
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa
File: EA8CF7A8CB5311EF91F1081BC4F9AE02.roa (raw, json)
Hash identifier: 4FvToQacfGL/R01Xqon86uwwcxEvS/mvSJCHSiC6W9c=
Subject key identifier: 75:CF:D3:25:7A:01:3C:6A:6B:03:6A:07:B6:99:B6:0A:8B:22:78:6B
Certificate issuer: /CN=A91CDBF5/serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Certificate serial: E1
Authority key identifier: 98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:08:21 +0000
ROA not before: Thu 25 Sep 2025 07:25:23 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131266
IP address blocks: 160.30.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDBF5, serialNumber=980CE5BBF2CF35D60AE3B07218AB5CA910142C90
Validity
Not Before: Sep 25 07:25:23 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a58bc5-679c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:c9:03:23:87:02:9d:e0:1d:50:28:35:2d:
40:34:cc:3b:1a:58:e2:39:d3:f5:66:86:23:e8:ae:
61:5d:9b:1f:0a:f8:a2:f2:5e:c4:97:8e:06:86:38:
1c:f6:f6:11:90:e0:df:c7:67:6a:16:19:17:fe:64:
a0:da:c1:87:58:e9:e2:d6:e7:0b:e4:97:0a:27:cd:
22:e1:3c:5c:18:9f:ad:2c:52:5f:5e:b5:a1:47:5a:
fe:d2:2e:51:d8:7b:91:a9:c6:54:6c:3b:da:49:01:
3f:49:97:b4:f3:b7:ed:9e:e9:89:76:2e:96:c5:2b:
76:5e:62:8b:49:b7:5c:20:a1:56:80:91:91:7d:fe:
90:ba:f0:d7:d4:dc:2d:71:a6:95:11:78:b2:a9:40:
6e:96:aa:d7:ff:ae:33:a5:9a:a1:23:5b:68:1d:ef:
cd:6b:c5:c0:58:e9:b4:cc:4e:ea:f5:44:1b:a1:1d:
4f:88:7f:43:7b:e5:4a:1c:44:a0:4d:97:db:01:08:
2d:0f:ef:73:cb:a4:f4:da:30:8f:75:b0:62:1d:f1:
83:4b:04:09:e0:14:d0:c7:3a:ea:c3:ed:53:50:48:
59:31:58:e8:af:29:0e:90:d3:9e:eb:d4:65:4d:5a:
33:a3:07:6f:0a:00:9c:e2:2c:c8:c4:1f:e7:d1:54:
73:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CF:D3:25:7A:01:3C:6A:6B:03:6A:07:B6:99:B6:0A:8B:22:78:6B
X509v3 Authority Key Identifier:
keyid:98:0C:E5:BB:F2:CF:35:D6:0A:E3:B0:72:18:AB:5C:A9:10:14:2C:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/mAzlu_LPNdYK47ByGKtcqRAULJA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mAzlu_LPNdYK47ByGKtcqRAULJA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/5E9C4BB0CB5111EF90400D17C4F9AE02/EA8CF7A8CB5311EF91F1081BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.180.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0b:87:9f:9e:9f:08:93:b7:3f:2f:7e:bb:87:55:fb:42:a9:
32:90:03:af:1b:ab:2a:34:60:cf:a1:5a:8f:8d:9b:77:fa:8b:
c2:40:a7:fe:25:4f:4b:35:da:4f:49:93:ed:35:66:a7:1c:4d:
0c:be:41:3e:f5:ac:a7:ba:6b:8e:2e:6f:3f:1b:37:c0:68:e9:
72:92:ef:d2:e4:67:fc:fd:b8:e3:53:58:cd:ac:cb:ce:0e:02:
f8:0d:83:51:e0:2e:c6:00:10:f8:95:de:94:0f:15:30:28:0c:
7d:18:60:e4:f0:81:52:c5:ed:5f:94:16:c2:2d:36:a5:ee:88:
ad:b5:64:c0:2a:f6:ae:cb:47:fa:03:db:2a:a6:48:17:ea:6c:
f9:1b:8c:46:44:a2:6e:bf:a5:b4:b1:1c:37:91:e0:00:31:e0:
0c:9e:51:a1:ea:1b:69:bc:d3:51:c7:06:20:6b:05:5c:d5:2f:
00:1a:c3:eb:a2:55:98:51:00:e4:11:45:18:bc:08:cc:c4:a5:
a8:0e:14:b3:70:87:b8:d2:6e:75:fe:98:9d:13:21:00:8e:a6:
52:a1:43:fc:9d:5d:b3:8f:dc:09:a6:fe:8e:9a:ad:60:5d:2a:
24:2b:40:9e:de:ec:39:10:7e:60:ae:a0:06:be:ed:1e:c3:4c:
d8:30:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:56:59 2026 by rpki-client