
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E9A9DFEAEB7F11EEB477F078C4F9AE02.roa
File: E9A9DFEAEB7F11EEB477F078C4F9AE02.roa (raw, json)
Hash identifier: 2Kdzv4uJ+NEFX4AvRQwXWIPEi7FQGigAjkc6f5QJjOo=
Subject key identifier: E3:5E:AE:DE:88:F3:B7:76:0F:64:EC:F6:95:AC:02:07:2B:81:43:C1
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 2399
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E9A9DFEAEB7F11EEB477F078C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:18:01 +0000
ROA not before: Fri 02 Oct 2026 15:18:01 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151863
IP address blocks: 157.20.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:32:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9113 (0x2399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:18:01 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb29-e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:1c:54:66:68:43:b4:c9:18:0d:d4:e9:2e:
8b:fa:1d:76:5a:7f:9b:4c:27:5e:b9:10:40:f0:47:
f9:aa:ba:ca:34:65:15:1e:bf:af:98:65:da:b1:fc:
61:29:54:db:06:1d:fc:83:47:2a:27:04:c8:61:0d:
69:35:09:c7:92:c9:47:d0:fe:fd:49:d5:f5:c4:f5:
4a:81:db:b9:39:ad:d4:7e:72:cc:69:91:49:cb:f0:
c2:2c:d0:e4:70:3d:8d:95:33:0c:2b:60:d5:ea:ba:
a7:ae:f9:eb:bb:9c:60:97:30:ae:03:45:d7:55:b4:
1f:bc:a1:56:1d:42:fe:27:69:f7:5e:5b:38:1d:35:
69:65:6f:f4:02:ea:a9:a6:fa:bd:fa:dc:e0:c6:e4:
1e:89:bd:46:43:1c:db:e1:42:5b:ba:dc:ff:54:77:
c0:b0:d1:68:3f:b8:e6:d7:bc:f4:ef:ce:0b:cf:08:
f1:c5:62:e2:31:c2:87:f3:46:db:4a:06:d6:59:cb:
f1:5a:94:88:b5:e0:59:0f:3f:81:b9:47:33:b7:95:
a0:b6:da:5f:7f:c4:65:eb:a5:ac:8f:c8:49:0a:23:
a2:04:78:eb:0c:f3:00:71:a4:95:1a:03:19:97:ac:
09:52:02:80:8f:31:d3:c6:b0:b2:a5:5a:1e:c8:f2:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:AE:DE:88:F3:B7:76:0F:64:EC:F6:95:AC:02:07:2B:81:43:C1
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E9A9DFEAEB7F11EEB477F078C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.20.58.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:8b:2b:b5:76:ae:4e:f0:84:0e:25:05:dc:a9:ac:88:5f:8f:
ec:18:92:89:4a:d0:a4:11:c2:8e:d3:ca:be:9a:67:90:de:a9:
e6:3f:fb:4c:0e:12:5a:ba:86:82:a8:f9:52:31:6c:88:ca:26:
5c:b5:1f:2a:1c:77:6d:17:b2:6e:4e:e3:e7:90:b3:37:d6:50:
c2:d6:87:37:3e:4e:98:4a:b5:19:e4:8b:ff:08:37:5e:ad:1f:
6d:00:82:cc:67:8e:16:9a:da:91:3b:01:50:96:6a:13:d6:00:
5b:c9:f5:5b:8a:9c:20:df:17:0b:c8:ce:4d:3f:fa:f7:3b:0e:
56:cd:32:2b:25:25:49:7c:fa:52:8a:c0:6f:7e:ed:6d:c6:5e:
dc:ab:b4:a0:c2:03:e6:6b:5b:e2:a8:ad:ce:65:f7:0c:d3:ea:
48:b3:34:28:c2:55:51:22:c5:f4:f8:52:75:ae:d6:ab:b9:1e:
75:2f:f6:fc:3a:e7:e0:4a:74:c3:7b:b4:02:e9:19:a4:9e:74:
ad:27:55:b0:6f:34:17:69:83:b8:09:00:6e:68:36:63:fd:ce:
53:10:bb:4d:2f:86:81:44:b6:40:b7:e1:7d:07:be:68:88:f2:
7e:a8:5f:e4:5f:95:db:72:fa:dd:59:cc:98:28:cb:50:82:9b:
de:80:64:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUxODAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2IyOS1lOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzfQcVGZoQ7TJGA3U6S6L+h12Wn+bTCdeuRBA8Ef5qrrKNGUVHr+vmGXasfxh
KVTbBh38g0cqJwTIYQ1pNQnHkslH0P79SdX1xPVKgdu5Oa3UfnLMaZFJy/DCLNDk
cD2NlTMMK2DV6rqnrvnru5xglzCuA0XXVbQfvKFWHUL+J2n3Xls4HTVpZW/0Auqp
pvq9+tzgxuQeib1GQxzb4UJbutz/VHfAsNFoP7jm17z0784LzwjxxWLiMcKH80bb
SgbWWcvxWpSIteBZDz+BuUczt5Wgttpff8Rl66Wsj8hJCiOiBHjrDPMAcaSVGgMZ
l6wJUgKAjzHTxrCypVoeyPKjKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFONert6I
87d2D2Ts9pWsAgcrgUPBMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRTlBOURGRUFF
QjdGMTFFRUI0NzdGMDc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnRQ6MA0GCSqGSIb3DQEBCwUAA4IBAQBciyu1dq5O8IQOJQXcqayI
X4/sGJKJStCkEcKO08q+mmeQ3qnmP/tMDhJauoaCqPlSMWyIyiZctR8qHHdtF7Ju
TuPnkLM31lDC1oc3Pk6YSrUZ5Iv/CDderR9tAILMZ44WmtqROwFQlmoT1gBbyfVb
ipwg3xcLyM5NP/r3Ow5WzTIrJSVJfPpSisBvfu1txl7cq7SgwgPma1viqK3OZfcM
0+pIszQowlVRIsX0+FJ1rtaruR51L/b8OufgSnTDe7QC6RmknnStJ1WwbzQXaYO4
CQBuaDZj/c5TELtNL4aBRLZAt+F9B75oiPJ+qF/kX5XbcvrdWcyYKMtQgpvegGSZ
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:16 2026 by rpki-client