
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5F7F3BD0657B11F18CD3FF686647A888.roa
File: 5F7F3BD0657B11F18CD3FF686647A888.roa (raw, json)
Hash identifier: jRUFRETbn6JiyOd2dZr8SzJtGQWqj/Cwp+eDo7OdmXo=
Subject key identifier: 57:C2:84:39:B1:09:3D:FE:F2:19:0A:34:80:DC:F1:3D:52:9A:1C:46
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23E5
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5F7F3BD0657B11F18CD3FF686647A888.roa
Signing time: Fri 02 Oct 2026 15:20:40 +0000
ROA not before: Fri 02 Oct 2026 15:20:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154082
IP address blocks: 165.101.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9189 (0x23e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:20:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcbc8-c869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:39:56:b4:40:e2:9b:19:5d:00:f4:77:d3:9c:
bd:fa:4d:07:28:11:41:23:d2:46:52:37:e9:d6:23:
79:c9:c2:95:0d:ab:d3:1b:cd:8e:62:d1:6a:e6:26:
00:43:1b:bd:6c:59:b2:f9:e2:eb:e5:29:dd:57:ae:
be:9e:94:69:55:eb:ca:39:cf:be:a5:27:b2:d8:7c:
05:c6:f9:24:37:18:94:73:96:77:27:aa:c6:e2:1f:
ba:94:5c:cf:09:2b:59:db:4b:55:8c:1a:6b:19:e1:
09:ca:28:9a:d5:e3:76:af:5f:81:d9:79:d8:90:89:
ba:03:82:38:4b:3d:5e:32:c9:90:fc:c2:e8:0a:0a:
d4:f4:09:37:29:b7:f6:6f:b6:15:ab:0e:8b:9d:dd:
db:7b:e2:2e:70:82:c1:2b:6f:11:28:bd:ce:3c:72:
00:1c:48:e0:59:84:f7:86:5f:75:d7:02:a4:76:e9:
22:82:f8:66:88:12:ce:b2:ca:1d:36:dc:c1:0b:d2:
4e:98:3f:81:4c:2a:50:e1:8e:27:af:78:18:0e:bb:
d2:ef:72:8e:59:1d:ff:35:0a:84:cf:69:aa:04:43:
bf:50:ea:bb:f3:69:d4:8d:29:70:b4:c4:9d:30:b9:
ae:d8:2b:d1:0e:54:b3:8d:35:0c:7b:1b:41:bf:91:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:84:39:B1:09:3D:FE:F2:19:0A:34:80:DC:F1:3D:52:9A:1C:46
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5F7F3BD0657B11F18CD3FF686647A888.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.252.0/23
Signature Algorithm: sha256WithRSAEncryption
58:c1:ed:40:1e:c7:a3:ce:57:0b:2a:27:b1:f3:2f:d8:5c:23:
6c:12:cb:5b:8f:88:6e:2e:10:84:b5:15:23:da:45:3e:b4:75:
48:57:f9:58:8d:24:1e:ea:3b:e3:94:ee:6e:ea:ac:8f:f9:2e:
57:f3:c1:dd:64:b3:14:a7:85:a5:dd:02:a6:04:82:fb:38:57:
be:f2:6e:55:8b:f8:cc:10:64:fa:60:25:73:46:a1:92:7b:19:
b8:f6:a3:4b:5a:7d:ee:8f:78:7c:2f:72:11:cd:b4:6d:45:b9:
d7:fd:25:1e:b0:8e:1f:41:c9:8b:16:a0:29:36:b5:f3:8f:de:
47:9f:95:bc:e6:7d:11:37:5e:eb:26:b9:d4:68:5b:5e:ac:b4:
d7:45:9f:eb:e4:71:55:32:a3:da:e5:50:48:f1:ad:62:88:23:
d3:19:9f:56:41:3a:84:05:b9:a9:7d:75:ae:be:04:f6:c5:df:
0e:10:a6:4d:fd:ce:54:ed:1d:5e:86:1b:9c:cc:55:96:bd:30:
09:8a:23:6f:c9:c7:c6:66:15:dc:ad:f4:f8:43:ec:8d:20:3c:
f7:7a:5e:03:b7:ee:21:c1:20:c2:b4:81:99:1f:65:31:ec:04:
16:e8:97:7a:59:3b:3c:37:4c:82:3a:be:da:1c:6b:c4:46:c1:
bc:50:56:d5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUyMDQwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2JjOC1jODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTlWtEDimxldAPR305y9+k0HKBFBI9JGUjfp1iN5ycKVDavTG82OYtFq5iYA
Qxu9bFmy+eLr5SndV66+npRpVevKOc++pSey2HwFxvkkNxiUc5Z3J6rG4h+6lFzP
CStZ20tVjBprGeEJyiia1eN2r1+B2XnYkIm6A4I4Sz1eMsmQ/MLoCgrU9Ak3Kbf2
b7YVqw6Lnd3be+IucILBK28RKL3OPHIAHEjgWYT3hl911wKkdukigvhmiBLOssod
NtzBC9JOmD+BTCpQ4Y4nr3gYDrvS73KOWR3/NQqEz2mqBEO/UOq782nUjSlwtMSd
MLmu2CvRDlSzjTUMextBv5FtMwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFfChDmx
CT3+8hkKNIDc8T1SmhxGMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUY3RjNCRDA2
NTdCMTFGMThDRDNGRjY4NjY0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWX8MA0GCSqGSIb3DQEBCwUAA4IBAQBYwe1AHsejzlcLKiex8y/Y
XCNsEstbj4huLhCEtRUj2kU+tHVIV/lYjSQe6jvjlO5u6qyP+S5X88HdZLMUp4Wl
3QKmBIL7OFe+8m5Vi/jMEGT6YCVzRqGSexm49qNLWn3uj3h8L3IRzbRtRbnX/SUe
sI4fQcmLFqApNrXzj95Hn5W85n0RN17rJrnUaFterLTXRZ/r5HFVMqPa5VBI8a1i
iCPTGZ9WQTqEBbmpfXWuvgT2xd8OEKZN/c5U7R1ehhuczFWWvTAJiiNvycfGZhXc
rfT4Q+yNIDz3el4Dt+4hwSDCtIGZH2Ux7AQW6Jd6WTs8N0yCOr7aHGvERsG8UFbV
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:38:47 2026 by rpki-client