
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa
File: 8D943848ABDC11EC8C02DB82C4F9AE02.roa (raw, json)
Hash identifier: TbMzSXZIf+KruzyzLUudTg/amagsVYGacogJk1UVD9M=
Subject key identifier: F9:F2:52:C7:FA:8B:90:E8:50:78:87:CF:4C:A0:59:54:F8:8B:35:31
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 5EF6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:20:27 +0000
ROA not before: Thu 28 Aug 2025 14:57:19 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 45556
IP address blocks: 203.161.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 14:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24310 (0x5ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:57:19 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a60d2a-ecba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:2d:fd:29:23:62:28:b1:7b:0e:9b:28:46:
06:29:36:8e:9b:76:0a:60:25:34:07:f6:76:40:8b:
9a:53:e3:86:c7:52:d4:1b:72:6a:ca:01:9d:83:16:
44:aa:0d:32:63:4e:df:4f:5b:15:bd:1d:0a:07:4a:
a8:4d:6a:e4:86:a0:df:a2:d7:46:9f:d5:79:e1:1b:
a9:2a:9a:1e:5d:76:fc:1e:17:14:8f:b1:1e:a3:69:
d0:69:9d:df:ac:2a:d6:f7:6e:f4:46:32:3c:4b:f6:
64:3b:b1:f9:7e:91:bb:d6:db:b2:bd:79:37:40:c9:
4a:66:2c:cc:d7:39:a0:ee:64:6f:b8:28:57:1a:44:
f1:dc:8e:4a:2d:4c:85:6a:35:ea:cf:47:74:2a:16:
10:7d:12:55:96:0c:a8:39:90:7e:25:61:05:4d:5e:
3d:97:1a:43:42:00:8b:f5:3c:04:d1:86:74:93:77:
b7:da:47:ba:e4:cd:3a:2e:35:56:e9:1e:dd:14:8f:
53:81:b0:17:b1:5f:fa:be:ac:3a:c8:65:5e:f3:ff:
8a:e7:fa:73:55:79:d6:53:63:34:a1:8e:12:d0:04:
21:72:22:71:de:8d:2d:77:8c:47:b6:03:51:c5:45:
6b:5d:63:d1:39:e7:91:1c:f2:37:de:e6:9d:e2:9e:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F2:52:C7:FA:8B:90:E8:50:78:87:CF:4C:A0:59:54:F8:8B:35:31
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.161.178.0/24
Signature Algorithm: sha256WithRSAEncryption
99:34:9f:f3:6e:72:c4:04:e4:64:44:69:b8:70:43:d3:d5:f6:
8f:7c:cf:a3:84:ca:74:47:d2:23:18:54:57:02:db:e5:67:bf:
8a:14:4c:ec:02:23:80:85:2a:4d:b4:04:85:26:69:80:e6:01:
f8:c4:eb:4e:a4:44:58:1e:99:98:85:12:94:33:76:eb:a9:68:
9a:da:5f:d4:89:02:57:62:18:df:91:f3:72:26:3c:a3:4d:3d:
b3:1f:f1:44:b6:e3:9c:c5:02:b7:ef:e2:f5:f7:16:53:85:f1:
2e:72:b1:97:0b:c2:29:b2:59:c7:d6:66:3c:cb:0d:27:c0:41:
6c:74:01:60:c0:6a:eb:28:ba:71:13:c5:14:d1:60:c7:99:1f:
1f:77:ab:76:de:27:eb:15:54:f3:71:b2:77:e6:4d:30:56:bf:
c1:6d:5d:15:e1:c6:10:69:79:6e:23:34:f6:63:79:ef:97:d4:
a5:f9:ed:f3:8a:e6:63:0c:1c:4a:84:ad:e1:dc:e7:f7:98:cd:
4a:9c:8d:73:22:9a:2c:ff:75:5c:70:c7:f5:01:ac:c8:69:cd:
ed:94:45:31:ba:a9:4a:79:7c:8f:bd:80:74:5c:ea:5d:42:b5:
62:bb:d9:08:39:20:9b:70:59:54:47:1c:58:35:b5:f5:6a:0b:
5f:eb:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:51 2026 by rpki-client