
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/BD79B614915611F18490ADCA6911F970.roa
File: BD79B614915611F18490ADCA6911F970.roa (raw, json)
Hash identifier: QYVNcxQHFREpP33/6Uxpf9LJcni4eo476dd+VvhSGPw=
Subject key identifier: 78:6E:AF:9A:DF:C3:6C:9E:69:68:D6:D6:17:29:A4:E6:3E:6B:94:E0
Certificate issuer: /CN=A91C987A/serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D
Certificate serial: 0E
Authority key identifier: CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/BD79B614915611F18490ADCA6911F970.roa
Signing time: Thu 06 Aug 2026 05:21:56 +0000
ROA not before: Thu 06 Aug 2026 05:21:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154801
IP address blocks: 160.236.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl
rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:51:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C987A, serialNumber=CA901047CEA258FCB8B39B0364DA48A24662B74D
Validity
Not Before: Aug 6 05:21:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7419f4-c32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:c3:1e:e4:ea:0b:d1:51:33:12:dd:df:66:
25:33:1a:ac:51:ad:9d:55:66:c1:7a:0a:20:fe:65:
f2:b1:32:cd:2d:dd:60:f9:65:38:f9:a4:fc:67:97:
1d:7c:f6:86:df:16:e8:5a:61:0c:84:5d:22:f0:d3:
9d:55:87:5b:5b:e3:05:ff:0d:b3:36:ef:8a:3e:b6:
7b:f0:7d:a4:c9:ca:d5:92:bc:ef:a0:8b:3d:05:de:
a8:ec:86:db:d4:93:00:47:b4:73:df:65:8f:2a:5a:
7c:1e:3c:f1:f6:14:a3:f9:79:3f:e9:1f:dd:8d:1a:
93:03:41:f3:2d:06:46:86:fe:bc:cf:c1:69:9a:cb:
b4:46:71:c8:88:cd:0a:3b:2d:af:b3:dd:20:f6:91:
66:57:2d:1e:ce:2b:82:f9:7d:92:11:08:af:33:09:
50:90:68:1e:70:b5:a0:1b:b8:bb:2c:97:44:b0:d8:
3b:39:7d:8e:7e:f5:32:e2:7c:1b:0d:04:5d:38:60:
84:6c:9c:9d:e0:ac:d8:85:ec:99:ba:9f:1c:2d:eb:
62:31:71:90:ba:60:d7:fa:79:d0:8c:bb:0d:f6:a9:
d7:c0:30:14:69:ba:d1:e9:05:a0:89:0b:7e:5a:11:
9a:86:78:9b:52:0d:a6:c8:ab:90:d4:1e:d5:ec:c7:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:AF:9A:DF:C3:6C:9E:69:68:D6:D6:17:29:A4:E6:3E:6B:94:E0
X509v3 Authority Key Identifier:
keyid:CA:90:10:47:CE:A2:58:FC:B8:B3:9B:03:64:DA:48:A2:46:62:B7:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/ypAQR86iWPy4s5sDZNpIokZit00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ypAQR86iWPy4s5sDZNpIokZit00.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C987A/208C6A768B0811F1A43684C57011F970/BD79B614915611F18490ADCA6911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:1e:e3:44:30:be:27:3e:55:f1:bf:f3:79:08:4f:ec:f3:f2:
99:5d:b8:c6:5e:63:9c:2a:c4:c2:89:67:73:5b:77:2c:70:4a:
ff:c0:a1:95:da:fc:e1:5a:ee:c4:e6:1a:13:a9:67:db:7d:b7:
04:1b:c1:7f:33:b7:39:00:1e:6d:5a:26:b9:72:5c:24:e5:93:
8b:76:8d:c6:45:84:c8:a5:78:ab:85:f3:fa:f2:6f:f4:bc:d6:
08:ac:88:ce:02:b2:95:65:82:c9:69:5a:1b:24:5c:6f:d3:39:
e0:07:52:8f:3e:85:19:46:01:0f:87:df:a0:9f:6f:5c:6a:13:
51:a1:80:1c:5c:8c:f4:42:ae:23:20:64:db:57:37:23:42:9a:
f2:b7:aa:97:6b:d2:72:55:0b:ac:58:14:20:12:5e:24:dc:49:
00:e9:fd:ee:5e:e2:5d:0e:2c:3e:90:fe:70:3c:7b:f8:ce:bc:
b8:bf:af:52:33:b0:bf:e9:81:c1:c9:5b:cd:bc:d9:4e:1e:82:
86:2b:3a:52:84:dd:c3:9b:9e:f7:d5:d5:7b:cc:9d:6b:e3:f2:
3e:5d:c2:84:de:2d:34:b8:19:f0:75:ac:96:4c:ca:af:68:7e:
dc:2b:bc:31:b5:6b:ff:47:59:6b:0f:3c:c4:db:73:25:79:c4:
16:32:ff:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:35 2026 by rpki-client