
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
File: B8DEDE725E0911EFA6193958C4F9AE02.roa (raw, json)
Hash identifier: nM+qbTq/DdhOmfxZa1hEsTiZCvnRq37OoMp6YH/pzwI=
Subject key identifier: C0:14:F6:63:30:7A:7F:9D:24:96:A6:53:03:16:60:F1:41:1F:0C:51
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2085
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:05:42 +0000
ROA not before: Thu 28 Aug 2025 14:50:50 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135967
IP address blocks: 160.30.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8325 (0x2085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:50:50 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a609b6-5599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:32:4b:00:8a:9d:31:6e:b5:aa:20:19:cb:
43:c8:96:d0:3c:1c:03:2c:51:f5:52:97:33:74:a7:
9c:a5:54:46:ca:00:7a:06:c2:69:df:39:d9:6c:a0:
dc:89:9f:d9:08:a3:1d:98:98:b5:c0:ae:49:d9:7f:
1b:42:85:7a:4c:56:35:2c:9b:4c:c4:d3:70:03:d6:
75:ad:a1:a9:5d:ff:9f:4d:0d:4d:8d:b0:af:38:69:
2e:11:5a:e9:0b:2f:f2:18:85:1c:85:c5:57:6f:33:
12:59:51:52:61:da:09:75:f7:17:1a:68:2c:27:05:
a5:ee:79:da:50:89:62:98:eb:94:1a:fc:46:83:78:
38:48:d6:c4:8c:05:cb:fd:7e:f7:3b:47:c0:cf:c0:
99:dd:ce:23:fa:c3:b1:d1:7d:1b:42:f1:47:5b:c5:
cb:ae:39:39:cf:2e:a1:ec:81:68:83:dd:f7:75:33:
9c:fb:38:5f:f3:1d:c6:1b:82:99:45:30:25:ef:a7:
a2:6c:76:fd:5a:00:0a:09:88:1b:65:7c:b2:17:42:
15:b5:72:b6:db:5b:17:2b:49:df:03:43:66:01:e6:
0a:f8:7b:e9:69:8a:3a:e8:63:97:8a:27:2f:a3:6b:
eb:4f:d4:8a:78:c5:d7:0f:fc:63:6a:87:8c:7d:67:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:F6:63:30:7A:7F:9D:24:96:A6:53:03:16:60:F1:41:1F:0C:51
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.86.0/23
Signature Algorithm: sha256WithRSAEncryption
83:59:60:1c:3d:12:fe:47:77:07:35:09:8e:64:45:76:b0:77:
f7:fe:8b:ae:45:5e:c2:32:57:4a:69:44:53:88:1c:68:38:19:
3c:dc:33:43:bf:fa:b8:bc:e2:52:25:c6:99:5c:4c:0a:a7:e3:
b2:fd:e0:21:c2:57:cb:82:93:65:34:8b:c1:c7:03:f0:4d:4b:
f1:ae:57:ff:f0:0f:78:d1:9b:4a:87:2e:a6:67:a2:d6:f5:6d:
ee:23:aa:4f:13:fd:32:4d:88:ea:0f:cb:2c:c5:83:eb:ad:d5:
d7:23:be:d1:8c:6c:4b:29:64:8a:da:95:9d:6d:c4:f0:db:d6:
b0:e1:a6:b0:8c:13:88:75:dc:b2:68:9a:a5:6f:e7:55:8b:f4:
8f:bf:b7:4c:c8:14:de:f2:95:77:da:94:c6:89:57:ad:7a:0c:
5c:42:ba:eb:10:76:12:75:19:32:92:b2:1d:a2:ea:1e:55:7d:
18:5e:31:5a:a5:27:a9:9b:fc:c0:9f:e4:40:f3:10:7a:94:c2:
43:ee:52:5f:64:e0:3d:f9:3a:49:b6:81:cc:be:65:40:ff:78:
82:4b:94:e2:0b:43:81:14:52:5b:68:64:2f:f8:cf:27:25:91:
25:a7:0a:42:18:76:2b:e2:b6:db:90:19:f7:22:d0:34:ba:d2:
9b:fc:f2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:58:13 2026 by rpki-client