
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
File: 5D5359F8E3AA11EFA9ED913FC4F9AE02.roa (raw, json)
Hash identifier: 0Gav8VfnxuKk2QteVB1JN8YEsgjM0yhjaDptNwv9Uiw=
Subject key identifier: 65:AE:63:26:23:74:A7:88:D2:99:57:B3:72:E1:72:28:7A:FA:AB:9B
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23DE
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:20:26 +0000
ROA not before: Fri 02 Oct 2026 15:20:25 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153543
IP address blocks: 161.248.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9182 (0x23de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:20:25 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcbb9-6711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:7b:24:bb:ac:f2:fe:e1:11:08:71:13:05:
21:d9:cf:bd:a5:b9:37:04:8b:90:9d:40:65:f5:f5:
56:59:76:2f:b9:9b:8b:f7:88:15:c2:7c:cf:0a:94:
1d:36:71:92:59:98:1b:85:73:c6:61:3b:71:fb:77:
a6:2f:37:2e:6c:1a:83:c9:c5:3a:fa:b2:0a:51:3b:
fb:9b:a0:78:64:84:e3:6d:ab:83:19:93:7d:65:57:
5c:7e:c7:91:a4:7a:cb:4c:cd:a7:b4:43:6b:21:7b:
06:d9:aa:02:9b:5d:f5:15:45:75:f3:86:a4:4e:9a:
9e:4d:6c:b5:37:f6:4e:8b:ec:8e:22:54:bf:99:4d:
c6:61:ba:0b:63:0a:cd:60:fb:fe:79:9d:3b:c5:62:
b9:24:e6:f9:4f:f9:2e:dc:60:22:44:da:0c:ba:c9:
44:3b:fd:47:0e:3d:e9:d7:d3:dc:b3:c5:a4:2f:c6:
ba:f3:5a:43:73:0f:2c:17:52:57:79:92:cf:38:ae:
62:29:2a:fc:cf:47:57:c8:95:d3:dc:35:5c:2c:9e:
93:70:e2:bd:6b:bc:85:79:2c:e1:e5:82:f9:45:a1:
92:46:5d:f2:af:53:6b:d7:11:ec:ca:b6:ee:f8:2e:
60:6f:a6:d5:38:f0:85:48:87:09:0a:4d:1c:0a:3e:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:63:26:23:74:A7:88:D2:99:57:B3:72:E1:72:28:7A:FA:AB:9B
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.212.0/23
Signature Algorithm: sha256WithRSAEncryption
46:20:bd:61:73:df:1e:bd:3f:bb:5b:63:f9:69:4b:ef:3c:3e:
ef:a2:f4:9f:1f:e2:73:43:bd:99:3f:21:cc:fa:81:ef:b2:91:
87:18:5d:0c:ba:59:8d:ce:cf:06:c1:e2:a4:0e:fe:5b:19:f7:
f5:a3:53:72:da:08:30:f9:82:6c:c4:72:12:c3:2e:fa:fd:5d:
0e:a1:e6:3e:1e:00:f6:69:e0:37:45:19:d3:dd:11:7d:12:da:
66:65:8f:b9:71:6b:d9:4e:be:83:63:fe:d9:c9:22:94:4a:db:
52:c4:bc:2a:93:d7:96:e2:ff:69:e3:bd:39:11:9b:32:0e:28:
9b:02:1b:6a:b4:05:f4:57:2a:18:69:e0:58:9b:b0:1a:18:c8:
e2:e8:ee:05:13:ef:da:ea:23:b8:ed:55:06:f9:f6:ca:b0:b5:
8f:b6:5d:c1:d6:4c:99:cf:87:3f:2b:b7:1b:77:9c:96:0f:d8:
22:b9:09:03:90:69:23:2f:f8:3f:42:d1:8c:41:b3:c9:07:f0:
fd:ff:77:ae:d6:c2:f2:73:d1:4e:24:08:ec:eb:16:a8:96:f0:
32:5c:5d:75:a9:fe:fb:de:66:65:58:a4:17:89:a5:ac:4d:1c:
42:8d:87:22:61:d4:b4:3d:ba:99:ee:46:15:e2:07:9a:8f:7b:
18:04:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:47 2026 by rpki-client