
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa
File: 9DAC4BF8879E11EF8944AB12C4F9AE02.roa (raw, json)
Hash identifier: wNkRXMvciqUBt9pQNMLHIFkO7Ywc07eRrdq+/HeXVjM=
Subject key identifier: F2:D4:C6:F7:11:74:CD:79:B1:AC:FE:FE:03:A7:22:48:29:AA:DF:A6
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2157
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:22:31 +0000
ROA not before: Thu 28 Aug 2025 14:51:26 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152955
IP address blocks: 160.25.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8535 (0x2157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:26 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61bb7-006b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8e:76:e3:20:65:d7:4e:63:bf:83:cc:57:5a:
16:74:cb:11:b3:6f:f4:08:d2:11:ca:8f:cc:30:02:
c8:c7:98:b8:7e:7d:9e:c3:c5:f3:a3:a9:cd:49:05:
a7:d4:d8:be:e8:24:60:9e:b7:4c:6d:fb:d5:45:e6:
68:7a:cf:b1:a3:c3:f7:20:37:07:ed:9a:af:00:f8:
a7:fe:ae:d8:15:5b:f4:7b:57:6c:b9:64:a5:12:8f:
50:43:d4:b9:87:f3:c8:98:4d:fb:91:87:6a:15:82:
f7:95:f7:c1:a1:31:ba:3a:14:e8:48:58:d1:49:52:
93:23:41:56:a9:33:29:bb:ff:2b:af:e5:0a:6c:72:
a0:62:5f:a8:fd:2d:91:00:49:06:f5:b5:69:3b:81:
dd:16:5a:91:f3:2b:03:f1:23:00:33:03:fe:fa:a3:
24:74:89:c0:5a:7d:23:63:fe:8f:7a:d0:6e:6f:10:
d4:f2:ac:fd:ae:61:aa:98:45:87:d6:2d:7e:ed:e4:
8a:42:7d:6f:71:f4:cc:d9:a9:02:14:dc:2f:92:96:
a1:65:f8:96:f9:57:a0:4c:23:f1:3d:51:6a:98:a5:
f3:87:56:dd:c4:3b:f2:dc:bc:e3:e5:94:9c:98:58:
ef:2e:8d:96:3b:93:33:0e:4c:9d:ac:90:da:a4:2e:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D4:C6:F7:11:74:CD:79:B1:AC:FE:FE:03:A7:22:48:29:AA:DF:A6
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.208.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:18:45:49:c5:44:0e:13:92:93:da:df:3d:57:e6:32:cb:4d:
03:23:86:5e:10:c3:09:50:58:e4:c0:cf:b2:68:cf:49:40:6a:
a4:9b:74:56:a6:5b:34:da:18:37:1b:b0:6c:28:d7:36:ed:2b:
78:ac:e6:8a:f0:4e:9f:08:b0:89:4d:d1:54:b2:dc:b3:ab:8b:
96:d2:36:bb:ab:15:e8:dc:ff:e8:f9:05:87:61:ab:d8:6e:d1:
1b:2e:34:cc:df:38:ab:dc:dd:99:57:92:91:d9:c2:4b:f0:6a:
8e:e6:80:59:7e:38:42:cf:46:59:d3:c1:4e:0b:7c:54:ed:95:
d3:49:82:aa:69:f9:96:b8:2d:99:49:92:8b:23:6d:05:53:5b:
8c:fa:9c:b3:10:a4:e6:7a:6b:6e:1b:3b:4c:1b:16:8c:08:35:
71:26:f7:0c:b9:41:c9:14:96:ea:b3:37:97:db:fd:dd:de:8d:
29:ba:41:42:63:f5:3e:76:fb:e0:9a:c2:6f:ff:aa:10:83:53:
55:8e:6d:ac:33:b1:35:cd:ac:f8:0a:c8:4b:23:da:c7:ec:68:
61:0e:60:8b:9b:66:50:ad:6d:9c:e0:f1:3a:e5:19:2a:2e:a9:
eb:fa:2e:be:ba:50:3e:c9:cb:d2:4a:75:ba:30:b3:57:1e:fe:
94:54:f5:9c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWJiNy0wMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA74524yBl105jv4PMV1oWdMsRs2/0CNIRyo/MMALIx5i4fn2ew8Xzo6nNSQWn
1Ni+6CRgnrdMbfvVReZoes+xo8P3IDcH7ZqvAPin/q7YFVv0e1dsuWSlEo9QQ9S5
h/PImE37kYdqFYL3lffBoTG6OhToSFjRSVKTI0FWqTMpu/8rr+UKbHKgYl+o/S2R
AEkG9bVpO4HdFlqR8ysD8SMAMwP++qMkdInAWn0jY/6PetBubxDU8qz9rmGqmEWH
1i1+7eSKQn1vcfTM2akCFNwvkpahZfiW+VegTCPxPVFqmKXzh1bdxDvy3Lzj5ZSc
mFjvLo2WO5MzDkydrJDapC6PTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPLUxvcR
dM15saz+/gOnIkgpqt+mMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOURBQzRCRjg4
NzlFMTFFRjg5NDRBQjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBnQMA0GCSqGSIb3DQEBCwUAA4IBAQCgGEVJxUQOE5KT2t89V+Yy
y00DI4ZeEMMJUFjkwM+yaM9JQGqkm3RWpls02hg3G7BsKNc27St4rOaK8E6fCLCJ
TdFUstyzq4uW0ja7qxXo3P/o+QWHYavYbtEbLjTM3zir3N2ZV5KR2cJL8GqO5oBZ
fjhCz0ZZ08FOC3xU7ZXTSYKqafmWuC2ZSZKLI20FU1uM+pyzEKTmemtuGztMGxaM
CDVxJvcMuUHJFJbqszeX2/3d3o0pukFCY/U+dvvgmsJv/6oQg1NVjm2sM7E1zaz4
CshLI9rH7GhhDmCLm2ZQrW2c4PE65RkqLqnr+i6+ulA+ycvSSnW6MLNXHv6UVPWc
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:57 2026 by rpki-client