
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/554A2D46AB0A11EF96A1610EC4F9AE02.roa
File: 554A2D46AB0A11EF96A1610EC4F9AE02.roa (raw, json)
Hash identifier: zlcqxoLzmhX09dELiaKltKeFREAZ6CCjNQzWDQyLu1w=
Subject key identifier: 91:B2:B0:8A:6F:7B:B9:04:0B:57:9B:56:C6:18:9F:27:DF:0D:82:50
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 213F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/554A2D46AB0A11EF96A1610EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:22:08 +0000
ROA not before: Thu 28 Aug 2025 14:51:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153403
IP address blocks: 160.191.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8511 (0x213f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61ba0-d456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:68:dd:75:15:15:70:92:49:b5:fd:c4:11:
63:81:33:fb:81:b2:3c:2b:7f:cd:d9:83:b5:5f:6e:
20:db:d7:17:80:34:b1:f7:bd:14:c4:8a:0e:83:3c:
26:03:9b:67:0f:88:68:7a:ad:fa:6c:12:eb:e5:5e:
e5:54:13:14:de:45:d2:f9:c4:6b:ad:ea:b3:78:b0:
e9:79:1e:e5:b1:a9:d1:40:58:65:c4:0d:63:a5:55:
ec:9b:22:92:36:ce:cb:1c:3a:a5:39:a3:29:14:0c:
dd:84:d2:e1:ce:df:79:c1:5e:c6:91:94:47:a4:77:
0a:ec:90:df:02:18:53:ed:d1:42:d9:39:0f:f4:ba:
55:c1:a0:78:9a:73:fc:cd:4c:92:98:4c:1b:a4:00:
37:71:83:6d:a0:b0:69:96:4b:2b:c4:11:97:4d:cd:
08:f6:b6:2d:35:e9:8c:73:da:d2:fb:b7:3b:cc:4c:
a2:1e:f5:29:9b:75:cb:4f:48:70:5b:cb:03:9f:06:
86:79:25:3a:ae:a2:65:0a:52:f7:64:cc:f6:69:b3:
80:61:5e:33:62:4b:e6:c1:4d:1e:82:56:a5:af:5c:
08:0f:45:06:a4:7e:12:fa:06:7d:10:59:43:de:6c:
ba:93:54:96:bf:b0:f7:da:79:a6:f7:ac:3a:4a:5f:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:B0:8A:6F:7B:B9:04:0B:57:9B:56:C6:18:9F:27:DF:0D:82:50
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/554A2D46AB0A11EF96A1610EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.166.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:a2:00:c5:77:0c:ea:5c:fa:39:e6:cd:de:f5:1b:3d:23:2c:
55:07:90:8e:dd:b3:92:de:6f:eb:82:78:b9:24:a3:47:d6:f0:
fa:06:56:07:7c:ea:f1:5a:ef:66:1b:ae:68:09:ee:2d:03:1b:
96:65:b1:53:7d:f2:0c:b2:cc:ef:39:42:cb:e4:d1:70:a1:22:
a8:02:f6:61:45:22:ee:f9:0d:c3:8b:d5:bb:7c:9c:fb:ea:a0:
9c:92:ba:54:7a:e3:54:f0:4e:f5:b9:a3:f8:39:76:6b:9a:27:
e0:de:b7:2b:65:d4:35:1c:25:73:ba:28:8c:e9:17:2e:d8:c0:
fc:73:13:4c:92:96:0a:8f:a8:13:69:41:10:0b:05:b4:25:1d:
e1:2b:3a:22:90:ca:ff:2e:c2:a0:58:24:2a:db:b4:99:1f:f2:
38:95:de:ff:4f:cb:92:39:15:53:b8:ea:e8:2d:30:43:a7:4c:
71:f0:8f:bc:83:51:0f:ed:eb:c1:3b:ac:73:9a:36:81:c6:9a:
19:18:58:bb:35:39:de:84:12:a8:60:c9:aa:1d:f4:f3:0b:f6:
1d:47:ea:74:6c:e0:98:74:af:5d:b0:07:e4:94:b3:eb:5d:c5:
7a:ed:85:c9:dd:aa:e6:2c:40:8e:c5:66:71:18:c5:19:74:7d:
31:64:59:71
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWJhMC1kNDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtElo3XUVFXCSSbX9xBFjgTP7gbI8K3/N2YO1X24g29cXgDSx970UxIoOgzwm
A5tnD4hoeq36bBLr5V7lVBMU3kXS+cRrreqzeLDpeR7lsanRQFhlxA1jpVXsmyKS
Ns7LHDqlOaMpFAzdhNLhzt95wV7GkZRHpHcK7JDfAhhT7dFC2TkP9LpVwaB4mnP8
zUySmEwbpAA3cYNtoLBplksrxBGXTc0I9rYtNemMc9rS+7c7zEyiHvUpm3XLT0hw
W8sDnwaGeSU6rqJlClL3ZMz2abOAYV4zYkvmwU0eglalr1wID0UGpH4S+gZ9EFlD
3my6k1SWv7D32nmm96w6Sl9JLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJGysIpv
e7kEC1ebVsYYnyffDYJQMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNTU0QTJENDZB
QjBBMTFFRjk2QTE2MTBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoL+mMA0GCSqGSIb3DQEBCwUAA4IBAQBfogDFdwzqXPo55s3e9Rs9
IyxVB5CO3bOS3m/rgni5JKNH1vD6BlYHfOrxWu9mG65oCe4tAxuWZbFTffIMsszv
OULL5NFwoSKoAvZhRSLu+Q3Di9W7fJz76qCckrpUeuNU8E71uaP4OXZrmifg3rcr
ZdQ1HCVzuiiM6Rcu2MD8cxNMkpYKj6gTaUEQCwW0JR3hKzoikMr/LsKgWCQq27SZ
H/I4ld7/T8uSORVTuOroLTBDp0xx8I+8g1EP7evBO6xzmjaBxpoZGFi7NTnehBKo
YMmqHfTzC/YdR+p0bOCYdK9dsAfklLPrXcV67YXJ3armLECOxWZxGMUZdH0xZFlx
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:35 2026 by rpki-client