
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
File: 981C74DC8A0611EFBA8EF824C4F9AE02.roa (raw, json)
Hash identifier: KB664V6TCGU3QPLBbXMI+CBOM+7seYiwNE3JuAfNzdI=
Subject key identifier: B7:F8:35:A0:08:7A:3F:A9:C4:97:7F:B0:89:A4:55:E8:15:2B:26:EF
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23C8
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:19:40 +0000
ROA not before: Fri 02 Oct 2026 15:19:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153004
IP address blocks: 160.187.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9160 (0x23c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:19:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb8c-7f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:0a:43:8d:c7:42:18:de:27:b1:25:b3:a5:
83:4e:42:ca:63:0d:5d:1f:a8:32:bc:de:82:dd:e8:
e0:50:ab:5d:a5:d1:24:47:cf:b1:bf:e3:62:e7:1c:
ec:b5:85:b6:b7:da:2d:0d:25:c9:25:72:39:11:e4:
d1:de:9e:d8:20:1b:de:a2:2d:d1:29:4b:e0:91:79:
bb:b3:15:cd:c7:48:6d:a0:42:82:50:29:51:6a:7c:
79:bc:47:54:f6:ba:3f:46:fd:17:9e:8b:39:ca:77:
93:28:58:01:5e:8d:18:97:6e:e6:6c:8b:7d:0a:e7:
16:46:2d:22:a1:99:ed:27:17:f9:c7:cc:2b:5e:53:
16:15:68:e6:74:3b:9c:e1:f7:48:36:9a:cc:5a:ac:
15:11:a5:9f:50:6e:fc:aa:c2:70:bb:03:06:65:ab:
93:1b:1d:7f:5d:af:0d:9a:a6:19:a5:85:95:4d:25:
51:2b:a2:fb:8f:87:ad:75:5e:08:6c:f5:95:7c:5c:
f1:b1:5d:e9:6f:85:f3:5f:7f:d6:29:c6:49:04:e8:
bb:82:00:2c:ba:3b:13:4f:22:36:bc:79:d1:9c:2c:
84:af:18:4d:29:5a:e9:8e:22:49:06:71:7c:67:96:
26:79:2a:c1:14:23:89:42:6d:0c:1d:05:f5:40:68:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F8:35:A0:08:7A:3F:A9:C4:97:7F:B0:89:A4:55:E8:15:2B:26:EF
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.152.0/23
Signature Algorithm: sha256WithRSAEncryption
97:08:8f:07:b8:ea:3c:63:a6:a0:98:11:45:1d:ee:98:71:b3:
88:d1:e1:f4:a6:58:61:67:4d:50:0f:57:a0:37:85:78:51:79:
39:6b:a1:99:25:72:b2:f1:29:cf:c9:d7:f6:9a:be:a1:5e:06:
9c:36:3e:a2:8c:01:b7:c1:6d:8a:98:7c:5e:dc:76:da:41:3b:
ca:b1:bb:97:32:cf:92:8e:3f:ca:b8:d8:99:c4:8a:f4:b7:cb:
7c:f9:98:a4:75:2a:52:91:fa:0f:d3:63:41:24:bc:41:a3:50:
f3:7d:6c:92:5b:ae:a9:33:48:81:39:95:e0:d7:bc:f0:c5:53:
d6:9c:39:46:60:ab:d2:71:06:59:28:8e:61:de:41:c9:a4:88:
50:fe:ca:71:53:b9:d0:f9:38:e0:af:6b:90:29:22:27:e0:e6:
20:b7:a4:b3:30:12:6f:71:ba:8a:27:86:b8:3d:52:2d:59:b9:
d1:21:7a:12:ac:d1:09:15:c4:95:11:8e:c9:5f:e0:13:f0:6b:
36:6f:f3:64:1c:dc:be:db:11:3e:27:05:b2:d5:42:1d:6e:68:
d6:7c:74:e4:b8:b4:18:b7:c1:d9:19:2e:99:24:43:a6:20:d1:
2b:93:ed:1d:ee:2b:0b:31:83:aa:3e:5c:8e:74:a7:b8:b4:3a:
f9:76:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:54:55 2026 by rpki-client