
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FD61B47AB12411EF8CF51A7FC4F9AE02.roa
File: FD61B47AB12411EF8CF51A7FC4F9AE02.roa (raw, json)
Hash identifier: hlzg/6VgRAJNNlsCepW4ghokXyuHhObPpn4HS8+jSbA=
Subject key identifier: DB:07:50:AE:7A:74:DB:B2:56:56:6A:49:9D:68:47:6F:97:6C:92:50
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 213A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FD61B47AB12411EF8CF51A7FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 23:22:03 +0000
ROA not before: Thu 28 Aug 2025 14:51:50 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153430
IP address blocks: 160.250.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8506 (0x213a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:50 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a61b9b-5301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:fa:23:d6:50:94:c5:b9:82:63:67:ae:ba:
9d:aa:08:2b:d5:cc:11:46:38:df:16:1c:02:fa:69:
ad:d2:8e:77:fd:6f:6e:78:fc:4b:ac:b3:8a:72:db:
66:c5:2f:e3:d2:48:e4:21:05:01:52:82:7c:aa:90:
9a:11:33:6a:69:46:91:8b:d9:85:be:fd:8b:dd:2f:
00:75:6b:d8:6d:95:84:b3:33:13:06:9d:ae:da:03:
0b:58:73:e1:8a:9c:af:04:21:83:b4:5f:d7:1c:0b:
ea:98:0f:68:f0:3f:56:5f:02:c4:2f:20:db:aa:e1:
89:6e:8d:d9:69:76:0d:e6:99:b5:67:93:76:8d:7d:
7c:17:1c:6c:4c:20:1e:f9:60:17:41:3b:45:1a:04:
3a:0c:65:e2:d0:d6:65:f1:bd:ae:d6:e8:d7:4b:96:
83:67:b6:e7:6e:31:1f:18:73:1a:b6:94:16:c9:c9:
0c:43:5c:5c:cd:6c:93:f9:7c:f8:dd:04:49:dd:24:
de:64:2a:2f:12:34:00:8e:f5:0d:3f:f1:4a:22:fb:
60:e8:5a:ca:63:6b:c7:7b:76:44:e0:e7:c1:05:8a:
8f:a1:f1:24:78:c7:74:35:d6:39:cd:76:c3:ad:dd:
ad:e0:aa:f1:4a:5c:07:e2:68:a2:36:3e:54:2c:66:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:07:50:AE:7A:74:DB:B2:56:56:6A:49:9D:68:47:6F:97:6C:92:50
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FD61B47AB12411EF8CF51A7FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.60.0/23
Signature Algorithm: sha256WithRSAEncryption
35:ed:e8:2f:fb:46:1b:fd:3b:0a:1c:1e:c7:07:8e:84:f3:2f:
91:f4:72:bd:73:4a:df:91:df:04:2c:b6:5f:2c:57:6e:32:f4:
8c:48:78:8d:43:23:fb:ff:8c:2e:36:01:b2:c0:55:a9:ee:f2:
9e:e6:64:53:71:76:4a:dd:15:b7:6a:7f:b0:55:66:51:25:9b:
c2:51:3c:53:e0:98:0b:bb:d5:e6:7e:09:e9:e4:6c:b3:43:1f:
1e:86:1a:51:3a:88:c9:5e:84:77:87:65:e3:bc:b9:ef:00:22:
e8:9a:ef:13:35:09:ee:19:82:75:99:13:0f:cd:4a:d7:58:f9:
f1:47:9c:92:ce:81:d5:b4:4a:78:93:4b:3b:5d:7f:88:3f:c5:
90:f0:a6:a5:29:06:e8:4d:fe:76:4d:95:7a:5c:b7:ff:09:0b:
c0:6b:63:d5:97:a4:e6:9a:1c:2d:3c:38:12:7a:5c:1d:44:73:
8f:22:09:56:e3:59:2e:47:e3:31:f2:48:61:83:5d:3e:74:3f:
72:15:24:50:2f:5c:49:8d:9d:80:9a:6d:bd:70:7d:4a:94:85:
be:84:67:62:d1:75:47:cb:f6:77:e4:4e:23:3e:28:fc:b6:89:
8b:85:d6:96:14:17:cd:62:82:70:ce:1e:c7:2d:18:c8:4a:b2:
34:95:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:18 2026 by rpki-client