
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa
File: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (raw, json)
Hash identifier: CIdgKiWKc4mMdw08M1pwhFCtHHk4y+8zMM6sElC687o=
Subject key identifier: 53:BC:DE:B1:C8:0A:C8:F5:C3:CB:50:BF:9D:59:61:3E:4A:9C:4D:14
Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Certificate serial: 014E
Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:29:21 +0000
ROA not before: Tue 03 Jun 2025 06:05:21 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152882
IP address blocks: 160.20.132.0/24 maxlen: 24
160.20.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334 (0x14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF
Validity
Not Before: Jun 3 06:05:21 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a582a1-e632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:e1:fe:45:0d:c0:4f:74:d5:c7:c9:48:13:
75:12:c7:b8:e0:50:07:57:49:19:98:f3:33:c0:73:
ef:e6:4e:cd:63:03:21:5d:fc:6e:00:64:f2:f3:9d:
c7:c6:76:12:fb:09:c2:6f:c6:69:4f:21:5b:fd:8e:
6d:be:80:93:73:bb:35:f5:56:4b:b8:93:5b:1a:06:
be:88:74:98:8e:46:a9:7f:23:26:46:95:a6:ac:40:
ef:cd:35:4f:52:1f:14:06:e3:23:a7:0d:c2:65:5b:
72:72:be:cb:83:fe:31:0a:de:f8:33:91:1a:2c:8f:
1d:ad:17:f3:00:6c:92:84:52:e9:4d:34:4b:a8:0b:
a4:1c:5a:1e:33:b8:11:63:30:39:cd:b3:f6:b3:a5:
e4:8f:74:8a:c3:49:df:4f:98:12:f8:49:d1:f6:9f:
16:b8:16:c9:1c:0f:f2:61:32:19:48:29:e6:7b:a1:
a4:a8:3c:93:89:a6:b1:9c:02:24:d7:35:a6:04:3b:
15:0f:43:0a:0c:cf:b7:7a:52:13:66:90:9b:1a:f1:
a1:ef:2d:ac:45:d0:3c:7b:eb:dd:6d:e5:b8:bc:db:
fd:39:08:4f:bd:7f:d0:3b:ea:96:2a:28:12:a8:37:
61:09:7a:ca:1b:a5:c5:e8:18:5f:8e:e9:56:00:c4:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:DE:B1:C8:0A:C8:F5:C3:CB:50:BF:9D:59:61:3E:4A:9C:4D:14
X509v3 Authority Key Identifier:
keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.20.132.0/23
Signature Algorithm: sha256WithRSAEncryption
94:de:e5:63:e1:7a:e7:45:4f:c4:38:f9:13:23:62:43:ca:93:
6d:16:7e:70:9b:78:25:33:72:52:93:6d:a3:35:e7:32:6b:de:
37:61:1f:c1:7c:f1:b5:9f:4a:d2:9f:e9:d3:ea:bf:24:fb:eb:
fb:ca:f5:5b:4b:22:d4:35:f8:dc:b5:bb:34:d4:e9:1b:81:fb:
ac:0b:f8:36:37:67:40:a7:fd:64:2d:29:0e:77:19:88:8e:b4:
18:ea:2a:06:63:96:ff:24:63:39:0d:86:21:f4:ef:f6:1f:96:
81:23:1f:21:7b:6b:cc:65:37:f3:87:e2:3c:d9:25:aa:af:17:
c0:bb:72:bb:05:65:a9:4c:c1:3a:af:3b:63:16:73:cd:b0:c6:
69:c6:ae:7d:19:6f:09:ce:7d:56:60:f2:19:ca:b8:62:bb:49:
60:74:39:18:c7:27:45:5d:72:f7:29:d9:2b:83:89:97:51:ad:
09:ca:82:bb:3c:e0:7e:d4:db:f4:cb:a3:90:fa:4c:91:fa:d0:
af:0c:8b:66:ea:bc:ba:d6:6a:d4:0e:a0:33:a3:6e:98:b8:28:
f1:61:2f:10:00:b1:0c:ba:14:30:87:ee:d6:e9:73:79:96:f5:
1a:c4:b3:51:3c:69:8e:b9:6f:11:fb:01:be:c3:69:81:d0:46:
4a:a5:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:54:50 2026 by rpki-client