
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F5F76954240211F098B69F6DC4F9AE02.roa
File: F5F76954240211F098B69F6DC4F9AE02.roa (raw, json)
Hash identifier: E/Tf14g4dKOfBn/Q6/4gE1NyTKX9l4JGyR+NfZtfZHQ=
Subject key identifier: 88:60:EF:5A:E1:B4:78:48:1F:48:B3:82:22:50:0E:73:60:25:90:E1
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6ED5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F5F76954240211F098B69F6DC4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:33:51 +0000
ROA not before: Fri 02 Oct 2026 15:33:51 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153830
IP address blocks: 163.223.14.0/23 maxlen: 24
163.223.16.0/23 maxlen: 24
163.227.160.0/23 maxlen: 24
2001:df5:2d40::/48 maxlen: 48
2001:df5:2dc0::/48 maxlen: 48
2001:df5:73c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28373 (0x6ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:33:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcede-6a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:2a:8b:5b:a5:67:e7:32:36:1d:d9:5b:3f:
41:c5:84:88:69:4c:f4:27:40:6f:25:3a:76:aa:05:
4f:a5:20:67:b0:d6:28:a1:96:d6:b1:58:5c:45:ec:
52:34:62:a3:ee:c2:62:d3:2f:eb:8f:e1:74:30:8a:
91:5c:39:bf:d0:c3:76:56:bb:a4:f6:85:fe:51:14:
20:5b:ad:fd:94:43:23:94:ab:c1:c2:9e:8d:61:48:
51:09:a5:16:12:07:d6:40:ca:f0:32:93:50:19:95:
2d:29:67:2e:63:66:a2:a4:ea:43:ae:e8:8c:42:da:
02:d6:68:e3:20:87:f6:2b:16:ce:e8:39:9f:d6:7a:
b2:fe:47:f7:bf:bb:88:33:f8:2f:32:3e:b8:be:ae:
1a:13:86:b8:e5:cb:2d:6f:d4:9d:d2:fc:c8:1d:b7:
b2:ee:f4:3f:87:eb:c8:c5:d7:c2:33:e9:82:d3:a6:
88:36:2c:3f:fc:4d:cb:c6:7f:eb:86:7b:c7:ac:8d:
90:49:ee:be:ff:17:9b:b4:8b:2f:83:ca:a7:8c:34:
61:11:bc:8e:9f:13:0f:25:3f:3f:99:eb:f0:49:18:
4d:23:98:00:08:cb:23:b3:ae:bd:63:1f:7e:ab:49:
e3:f1:6e:7a:d0:8a:c9:9d:1b:e5:86:ba:0e:52:8f:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:60:EF:5A:E1:B4:78:48:1F:48:B3:82:22:50:0E:73:60:25:90:E1
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F5F76954240211F098B69F6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.14.0-163.223.17.255
163.227.160.0/23
IPv6:
2001:df5:2d40::/48
2001:df5:2dc0::/48
2001:df5:73c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:e7:3e:ec:f8:87:16:50:29:81:23:84:9e:f6:4b:e0:3d:83:
0c:b7:ea:fb:76:a1:17:92:ab:db:f3:dc:37:61:81:2f:de:d4:
0b:00:b7:ac:53:3e:c4:0d:b3:f6:16:dd:c1:40:b6:e5:a0:fd:
96:08:40:79:fe:e5:11:04:5c:4f:e4:de:76:a7:67:28:d2:be:
4b:c0:3a:75:6f:ca:cc:84:c0:ba:f2:cf:dc:2a:bd:96:fc:31:
64:b4:30:87:6b:99:c7:68:19:62:49:f9:98:f4:48:32:29:78:
d1:3d:a0:6f:60:53:80:fa:c5:5b:11:d7:8c:a6:ee:79:51:4a:
b9:4d:24:9e:13:ef:07:a8:74:d2:b8:6e:c2:ea:d2:6b:47:05:
d5:bc:83:dc:e8:5c:20:94:95:b3:62:37:44:ec:4d:bc:b2:b2:
d7:2b:9f:8e:c6:64:c6:bf:ad:16:6d:a1:aa:b9:21:c6:f9:d6:
d8:2a:09:09:50:64:df:7b:83:c4:22:be:79:ab:c1:0a:0b:4b:
d0:1d:40:29:ea:d9:b6:42:0b:63:68:03:f7:f3:f2:97:7c:09:
fe:bd:e3:c5:c4:b7:b3:66:01:f7:15:da:88:c2:46:cc:6f:bb:
1f:b2:2e:c8:16:51:8e:fe:07:71:30:c9:3e:05:ab:79:ad:6a:
fd:6a:0c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:39:37 2026 by rpki-client