
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa
File: CE76D260A87511EF9905FE0AC4F9AE02.roa (raw, json)
Hash identifier: JvsONcra4AVX078WlRb0p0xl+Kp/dcrBPRSYwPStyYo=
Subject key identifier: D5:4D:7C:D2:D4:F6:F7:13:4F:E1:22:69:EA:94:0D:26:9D:0B:60:3F
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2393
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:17:49 +0000
ROA not before: Fri 02 Oct 2026 15:17:49 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150820
IP address blocks: 157.15.38.0/23 maxlen: 23
157.20.62.0/23 maxlen: 23
157.66.252.0/23 maxlen: 23
160.22.172.0/23 maxlen: 23
160.22.174.0/23 maxlen: 23
160.30.190.0/23 maxlen: 23
160.187.120.0/23 maxlen: 23
160.191.176.0/23 maxlen: 23
160.191.240.0/23 maxlen: 23
160.250.46.0/23 maxlen: 23
161.248.208.0/23 maxlen: 23
165.99.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9107 (0x2393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:17:49 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb1d-c8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ed:2f:7d:83:b2:ca:10:3b:42:2c:01:5b:16:
a8:15:fd:71:78:d9:63:e0:06:a5:ff:62:c5:c7:4a:
54:03:10:03:75:fd:cb:69:e6:96:72:19:67:60:19:
a7:31:c9:df:14:32:83:0e:56:c6:5e:a9:7d:a8:52:
f6:44:98:e7:bb:27:fe:36:b0:59:27:2c:cc:dc:a1:
fb:41:e8:3d:23:62:b3:60:b6:54:b2:b2:3e:15:b8:
41:10:c7:a9:a2:13:57:3f:ed:5f:8a:91:07:65:a3:
21:f5:41:f2:c9:05:6a:70:41:86:95:88:73:65:fa:
21:9b:8a:29:cf:ba:77:b4:66:c5:06:22:1b:0f:8f:
49:e0:ff:d7:b8:44:79:36:3c:08:d4:c3:26:0a:fe:
04:6e:2d:c8:cf:ff:c1:96:4b:5b:3f:87:5b:09:e1:
cb:0d:89:bd:a3:23:8a:be:3a:61:94:80:40:e3:fb:
ee:6e:b9:ed:c3:98:69:41:af:94:58:f6:cf:5b:ac:
91:b9:19:76:ca:d6:c6:37:ce:ee:f1:3b:82:08:1b:
bd:b2:c8:7d:b8:b8:fc:e4:8f:74:6f:c1:d1:7d:68:
51:59:d0:2e:05:30:e9:6b:5c:a7:4d:99:17:d5:b2:
0b:40:ca:81:5d:05:eb:95:76:e7:3e:70:e6:75:72:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4D:7C:D2:D4:F6:F7:13:4F:E1:22:69:EA:94:0D:26:9D:0B:60:3F
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.15.38.0/23
157.20.62.0/23
157.66.252.0/23
160.22.172.0/22
160.30.190.0/23
160.187.120.0/23
160.191.176.0/23
160.191.240.0/23
160.250.46.0/23
161.248.208.0/23
165.99.14.0/23
Signature Algorithm: sha256WithRSAEncryption
98:0f:e0:fc:e2:6e:64:88:76:f4:ca:01:00:7c:d0:f2:b8:96:
19:71:f8:89:7d:5a:27:17:d5:ab:5a:6c:f5:a2:e2:1a:86:da:
d1:56:95:7e:d3:6b:cd:73:5c:8b:fc:c5:06:0e:32:d1:4c:e0:
0c:8e:30:d1:c4:46:31:c5:b2:ca:f7:b7:de:00:ee:7f:7c:b2:
e4:51:08:30:e7:41:af:dc:b4:11:23:10:a9:a6:ad:bb:79:92:
46:55:f9:c7:52:3f:9b:58:73:9e:01:cf:b8:85:c6:92:f9:19:
90:6a:75:22:6f:26:65:5b:a1:7b:d6:0a:91:c5:08:71:5b:78:
b7:e1:37:1f:f1:4a:67:e3:27:7f:37:24:e9:c4:49:24:1f:91:
0f:e2:c6:0e:b5:48:1a:a7:eb:47:13:12:8d:f6:6e:08:d4:5c:
7f:f7:db:3a:2e:e8:37:e1:8b:c4:ad:41:da:09:38:f3:88:1a:
0f:b9:d7:b5:26:67:c9:5a:90:e7:ed:dc:91:2a:af:44:6b:88:
67:a3:f2:30:6a:f5:13:04:0c:a5:81:09:2c:8b:92:12:d1:9a:
63:91:ad:4f:4c:cd:87:a6:b6:98:a6:cb:87:2d:02:d0:c5:eb:
df:97:b7:09:2b:9f:c7:8a:80:86:4c:10:7b:1d:da:cf:b6:59:
73:16:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:18 2026 by rpki-client