
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
File: 961F0878679311F0BBE7DC25C4F9AE02.roa (raw, json)
Hash identifier: 09BXnXWOchaIzXupV5IYG0epOwA0A3qEarHAXovPEF8=
Subject key identifier: 15:30:C5:F3:BB:BE:C8:C9:25:19:DD:E1:DB:F0:08:23:A2:98:2A:96
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 237F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:17:06 +0000
ROA not before: Fri 02 Oct 2026 15:17:06 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135935
IP address blocks: 148.222.82.0/23 maxlen: 23
148.222.82.0/24 maxlen: 24
148.222.83.0/24 maxlen: 24
148.222.88.0/23 maxlen: 23
148.222.88.0/24 maxlen: 24
148.222.89.0/24 maxlen: 24
148.222.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9087 (0x237f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:17:06 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcaf2-47b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:37:2e:0a:7f:48:6c:1c:60:f5:3f:57:79:
8f:5a:5b:84:fe:93:a6:ec:8f:69:04:07:4a:52:fa:
08:7b:08:ab:1b:e8:5d:3e:06:f4:fa:56:34:ad:3b:
70:dd:49:7c:1d:84:b9:b2:c2:7d:93:d0:df:64:d1:
ef:40:89:0d:51:b1:30:c4:44:26:73:48:a8:d0:1e:
fc:9e:03:ea:82:67:11:a1:c2:5d:b9:d8:ad:e6:58:
c8:1d:86:bc:b9:eb:33:bc:3f:01:d6:7a:99:9c:0a:
bd:01:e4:cc:e6:90:bc:28:fa:b3:8c:16:f6:71:8f:
25:50:04:4d:3c:68:0a:b3:19:03:7a:db:5d:03:48:
d1:89:85:79:8d:94:1a:6b:6c:52:19:a6:cc:f2:30:
95:8b:73:db:5a:1b:f4:fa:0f:3b:2a:99:6f:98:59:
d8:93:af:b0:53:43:4e:50:79:84:1e:57:dc:62:54:
52:3d:c9:98:47:11:54:3d:0e:a8:d7:f0:2c:8b:9b:
0c:a9:fb:b6:8d:66:5d:6e:ca:8f:ad:90:e4:06:44:
18:58:ac:38:fe:76:61:1f:5a:d9:82:17:39:a3:d9:
df:93:a0:61:04:d8:2e:7e:db:27:df:e4:4e:e1:2c:
f0:ff:f2:ab:03:39:5e:e5:77:bf:6c:2b:69:28:55:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:C5:F3:BB:BE:C8:C9:25:19:DD:E1:DB:F0:08:23:A2:98:2A:96
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
148.222.82.0/23
148.222.88.0/23
148.222.94.0/24
Signature Algorithm: sha256WithRSAEncryption
19:12:ca:dc:eb:0d:a2:ee:97:f9:7a:2a:bd:00:83:5c:27:c7:
ef:a9:f4:6a:6c:e7:be:13:12:b8:08:7f:21:91:f1:4d:41:cc:
b7:7e:81:c2:af:fb:ab:24:40:4b:b7:55:0e:fe:5b:d0:5b:3e:
63:08:c0:e2:e3:0c:d1:87:8f:39:ab:99:d5:a5:e9:cd:9f:b8:
24:59:bb:be:6d:b3:58:b9:ef:6d:2c:96:39:2a:73:d9:c0:93:
ea:3e:fe:ca:56:b3:c0:ca:0d:96:4c:6c:77:14:bd:b6:b3:4a:
38:a5:0a:0d:96:90:ed:a5:91:b4:7d:43:db:53:75:a3:32:d6:
ce:36:a7:1b:c1:f6:b7:1b:6a:5a:43:77:40:97:88:bd:7c:36:
bc:74:3c:22:64:2e:6d:ff:ec:a1:e6:f8:f1:6c:70:95:5e:fe:
6d:5a:62:8a:d1:73:71:02:d4:67:a9:9d:be:4e:b4:ca:8e:3b:
ef:12:92:33:4a:15:09:34:2e:02:ce:82:8b:6b:d8:af:2d:76:
20:e6:d8:aa:dd:3f:96:95:bf:ee:c1:a8:ce:3d:2b:9b:69:23:
c1:ad:98:a8:e6:58:cc:61:80:0d:58:1f:45:5a:eb:b7:59:40:
6c:35:83:8f:cb:9d:94:35:f0:4d:46:6e:53:8b:c5:53:63:8d:
21:50:11:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:56 2026 by rpki-client