
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9998B308768A11F18379E3C263A30FBC.roa
File: 9998B308768A11F18379E3C263A30FBC.roa (raw, json)
Hash identifier: 5cXcR3nj1wwZThZ6/Y0y331vkCCCByORJE6FgttnWnI=
Subject key identifier: 4F:32:98:52:66:7E:AE:B3:05:5B:1D:76:F9:46:07:34:A5:78:E8:49
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2310
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9998B308768A11F18379E3C263A30FBC.roa
Signing time: Fri 03 Jul 2026 02:55:08 +0000
ROA not before: Fri 03 Jul 2026 02:55:08 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140822
IP address blocks: 160.30.254.0/23 maxlen: 23
160.187.88.0/23 maxlen: 23
160.187.90.0/23 maxlen: 23
160.187.242.0/23 maxlen: 23
160.187.244.0/23 maxlen: 23
160.191.92.0/23 maxlen: 23
160.191.94.0/23 maxlen: 23
160.191.98.0/23 maxlen: 23
160.191.216.0/23 maxlen: 23
160.191.218.0/23 maxlen: 23
160.191.222.0/23 maxlen: 23
160.191.252.0/23 maxlen: 23
160.250.0.0/23 maxlen: 23
160.250.2.0/23 maxlen: 23
160.250.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8976 (0x2310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jul 3 02:55:08 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a47248c-ee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:7f:44:e9:f8:03:52:50:7d:fd:7b:fe:11:
da:b0:26:2f:d5:96:ce:70:7c:a4:b1:a6:53:2d:ca:
9a:41:c4:83:46:c2:b0:23:23:61:18:93:a5:f2:34:
f4:40:d9:f1:fc:98:76:ae:fe:6f:d2:14:fe:30:86:
77:b1:31:0e:77:7a:d5:b3:c7:47:1f:35:f5:10:46:
c2:7d:07:e2:93:80:b0:b8:64:f9:ad:b4:f2:fa:e8:
d8:69:9b:53:55:d3:33:81:39:57:be:65:5c:bf:2d:
81:00:2c:81:2e:92:5c:4b:89:7a:d2:64:21:39:6c:
28:4f:d3:30:e3:47:42:2f:44:30:17:e9:52:40:22:
81:b6:8e:2e:e4:72:52:bf:e3:f8:42:c6:09:3a:17:
8c:83:37:0e:a8:ae:e8:9f:7e:d7:90:7f:c9:92:a5:
4f:b9:72:ec:38:5b:3f:cb:2c:dc:c8:98:e9:18:d7:
0a:e4:d7:9a:39:70:0c:6e:63:13:f5:69:c2:d6:fc:
62:5c:19:1b:7f:6e:b9:fc:95:3d:1b:2f:9c:31:f5:
85:a2:6e:af:fe:e4:14:b6:c2:1d:b5:15:01:2c:5c:
00:71:8c:00:9c:11:b5:eb:ae:54:da:2e:37:34:6f:
f0:0d:2b:a0:99:ab:c1:d0:65:cb:4b:34:f8:8d:ce:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:98:52:66:7E:AE:B3:05:5B:1D:76:F9:46:07:34:A5:78:E8:49
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9998B308768A11F18379E3C263A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.254.0/23
160.187.88.0/22
160.187.242.0-160.187.245.255
160.191.92.0/22
160.191.98.0/23
160.191.216.0/22
160.191.222.0/23
160.191.252.0/23
160.250.0.0/22
160.250.32.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:03:eb:cd:fc:27:7e:d5:3a:91:c4:37:e8:87:16:80:a0:47:
7f:50:d1:10:45:2f:d2:a0:98:ba:2b:7d:30:1b:11:47:d5:bf:
25:7e:33:6b:48:e9:64:5a:65:8c:f4:69:43:95:33:87:22:74:
e9:d0:0b:f8:ce:89:4c:de:14:9d:01:13:f2:a7:bd:7c:2e:bc:
0d:77:bb:bf:63:28:5c:fe:db:d8:f5:cc:77:27:a5:df:c0:81:
e2:01:49:ec:8c:15:e4:86:5a:bb:8b:e9:76:3c:32:f3:80:a3:
e8:01:47:30:f3:e2:f0:92:dd:ce:3e:58:57:ef:d9:60:95:5d:
6e:76:71:3b:13:ec:6e:41:47:30:67:f9:25:59:a8:35:18:fa:
86:29:1a:03:81:13:87:d2:e2:f5:0a:a5:5b:f6:62:24:d5:08:
b3:42:61:d1:25:5d:31:c0:91:70:ca:9e:8e:8d:26:41:8c:5f:
85:cd:f4:e3:03:d7:83:b1:f4:e1:39:f4:d3:0f:45:8d:f5:e2:
b5:d4:99:d5:47:2a:f8:f2:68:ef:b0:4b:00:9d:b3:2c:40:88:
6c:78:88:b0:1b:c3:8f:05:84:c8:45:13:12:c9:dd:5e:c0:69:
1e:83:8e:51:db:c8:c8:1f:db:fc:7c:4a:2f:87:6d:1d:91:10:
78:6b:e4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:09:10 2026 by rpki-client