
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa
File: C0944D9067A511F0A26BDB35C4F9AE02.roa (raw, json)
Hash identifier: JXgojOC908Cwkr+dmxmTEzyOge80r5qXhE93NCvHGtQ=
Subject key identifier: B2:80:62:68:EC:82:1C:FE:4C:62:3F:CB:74:04:55:D0:E1:1D:C8:25
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 237A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:16:54 +0000
ROA not before: Fri 02 Oct 2026 15:16:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 131435
IP address blocks: 148.222.80.0/23 maxlen: 23
148.222.80.0/24 maxlen: 24
148.222.81.0/24 maxlen: 24
148.222.90.0/24 maxlen: 24
148.222.91.0/24 maxlen: 24
148.222.93.0/24 maxlen: 24
148.222.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9082 (0x237a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:16:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcae6-b788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:5a:4d:85:08:50:ed:9e:cb:87:87:3d:ff:
73:c7:68:19:04:ce:03:e7:40:80:d7:90:66:1f:27:
b1:c8:21:bc:0f:4f:24:ea:fd:da:1f:40:ae:38:03:
dd:5f:b8:9c:e8:74:4e:74:b8:3e:de:f8:c8:5a:12:
da:94:c0:63:9a:9f:7e:b8:59:75:47:70:8a:95:fe:
8c:83:1d:75:58:55:b2:5d:0f:ea:bb:b9:98:e3:fb:
99:6d:a4:25:d8:82:85:c1:0b:f8:98:6a:12:21:9e:
c8:f1:82:dd:2d:28:c7:8f:23:10:6a:0e:2e:3a:c5:
17:03:b4:55:ca:24:0f:a5:3d:ee:8e:29:ea:b5:d4:
f6:a3:9f:46:b6:ae:3b:0a:12:0a:93:f3:2e:b5:d0:
6d:09:bd:d0:41:7b:ca:2e:0e:f7:41:2e:98:23:94:
3c:45:46:ff:02:f0:6a:a1:81:86:7c:60:f3:67:aa:
54:7d:e0:fe:8b:86:b2:88:87:59:25:c3:9a:52:90:
d0:78:8e:69:04:09:b9:d0:78:9e:9e:4a:fe:6c:49:
1e:cf:c4:03:9e:1d:03:b6:f8:9a:f6:a5:54:e4:66:
66:b6:e0:1e:aa:9a:b8:ad:a1:47:f6:20:31:d1:81:
73:e9:69:39:26:a4:32:a0:f9:9c:e7:86:78:9a:42:
e3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:62:68:EC:82:1C:FE:4C:62:3F:CB:74:04:55:D0:E1:1D:C8:25
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
148.222.80.0/23
148.222.90.0/23
148.222.93.0/24
148.222.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:67:48:b4:28:81:11:e4:45:f5:56:a6:4a:bc:ea:7c:00:eb:
ff:9d:93:f1:1d:8e:ed:0a:d0:8b:b9:ad:25:09:5e:85:e5:a1:
c5:4e:56:af:c6:71:60:e8:f8:90:bc:0d:b0:bc:5b:3c:c5:62:
ac:98:9e:6a:8b:3b:99:75:ac:4b:a4:cc:41:37:23:78:64:47:
28:88:01:66:ca:15:da:b0:06:1d:06:fe:98:11:17:db:25:b3:
cb:f1:ad:cc:9a:b7:b9:f3:9d:a5:bf:a0:25:93:58:4b:06:d9:
d6:09:c3:6a:0e:84:96:51:61:45:0e:f7:c0:93:db:0b:f6:60:
e9:71:fb:58:a6:9b:dc:37:80:c8:e8:f4:35:19:93:a8:fd:c9:
41:c9:1e:02:30:24:46:1b:67:e8:c2:8e:d2:fc:0b:04:45:bf:
72:50:55:39:f1:cd:ac:2a:74:bd:39:39:9a:9f:8a:da:3c:f0:
ee:40:c9:df:c8:d5:b7:b1:a1:8e:43:9f:df:36:34:7c:cd:e2:
5a:f4:0d:24:97:8d:93:f4:59:9d:f2:ad:13:21:7f:c5:f6:ed:
96:d9:ee:52:8c:95:3f:b9:25:c4:25:f4:ab:d1:c8:04:f5:da:
b3:62:41:c9:cb:8c:1f:b7:d2:5d:ed:f1:e5:1c:7b:c8:5e:41:
65:f7:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:52:48 2026 by rpki-client