13:5d:16:fd:3c:50:da:f9:82:72:d8:a9:3c:82:0c:
16:d6:58:f1:38:44:e1:0b:ed:56:60:4e:96:f2:09:5b:a1:d6:
e4:97:f9:2d:c0:08:41:bb:94:d9:12:36:6b:da:82:79:6e:e9:
85:9f:00:af:34:b9:08:8e:a1:a8:b0:e9:0f:7f:48:9e:9f:4b:
68:c7:8a:dc:dd:30:1d:a9:b4:a9:4b:c9:35:e5:bd:fa:56:0a:
64:28:40:6b:42:77:0a:7c:2a:dd:40:ef:22:a8:09:81:51:3a:
fa:6b:ef:36:e9:ca:a3:0d:33:09:f9:7c:fb:9c:8b:a6:4d:33:
64:b4:c5:b5:73:59:30:f9:55:cc:2d:0f:a5:c0:86:bf:24:d3:
d0:f1:ee:ca:33:a3:31:12:07:93:f9:6e:73:de:ec:1d:3e:a9:
97:d9:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:29 2026 by rpki-client