
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa
File: AF0CF752FE6511EE93D6CC3AC4F9AE02.roa (raw, json)
Hash identifier: gp0obv6dxLhMr8kF+BDHduP30gQnU+PnTevnqFHal5s=
Subject key identifier: 22:8A:A9:4A:FC:D5:55:16:1E:B8:7C:90:38:9B:F0:51:75:2F:CB:42
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6EFB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:35:08 +0000
ROA not before: Fri 02 Oct 2026 15:35:08 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 24176
IP address blocks: 101.53.0.0/18 maxlen: 24
119.15.176.0/20 maxlen: 24
119.17.224.0/19 maxlen: 24
202.151.168.0/21 maxlen: 24
210.86.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 10:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28411 (0x6efb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:35:08 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcf2c-cfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:79:3d:1c:20:94:34:fc:50:9f:ff:bd:cf:
d9:d6:63:45:df:29:90:3e:a5:2e:17:7d:15:96:33:
a7:51:c3:de:23:02:03:89:e4:d8:36:48:04:58:01:
7a:ee:d8:03:0f:a2:8d:4c:40:84:cc:02:32:91:26:
e1:29:48:18:2c:58:4e:77:6a:5c:6a:00:6a:fe:4e:
83:ac:ff:2c:7f:6d:12:2a:d3:26:3e:65:f3:e2:eb:
f0:5e:3d:2e:f1:20:86:09:a5:55:2f:08:b7:d4:cb:
b0:d7:38:b6:f4:12:de:4f:8f:2a:75:de:e7:60:28:
4c:7a:fd:49:de:8a:ca:83:f0:07:55:dd:04:33:9b:
d3:37:a0:38:a6:91:17:eb:b8:19:f6:2f:c9:de:86:
20:c8:37:fb:1e:99:cd:2f:35:c4:59:4d:be:13:66:
4c:45:25:fc:6f:0c:6c:40:61:00:d2:97:ae:c3:ac:
d6:e5:94:ff:ab:d8:b4:ae:f8:85:aa:62:81:e0:fc:
e1:99:8a:6d:d5:bf:cd:01:83:76:cb:da:07:23:47:
2d:8f:38:64:09:8c:7c:db:7e:67:df:2a:5c:9d:be:
47:bd:ef:3b:55:dc:56:7f:cd:dc:82:64:a8:9b:5d:
94:23:bd:2d:0f:c5:bb:0f:d6:67:9c:9d:05:26:ac:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8A:A9:4A:FC:D5:55:16:1E:B8:7C:90:38:9B:F0:51:75:2F:CB:42
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
101.53.0.0/18
119.15.176.0/20
119.17.224.0/19
202.151.168.0/21
210.86.232.0/21
Signature Algorithm: sha256WithRSAEncryption
13:c5:6a:14:11:e1:06:c9:17:fa:90:21:d6:79:8e:7f:18:37:
63:8e:6d:d6:fb:bf:0b:c3:b9:b3:d3:c7:86:1e:c3:57:42:36:
2e:3e:8d:6f:1c:75:5e:32:63:64:89:57:c6:df:14:a6:79:a4:
5b:a3:09:43:c7:af:9a:c6:d1:fe:1e:bd:42:05:46:23:70:ef:
92:b2:cf:d1:43:ec:d0:d7:72:4b:65:da:2a:fd:e4:e9:13:c9:
18:39:08:38:08:19:d0:36:d2:be:4d:57:ad:af:1d:63:6f:4e:
39:ff:15:c7:d6:3b:53:af:df:ff:0e:3e:66:43:0a:c0:74:57:
fe:44:86:79:c6:b2:66:3c:ef:88:01:06:e0:e6:a1:69:c6:e4:
a0:80:18:b7:00:43:9f:a3:9d:2c:6e:17:ea:4a:3f:8d:7f:f1:
cd:7d:fd:5b:88:4f:91:4c:c0:1a:9d:06:76:42:da:06:47:23:
89:df:aa:ac:ff:2f:8c:39:55:af:f1:28:d3:b4:d0:f1:1e:1a:
ce:82:2d:2b:f7:56:e0:05:2d:52:b8:ed:28:6d:85:f2:3c:04:
54:34:3b:3e:36:a7:df:45:1e:fa:ee:c1:0f:59:41:d8:98:e7:
60:3c:e9:4e:4f:16:b8:cc:5c:0b:09:3c:db:69:ed:bf:c0:a3:
fb:ea:41:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:40 2026 by rpki-client