
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa
File: 0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa (raw, json)
Hash identifier: dAZeh4PaNuXAEzd+0dD77Ah6jCF4zKP6Ulvpy6g/WpI=
Subject key identifier: 7A:E8:80:C0:55:62:4E:16:53:DF:F5:54:E4:6B:37:50:61:1F:75:2C
Certificate issuer: /CN=A91B15DC/serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Certificate serial: DF
Authority key identifier: D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:17:26 +0000
ROA not before: Wed 03 Dec 2025 04:34:56 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134602
IP address blocks: 160.191.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B15DC, serialNumber=D36E104261F819D68D0F70BB29ADFE8EF463B2ED
Validity
Not Before: Dec 3 04:34:56 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a59bf6-d9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:8f:c5:6b:0e:cc:7b:54:44:be:44:9a:4f:
9b:9d:1a:19:22:ec:70:71:28:1c:2c:60:df:40:cd:
ac:fb:3b:3b:91:a8:65:50:fa:56:ec:77:98:d1:9c:
71:3b:18:5d:92:1d:ba:c8:68:81:e6:d5:3d:12:75:
b7:47:85:c6:73:a3:2a:e6:bf:cb:12:43:9d:59:b9:
dd:ea:ee:bf:e4:42:e3:a2:b5:90:be:3b:aa:e0:35:
84:29:12:fe:c9:f6:73:27:98:d3:d7:25:74:d7:86:
12:c2:7c:1e:93:5e:2c:62:8b:c4:73:14:94:b7:4a:
be:c1:f8:65:6f:1f:c1:91:05:dd:c4:5e:b1:39:d0:
be:6f:9a:00:59:5f:db:26:d0:7a:7c:40:73:b4:68:
8f:b1:d8:34:55:40:14:ae:d3:be:c2:8b:6e:77:56:
47:38:5b:17:bb:fb:c4:e6:69:4c:e7:1a:c3:be:b9:
e7:d3:fe:12:35:75:88:e9:fe:50:82:33:b7:4a:59:
ac:55:24:46:2c:d3:14:54:7e:69:33:73:e2:a4:66:
18:7d:bf:5b:3c:0e:84:ff:21:a2:c6:d0:56:74:59:
b6:22:c4:8c:73:5e:93:42:f5:bd:7c:33:e4:cb:c4:
b9:fd:33:98:be:7e:f3:90:95:d2:41:97:e6:eb:2b:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E8:80:C0:55:62:4E:16:53:DF:F5:54:E4:6B:37:50:61:1F:75:2C
X509v3 Authority Key Identifier:
keyid:D3:6E:10:42:61:F8:19:D6:8D:0F:70:BB:29:AD:FE:8E:F4:63:B2:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/024QQmH4GdaND3C7Ka3-jvRjsu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/024QQmH4GdaND3C7Ka3-jvRjsu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B15DC/4FEC1C04CEED11EFBD655511C4F9AE02/0A65ADB6CEEE11EFAA2CA812C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.170.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:9e:fb:2e:73:d4:e0:0d:7f:10:cd:c1:1f:24:cf:42:a1:
7d:56:33:8d:c1:c1:2b:42:10:80:6b:4a:a1:9f:7a:86:0e:9e:
9c:11:a6:c9:e9:07:27:34:af:e0:41:8e:1c:ad:86:42:ce:f8:
70:b0:d2:d3:26:25:90:82:3b:b4:66:d1:71:c5:6f:11:06:c7:
bb:60:75:e8:f5:b2:33:c5:53:12:ee:57:37:73:a9:0c:ef:6a:
a3:64:e8:d4:52:3e:eb:2c:cf:31:3f:ed:8e:63:59:82:b2:6c:
f8:56:18:29:b4:85:93:c2:4d:e4:f7:58:80:a1:ba:f1:0d:d7:
66:30:8c:9a:16:a7:7d:43:8e:26:e1:41:22:bc:98:68:b7:95:
aa:d6:c0:2f:4f:d1:11:e7:fb:de:9e:ca:54:a7:5d:8a:ca:b7:
9f:77:55:27:a8:7c:1d:d8:89:eb:0c:7b:a7:34:8a:ee:ca:b3:
1c:37:13:df:16:e5:35:a1:35:cc:9b:52:5e:87:e5:6d:f1:6f:
7b:6e:2f:91:e2:69:28:b4:0f:9e:1f:cc:40:c0:d1:b1:15:be:
c7:f4:75:e0:c9:e6:30:85:10:96:86:cd:34:ee:2c:0d:6f:03:
4f:3f:03:2f:d9:5f:3c:b3:0a:0f:94:7f:05:50:9d:64:63:f7:
cd:39:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:55:22 2026 by rpki-client