
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
File: 5FFE79CEB30E11F0B1F91F33C4F9AE02.roa (raw, json)
Hash identifier: k/1bVqOykw/vl2a8g4a6Od8wdW+u8v6ejTRUwJxvmgs=
Subject key identifier: D1:A8:31:9E:03:17:C8:D8:74:9A:FA:A1:35:00:04:AF:A6:22:E3:7B
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23D0
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:19:56 +0000
ROA not before: Fri 02 Oct 2026 15:19:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153410
IP address blocks: 160.191.230.0/23 maxlen: 23
165.101.38.0/23 maxlen: 24
165.101.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9168 (0x23d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:19:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb9c-b1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:9a:6a:59:fd:97:8a:7d:95:a7:96:ad:ff:
28:62:e6:88:fc:d0:59:bd:61:3c:40:ab:a7:80:de:
00:06:96:c7:e9:7c:e8:8b:61:62:52:65:79:e9:4f:
db:16:f3:e1:38:3f:d6:03:d2:ba:a7:ce:42:2d:05:
f4:b1:8e:61:72:16:66:f1:15:59:1d:df:b8:14:0d:
88:45:c9:31:0d:f6:5a:35:6a:e5:89:96:c1:97:44:
5e:d2:d1:29:1d:a6:c4:67:92:44:09:a2:da:6b:03:
92:f7:24:b4:09:dd:63:cf:77:c5:f4:79:e1:f5:53:
2a:e6:64:9a:75:d8:e0:b9:b6:0a:fb:7f:eb:f6:4d:
51:9e:76:09:43:1f:6e:59:84:be:f2:4e:73:6c:9c:
0a:c4:16:69:49:e1:74:93:49:4c:2b:28:fe:ee:96:
e0:a9:42:ff:9a:9c:46:65:fe:e7:e7:f6:82:ed:81:
2f:26:4b:98:38:ce:c4:31:11:74:6e:f4:ff:f7:59:
05:ae:9a:a0:71:fb:07:8e:c4:50:27:8b:c3:98:4b:
35:f3:6d:a3:85:48:87:5e:65:66:74:7d:7a:e7:c8:
c8:74:4d:fb:b7:45:a2:c7:9d:a1:d5:d7:dd:a5:48:
a0:35:f9:fe:08:a1:54:53:46:3f:89:26:66:fa:f3:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:31:9E:03:17:C8:D8:74:9A:FA:A1:35:00:04:AF:A6:22:E3:7B
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.230.0/23
165.101.38.0-165.101.41.255
Signature Algorithm: sha256WithRSAEncryption
a7:f7:89:29:5f:9c:01:70:c3:3b:6c:1f:44:62:03:93:dc:fd:
5e:bb:43:be:c4:44:6a:7c:72:91:e5:a6:6f:6b:1c:a4:55:d1:
15:e2:90:02:73:b7:3c:0d:38:40:76:21:28:dd:0c:38:7c:28:
4e:76:0b:fa:45:1a:17:fd:9c:02:4d:9b:03:b6:62:97:2e:75:
49:47:7c:5a:29:18:8f:76:bc:40:36:d2:25:4c:fd:e8:45:14:
cb:fa:b2:64:3f:2a:4d:78:7d:56:82:f7:b7:88:32:c2:dc:e2:
56:d6:81:25:80:6a:50:fd:dc:9b:e7:31:7c:98:cb:83:1d:cf:
bd:9a:69:a2:b9:5b:0e:d8:e0:b9:81:45:82:38:73:a5:9c:aa:
81:db:ba:9d:e3:64:ce:e5:27:5e:dd:67:3b:e2:51:32:12:a2:
bb:bb:5d:44:00:6e:c1:92:d4:7e:b3:0d:07:f3:4d:e0:03:82:
92:85:65:47:78:43:4b:d7:0a:2c:58:f8:13:69:ce:70:13:3c:
81:3e:9e:fb:3b:3a:d1:ae:9b:26:c5:16:88:d5:da:21:1c:b3:
36:9f:1e:fb:fa:5b:67:f9:0e:4d:08:3e:1c:ec:7f:47:0e:5d:
eb:35:36:e1:9c:f4:51:b0:1e:46:b4:91:5e:bb:50:52:be:6b:
ce:65:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:55:19 2026 by rpki-client