
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa
File: 901608029DA211EF97708810C4F9AE02.roa (raw, json)
Hash identifier: 0SCNqBx3CotSAb2bze17kmtQNxWT8mGDy5x/liLQgdo=
Subject key identifier: 97:7C:11:02:99:24:A0:C1:38:66:71:A2:47:9D:67:C3:E1:2D:01:B4
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2140
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:22:09 +0000
ROA not before: Thu 28 Aug 2025 14:51:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153032
IP address blocks: 160.191.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8512 (0x2140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61ba1-e824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:a5:21:f4:53:76:f6:bd:04:b7:bf:44:67:
e3:50:fb:b8:d5:2f:2a:a5:96:0a:2a:ec:08:f1:72:
5e:16:95:1b:79:3d:84:99:04:76:45:13:e7:32:a6:
4c:35:fb:ca:20:75:f5:ad:ba:e0:63:5d:1f:41:28:
90:5e:ea:36:db:4d:1f:8c:79:1c:a0:55:37:f7:33:
4f:a6:73:65:f0:1d:8c:59:94:23:80:f4:72:72:35:
f1:13:58:58:eb:e2:00:43:21:95:f9:3b:dd:d5:30:
57:28:9d:e6:ae:eb:19:4d:75:06:93:d4:aa:1e:ca:
93:c1:58:1a:70:11:19:c8:15:7c:fe:36:09:21:8f:
ab:0e:33:a0:51:fd:d9:09:5d:74:db:ff:21:2e:a6:
4a:6b:4d:51:a2:41:12:70:c9:20:d9:3d:9a:b5:ba:
89:b1:c0:c6:12:02:08:53:10:6e:5d:ed:0f:87:30:
0f:27:24:ac:37:a9:f1:91:ac:22:13:2f:06:0d:55:
0c:e9:54:c8:8d:3c:08:6a:54:02:1f:05:a4:1e:31:
37:02:f9:8e:76:51:6e:98:fb:02:d7:37:84:0a:c0:
54:4b:d7:f9:dd:2a:bb:36:a9:49:1f:2b:de:49:55:
94:31:10:fd:eb:40:5c:62:de:9a:ea:9c:e7:11:8d:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7C:11:02:99:24:A0:C1:38:66:71:A2:47:9D:67:C3:E1:2D:01:B4
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ce:0a:cf:ce:fc:2f:e4:4f:9a:c6:2e:0d:66:d9:66:73:a8:
46:a1:6c:ec:41:a5:20:72:07:73:f4:99:38:0a:be:72:98:21:
9a:a7:28:c9:09:29:5b:14:e3:a5:70:77:01:ae:ec:98:f2:ea:
3d:70:cc:df:b9:4e:9a:7d:60:fe:31:c6:1c:6c:e3:49:c8:8f:
b5:b0:c2:10:fa:bf:f2:9b:64:e5:51:4d:64:52:2c:ff:ab:bb:
08:dc:32:a6:53:8f:52:26:42:07:67:c2:61:b6:de:c6:c6:67:
e4:9f:34:8b:2f:f4:47:19:4c:11:06:43:52:8d:d6:cc:c3:09:
6b:05:79:fb:58:85:01:44:e6:4d:da:5f:98:26:6a:95:b6:7c:
52:2e:55:a8:cd:32:39:26:21:15:41:01:29:bb:b4:50:ea:28:
c7:ab:4c:57:6c:08:62:1e:ce:1e:b5:29:6c:43:72:57:54:5e:
45:8b:a2:75:11:bf:5f:52:f6:9d:3c:00:1c:86:29:28:56:66:
69:00:d6:9c:a8:91:db:62:6c:60:f8:ee:8f:78:de:a9:69:58:
38:c2:12:0d:e6:1d:5f:40:12:9f:bd:af:52:e3:71:e0:b7:ab:
c4:4e:20:08:51:9c:9f:1b:2c:21:47:66:fe:7e:e7:b1:9f:0b:
f1:7b:97:01
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWJhMS1lODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nmlIfRTdva9BLe/RGfjUPu41S8qpZYKKuwI8XJeFpUbeT2EmQR2RRPnMqZM
NfvKIHX1rbrgY10fQSiQXuo2200fjHkcoFU39zNPpnNl8B2MWZQjgPRycjXxE1hY
6+IAQyGV+Tvd1TBXKJ3mrusZTXUGk9SqHsqTwVgacBEZyBV8/jYJIY+rDjOgUf3Z
CV102/8hLqZKa01RokEScMkg2T2atbqJscDGEgIIUxBuXe0PhzAPJySsN6nxkawi
Ey8GDVUM6VTIjTwIalQCHwWkHjE3AvmOdlFumPsC1zeECsBUS9f53Sq7NqlJHyve
SVWUMRD960BcYt6a6pznEY2U+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJd8EQKZ
JKDBOGZxokedZ8PhLQG0MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOTAxNjA4MDI5
REEyMTFFRjk3NzA4ODEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoL+SMA0GCSqGSIb3DQEBCwUAA4IBAQB9zgrPzvwv5E+axi4NZtlm
c6hGoWzsQaUgcgdz9Jk4Cr5ymCGapyjJCSlbFOOlcHcBruyY8uo9cMzfuU6afWD+
McYcbONJyI+1sMIQ+r/ym2TlUU1kUiz/q7sI3DKmU49SJkIHZ8Jhtt7GxmfknzSL
L/RHGUwRBkNSjdbMwwlrBXn7WIUBROZN2l+YJmqVtnxSLlWozTI5JiEVQQEpu7RQ
6ijHq0xXbAhiHs4etSlsQ3JXVF5Fi6J1Eb9fUvadPAAchikoVmZpANacqJHbYmxg
+O6PeN6paVg4whIN5h1fQBKfva9S43Hgt6vETiAIUZyfGywhR2b+fuexnwvxe5cB
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:56 2026 by rpki-client