
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
File: 961F0878679311F0BBE7DC25C4F9AE02.roa (raw, json)
Hash identifier: LwLSTmqSsyQLL04Afrh9BgV8ukjPVwF4IOSrEXkXuZ4=
Subject key identifier: D8:14:D8:18:D2:EF:1E:4C:B0:3A:CE:F9:CD:F6:94:AF:75:45:66:42
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2114
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:21:26 +0000
ROA not before: Fri 30 Jan 2026 09:49:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135935
IP address blocks: 148.222.82.0/24 maxlen: 24
148.222.83.0/24 maxlen: 24
148.222.88.0/24 maxlen: 24
148.222.89.0/24 maxlen: 24
148.222.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8468 (0x2114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jan 30 09:49:45 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61b76-2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:d3:67:aa:4f:c6:a4:b3:96:14:71:bc:d4:
36:34:44:17:53:25:ce:44:6b:52:4a:db:9d:9f:1c:
23:80:7b:f7:39:69:31:6c:d6:32:7a:6a:5e:51:c1:
5f:3e:04:95:25:19:d5:7a:05:9e:95:39:e5:4b:62:
12:91:e3:83:a6:77:d6:b6:1a:ac:08:bc:2e:d8:20:
91:67:ab:92:4e:11:d8:04:a9:39:38:70:d4:84:21:
e9:ef:fd:9a:77:2b:e9:42:ba:8b:ad:cf:66:7c:69:
82:29:82:ef:46:8d:15:47:75:1f:63:3c:4f:af:b6:
c7:3f:76:40:df:0a:b4:4d:9a:df:d0:84:94:06:69:
d1:35:c0:c7:83:c4:05:ea:7c:6f:3f:b1:69:87:65:
15:31:d1:78:3e:14:9f:34:ca:6f:49:bf:dc:75:1e:
aa:96:d9:cd:af:b7:14:b4:42:5b:21:dc:c7:78:07:
b2:8f:13:f0:35:29:fc:d5:27:25:7f:07:12:16:f2:
0e:f0:43:95:5e:a2:91:2b:ea:1f:56:59:4d:28:ba:
87:55:04:5c:9d:1b:6c:71:5c:bf:89:e7:bc:0d:b1:
59:c3:73:4e:8d:c7:da:e2:b9:54:10:f2:45:ed:63:
a0:07:55:a5:99:0a:6c:2c:75:72:bb:21:c8:8a:ae:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:14:D8:18:D2:EF:1E:4C:B0:3A:CE:F9:CD:F6:94:AF:75:45:66:42
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
148.222.82.0/23
148.222.88.0/23
148.222.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fd:89:e0:f3:7f:ec:a1:60:c1:73:81:3b:09:9b:b0:f1:8f:
26:a2:2d:95:c5:9e:9f:33:9d:91:90:14:94:b6:44:04:f4:df:
d2:22:64:b6:8a:b5:df:81:83:bb:86:4b:de:2c:d7:ca:9b:3b:
5f:01:61:72:39:52:19:2c:ee:19:00:fc:00:44:52:f0:c1:3e:
de:b8:03:cb:d3:64:25:68:f5:81:4a:0c:65:a4:57:f9:2b:7b:
0b:a1:19:13:8f:38:1d:fc:e2:eb:8b:9f:29:ee:e3:c7:cb:11:
9e:87:99:b1:83:1f:70:48:73:e5:05:f5:11:67:88:37:44:b4:
70:1c:30:7c:61:91:a6:0a:51:ff:41:8d:66:f8:9e:16:b2:34:
a5:63:ea:41:07:5d:4c:2b:a3:27:c1:24:de:31:ef:c5:97:69:
04:20:4b:e7:0b:1f:38:03:7c:8c:71:31:b0:59:1c:95:4a:68:
15:cd:d7:62:31:b2:fc:2a:5c:0e:18:fa:c9:cb:65:95:df:fb:
ed:9a:61:b9:e7:6d:43:66:d8:00:88:c9:31:56:39:72:f3:ff:
31:e7:ff:05:d7:00:db:cf:1f:07:1c:eb:01:b4:8e:6d:27:e4:
96:89:9b:d8:a4:74:f6:a7:46:95:8f:99:58:f4:84:16:ab:fe:
ae:c6:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:57 2026 by rpki-client