
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
File: FF233C70E62111EFACA87766C4F9AE02.roa (raw, json)
Hash identifier: PYR4UuGGlmCuzo5xccvj2ykJA4EkKftCUqk3OqLHMtk=
Subject key identifier: 8D:E8:36:B5:1C:4A:8A:79:E0:69:8E:E4:2E:37:A6:D6:0C:8D:80:B5
Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial: 018D
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:14:08 +0000
ROA not before: Fri 01 Aug 2025 07:11:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 214189
IP address blocks: 160.22.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 02:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Validity
Not Before: Aug 1 07:11:53 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a940-1126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:8f:a2:d0:1c:89:c7:02:ea:da:cb:18:ab:
e0:df:8e:e7:b8:7f:6a:f5:2f:0a:ae:63:ee:5b:3c:
ed:5d:ae:1d:37:78:c2:b9:a5:bc:89:62:94:a4:94:
1d:3c:a1:54:e5:84:e2:5a:ac:c3:c0:1c:c0:fa:46:
d1:5f:04:d6:f4:7d:a0:b1:98:50:bc:89:71:7e:3c:
fd:67:55:36:19:e5:ff:d1:bf:ec:c6:82:e7:7e:b8:
19:97:e0:da:0b:2f:c7:f2:9a:9b:47:76:0f:34:f8:
2f:07:b5:11:6f:eb:2d:0d:85:dc:7c:ac:78:54:f9:
f4:fe:c8:74:53:19:d7:31:2f:a3:88:1e:09:de:bd:
a9:fa:9a:7d:1a:52:01:fd:09:1f:1a:39:0a:2e:5e:
d8:e9:75:c1:41:28:ee:91:11:f0:b7:ba:c8:0a:09:
40:48:8d:0e:50:b2:bd:5f:a4:3f:f4:d5:6e:59:3c:
39:e6:43:22:d1:1a:72:af:64:19:7d:20:75:0c:73:
a0:a9:db:f2:99:1d:d6:e7:0d:98:2b:cd:6e:c6:6a:
02:8a:fe:bd:27:0a:22:d0:8e:35:d1:8b:52:48:76:
92:8f:67:aa:e1:39:c2:03:65:f3:21:61:8a:a4:9b:
c4:11:96:fe:6f:d9:5f:9b:1c:95:dc:91:21:c4:ce:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E8:36:B5:1C:4A:8A:79:E0:69:8E:E4:2E:37:A6:D6:0C:8D:80:B5
X509v3 Authority Key Identifier:
keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.155.0/24
Signature Algorithm: sha256WithRSAEncryption
46:86:fc:79:f1:6d:ae:f0:bd:c7:29:5a:9f:22:3f:89:2d:dc:
3b:f2:17:2b:e1:fb:28:a3:18:12:04:c9:e0:5c:55:a2:8f:c8:
d3:3e:4c:b4:49:6e:61:3a:b8:e5:86:77:cf:7a:39:9e:61:e4:
c3:93:e9:85:79:ff:f9:b4:68:cb:20:22:7f:06:af:89:f8:70:
b4:a0:4b:a0:c5:58:a2:25:58:a5:44:56:30:49:6b:42:e1:bd:
b6:82:27:9b:79:dd:1d:ff:70:90:d4:b3:dd:4e:d3:4a:63:95:
b1:f4:bc:35:1f:83:22:80:10:a7:26:9a:0d:33:95:1c:5c:09:
1e:a0:d9:fc:ad:49:9e:22:97:d3:05:ad:57:35:7d:4f:ef:f8:
13:f0:8e:ba:d7:2b:7c:fd:cc:70:63:96:ac:98:33:bc:8b:2b:
6b:4c:0c:f5:17:b6:07:70:c4:c7:6b:15:31:d2:06:75:f6:ae:
52:41:d8:05:db:96:b9:06:04:70:80:5c:6c:f8:fd:9d:5e:e4:
db:b7:46:39:7f:1b:3b:97:88:bd:01:08:f4:7f:c6:52:56:24:
a8:ef:fc:5c:ad:74:a8:d3:e6:47:0e:2a:8a:7d:fd:23:d5:fa:
65:d7:3a:c1:3b:ce:f5:c0:40:8a:40:ef:31:95:f8:ac:b2:24:
92:f7:d4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:40:14 2026 by rpki-client