
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
File: B8DEDE725E0911EFA6193958C4F9AE02.roa (raw, json)
Hash identifier: 3V1zZnzIanfOlMP/1Y1GOAWn8CX/Iku7VJrhTEshukA=
Subject key identifier: 92:33:5E:01:C3:2D:8F:0A:38:61:21:A4:D5:DE:CE:95:DF:20:5B:04
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2380
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:17:08 +0000
ROA not before: Fri 02 Oct 2026 15:17:08 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135967
IP address blocks: 160.30.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9088 (0x2380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:17:08 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcaf4-c2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:ca:4d:f6:fa:9f:02:96:f4:49:ec:22:2a:
da:b9:a3:bd:c5:89:7c:e7:84:53:2e:40:e3:f6:c7:
54:76:23:a7:b8:84:e1:27:2f:1c:dc:6a:6a:0a:e7:
46:2a:22:3c:f5:b0:98:8b:5b:70:8d:a4:e2:17:5a:
d2:71:65:a3:f1:68:56:06:32:43:7e:6f:8c:8f:f4:
f7:4f:c2:04:1c:ce:24:0b:44:14:17:14:8a:26:0d:
26:fe:c1:e5:42:d0:1c:09:35:5c:ad:cc:31:bc:85:
cf:71:ed:03:f9:c7:b0:23:6b:05:3c:6a:c5:79:e3:
63:73:02:1e:77:ee:c5:63:0c:ac:d5:ec:83:cb:70:
a8:9b:74:0d:58:6b:e2:c6:3a:db:e4:6a:a5:46:18:
ab:0a:19:33:23:38:c1:83:f1:a4:1a:28:28:35:ee:
27:63:55:ab:e5:0b:54:65:97:09:b6:f9:06:64:2c:
3c:e2:54:12:de:fd:91:15:50:f4:62:46:1c:2a:93:
81:32:0e:3f:e1:11:27:cc:e8:60:52:2d:d0:9b:6f:
6e:6b:cd:ae:1e:e4:68:9b:53:16:72:64:62:39:41:
9b:f2:bf:c7:b9:6f:de:2d:6b:eb:e5:4d:f7:ec:de:
1b:c8:2d:dc:e2:b4:36:30:73:a9:e0:cb:75:15:19:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:5E:01:C3:2D:8F:0A:38:61:21:A4:D5:DE:CE:95:DF:20:5B:04
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:5e:90:c0:71:1a:b1:44:67:c7:9c:c3:5e:19:29:9f:3e:cf:
8d:8e:ff:61:3f:fb:06:b5:15:0c:68:da:34:c7:a0:bb:36:a4:
5d:01:80:c9:d0:bf:68:39:aa:1b:f6:5c:17:1b:69:2b:83:c2:
26:42:a1:97:ef:a7:17:24:6e:95:ab:08:56:5b:72:70:3a:18:
67:17:98:db:97:21:24:76:8a:bd:7c:bd:55:3f:5c:8d:87:44:
f1:4d:8f:c3:12:dc:15:7d:77:6b:a9:02:cc:43:f1:42:d6:27:
a9:c1:4a:84:e1:03:90:f3:5a:59:81:97:85:f3:4e:4f:0a:3d:
1e:1f:9f:f7:13:40:79:a6:b5:e6:b4:30:29:4e:d0:1a:d6:a9:
7d:1a:ca:8f:79:84:f1:b7:e2:40:8e:ec:13:c2:aa:f8:3c:7d:
ff:07:ff:f0:aa:ba:cf:8d:17:ca:b9:f4:69:ac:39:57:1f:e3:
fb:81:ce:b2:9f:f8:54:4f:f4:ee:12:c3:00:2a:52:ad:7b:a8:
78:22:04:ce:e3:0a:87:4e:94:58:ac:4e:24:5a:77:77:77:8b:
81:dd:d0:e5:85:01:45:09:a5:87:3e:fa:77:d5:77:f9:77:91:
9d:99:02:19:e4:9e:0f:fc:f3:ed:82:f0:f4:5c:4c:52:8c:4a:
6e:6a:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:57 2026 by rpki-client