
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
File: F305F43270E711EF8573CF71C4F9AE02.roa (raw, json)
Hash identifier: YMLfZRhw2F992qnEpT9FOvqxRRq8hdiIFf9AFe0u2Q0=
Subject key identifier: B6:DF:E9:0E:F9:4A:B4:2B:58:EB:1F:DA:22:52:DC:0E:B7:0F:FE:38
Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Certificate serial: 0191
Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
Signing time: Tue 13 Oct 2026 05:54:32 +0000
ROA not before: Tue 13 Oct 2026 05:54:32 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 133453
IP address blocks: 160.187.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 05:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBA5B, serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A
Validity
Not Before: Oct 13 05:54:32 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acdc798-fac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:d7:12:4d:d7:49:42:57:6d:42:0f:63:1d:
1a:b0:3f:39:13:00:39:b3:33:d2:6e:32:29:3e:c1:
c2:29:2f:4a:12:f8:14:d4:39:1a:c7:2f:58:64:cc:
89:f1:73:df:f1:f2:81:e4:c0:c8:41:e3:1c:e0:49:
97:9c:36:ea:30:ef:06:73:96:5a:44:6b:7f:fb:23:
2c:27:6b:07:3b:34:73:51:35:dd:9e:14:50:13:9f:
ef:1a:15:f1:a2:bf:93:e7:0b:8d:49:f3:da:2c:39:
42:64:29:52:39:f1:77:46:93:7f:7a:b1:d6:31:dd:
b9:1d:8e:8e:af:b3:62:45:ab:8b:7c:c7:b5:cb:3a:
53:31:4d:b4:57:b3:ac:8d:3a:8a:3e:64:0f:cf:cd:
ae:1a:fa:0d:ee:da:94:24:c5:a4:15:a9:bc:e3:ac:
f6:e2:0b:17:d3:25:c6:04:4e:37:fa:17:ea:44:9b:
16:3f:d5:2d:70:60:3d:fd:4e:b1:34:ac:0f:48:7f:
85:59:33:cf:1e:b9:a3:db:fa:ba:6c:35:18:fe:9e:
bc:53:70:50:e0:f2:d6:77:5a:80:09:10:f4:0a:11:
51:84:14:ea:98:3d:fc:06:e1:6c:66:e8:44:a7:d2:
e4:40:ac:ec:03:d8:cc:ec:6d:56:48:d6:b9:85:13:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:E9:0E:F9:4A:B4:2B:58:EB:1F:DA:22:52:DC:0E:B7:0F:FE:38
X509v3 Authority Key Identifier:
keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.40.0/23
Signature Algorithm: sha256WithRSAEncryption
db:bc:2b:95:03:2b:0e:38:c9:13:74:9f:f0:e5:27:01:0b:47:
93:1e:94:05:da:a0:12:4c:49:ad:8c:f7:e4:c1:8d:c5:3d:c3:
32:b0:b9:b0:c3:2e:36:ee:72:96:45:8b:2b:0c:97:87:be:35:
37:55:f3:e7:a8:c7:eb:13:dc:ac:43:be:92:b4:41:7d:d5:46:
58:d2:1c:25:07:8b:73:b9:ba:44:b8:96:47:c3:5a:e9:34:43:
53:bc:59:a0:b5:fc:d4:36:87:5d:95:41:85:e1:7e:f6:69:2b:
21:63:f5:d3:62:2f:8d:1c:ee:d1:b3:37:66:c6:32:cf:55:e6:
00:74:0e:ed:bc:6f:63:a6:00:7c:b9:fc:42:98:7a:46:30:b1:
db:f7:fe:0f:c6:bd:e8:f7:9a:c5:b7:b4:68:c2:92:aa:94:c1:
1c:04:74:b5:06:4d:0f:b6:0b:9c:6f:4b:0f:b5:b7:ca:ff:5c:
ce:c3:00:63:c9:62:2b:4c:f2:3b:6e:06:e1:d4:8d:96:a8:77:
2f:d3:70:ba:99:dd:ff:e3:46:12:7c:8a:3e:8a:16:83:5c:06:
57:88:90:68:1a:93:8f:56:20:da:6b:40:ae:0b:d5:5f:11:e3:
d4:c1:9e:f2:56:be:ee:d9:f4:21:77:48:e7:78:b6:4d:0c:9a:
93:48:d1:4f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJBNUIxMTAvBgNVBAUTKDhCNDg2QUNDQUYxMkE2N0E5NTY4OEU4RDExQkQ2NThD
MDQxQzEyNUEwHhcNMjYxMDEzMDU1NDMyWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNkYzc5OC1mYWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEPXEk3XSUJXbUIPYx0asD85EwA5szPSbjIpPsHCKS9KEvgU1Dkaxy9YZMyJ
8XPf8fKB5MDIQeMc4EmXnDbqMO8Gc5ZaRGt/+yMsJ2sHOzRzUTXdnhRQE5/vGhXx
or+T5wuNSfPaLDlCZClSOfF3RpN/erHWMd25HY6Or7NiRauLfMe1yzpTMU20V7Os
jTqKPmQPz82uGvoN7tqUJMWkFam846z24gsX0yXGBE43+hfqRJsWP9UtcGA9/U6x
NKwPSH+FWTPPHrmj2/q6bDUY/p68U3BQ4PLWd1qACRD0ChFRhBTqmD38BuFsZuhE
p9LkQKzsA9jM7G1WSNa5hROpWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLbf6Q75
SrQrWOsf2iJS3A63D/44MB8GA1UdIwQYMBaAFItIasyvEqZ6lWiOjRG9ZYwEHBJa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi80RDdDRTY2QTcw
RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi9pMGhxeks4U3BucVZhSTZORWIxbGpBUWNF
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2kwaHF6SzhTcG5xVmFJNk5FYjFsakFRY0Vsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REJBNUIvNEQ3Q0U2NkE3MEU3MTFFRkI0NDRBRjcwQzRGOUFFMDIvRjMwNUY0MzI3
MEU3MTFFRjg1NzNDRjcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLsoMA0GCSqGSIb3DQEBCwUAA4IBAQDbvCuVAysOOMkTdJ/w5ScB
C0eTHpQF2qASTEmtjPfkwY3FPcMysLmwwy427nKWRYsrDJeHvjU3VfPnqMfrE9ys
Q76StEF91UZY0hwlB4tzubpEuJZHw1rpNENTvFmgtfzUNoddlUGF4X72aSshY/XT
Yi+NHO7RszdmxjLPVeYAdA7tvG9jpgB8ufxCmHpGMLHb9/4Pxr3o95rFt7RowpKq
lMEcBHS1Bk0Ptgucb0sPtbfK/1zOwwBjyWIrTPI7bgbh1I2WqHcv03C6md3/40YS
fIo+ihaDXAZXiJBoGpOPViDaa0CuC9VfEePUwZ7yVr7u2fQhd0jneLZNDJqTSNFP
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:08:42 2026 by rpki-client