
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa
File: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (raw, json)
Hash identifier: CoBKPTaGKggKkbkoCo2Dk6F6z5lZTZfgxUsgOyih/d4=
Subject key identifier: 21:4C:E3:CF:A9:18:43:39:9B:E2:C9:EF:C5:75:81:EA:81:A2:FE:FF
Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Certificate serial: 0190
Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa
Signing time: Thu 02 Jul 2026 16:15:39 +0000
ROA not before: Thu 02 Jul 2026 16:15:39 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 38887
IP address blocks: 160.22.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 15:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6EC, serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462
Validity
Not Before: Jul 2 16:15:39 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a468eab-af26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:45:05:fc:bf:7d:b0:35:51:82:79:55:e5:
8c:80:74:9c:49:44:d0:f9:52:00:09:c3:63:30:71:
2d:06:12:86:58:89:fb:a6:83:37:e8:1f:17:00:a1:
5e:7d:65:66:3d:0d:24:28:6a:79:9c:2c:3a:f1:a3:
1e:de:19:36:16:57:ee:fd:67:04:82:59:5c:cc:d9:
2b:b5:a7:bb:54:81:66:73:05:80:be:d8:d0:bb:57:
ff:93:02:49:d0:8f:fd:55:21:33:eb:99:2e:f4:ad:
06:31:94:8b:0c:04:03:26:dc:bb:74:ad:df:e1:21:
4f:59:db:f2:55:1a:60:d2:f3:9f:af:62:d6:f1:b6:
a2:fb:ca:84:91:5e:45:c5:01:6f:a8:97:1a:59:7c:
b5:0f:b8:70:9f:fa:95:81:f1:03:e9:41:19:9f:b7:
ce:dd:ab:77:70:f4:5d:9b:e1:ab:32:30:d1:64:4f:
f5:39:4a:65:13:bb:25:9d:34:f9:a1:46:49:4a:a1:
35:29:70:2f:c4:bd:d5:2c:be:9c:15:fa:57:5b:01:
c6:36:cb:59:47:25:51:d4:a7:56:88:1a:f0:30:9d:
b4:17:cd:84:4c:fe:03:3e:90:07:3b:ea:ae:2a:57:
db:b7:b3:57:36:93:11:dc:0c:83:30:73:c1:c4:22:
cf:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4C:E3:CF:A9:18:43:39:9B:E2:C9:EF:C5:75:81:EA:81:A2:FE:FF
X509v3 Authority Key Identifier:
keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.154.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4c:92:29:82:71:75:7d:ad:cd:9c:83:5a:05:e5:50:2b:d6:
7e:0a:fe:ae:b9:5a:d4:74:87:d5:14:9b:e7:6a:8c:8d:5b:fe:
11:9b:c2:84:af:00:1d:9d:46:af:f9:62:8a:02:be:4c:ca:ed:
b6:91:60:3d:d3:fc:14:26:4b:2d:8f:1d:58:04:86:26:f1:e3:
53:ab:00:e6:11:aa:8a:54:9c:42:98:41:b8:bc:22:0b:ed:71:
f1:c8:be:1b:f6:da:0f:57:30:dd:8f:0c:3c:6e:27:79:c5:8f:
de:fb:40:ca:e4:1c:99:39:95:24:71:e8:35:fb:41:de:72:1d:
fb:6d:42:50:ba:da:36:a2:8e:fd:97:2e:f0:57:36:c6:ec:83:
43:e6:a3:52:26:2c:1f:04:e4:70:ae:18:5a:7f:66:c8:43:e9:
5c:44:c1:88:e9:d1:c3:b9:e7:5e:e9:74:77:8a:53:12:6b:07:
c7:72:e5:8b:ec:f6:eb:2e:06:87:00:00:ac:e6:52:77:8f:93:
8f:d4:8f:d2:0f:c6:5f:57:04:dd:ed:59:59:86:a3:0a:56:e0:
7f:68:71:5f:db:71:1b:e0:8a:b3:55:1a:a1:42:f5:59:50:b8:
81:24:6f:39:ae:f5:6e:87:9f:81:7e:74:e8:af:70:d2:1b:78:
a3:e3:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:00 2026 by rpki-client