
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/CF24AA2890BA11F1BA9FFC863B11F970.roa
File: CF24AA2890BA11F1BA9FFC863B11F970.roa (raw, json)
Hash identifier: MTfoO9wn3QvZGZC4Gkbs2o88ommC38rd6edFjng06T8=
Subject key identifier: D6:89:8B:EC:15:91:C3:6F:D6:5E:73:28:BF:B9:D6:61:A4:C2:9A:63
Certificate issuer: /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Certificate serial: 11
Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/CF24AA2890BA11F1BA9FFC863B11F970.roa
Signing time: Wed 05 Aug 2026 10:45:44 +0000
ROA not before: Wed 05 Aug 2026 10:45:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152698
IP address blocks: 160.236.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 08:56:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Validity
Not Before: Aug 5 10:45:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a731458-3f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5d:c1:6a:2f:9b:d1:d8:86:63:fe:42:68:d3:
9c:89:85:1b:f4:5a:76:14:d5:0d:b4:e7:7c:a7:98:
71:c3:85:69:b5:e6:10:3f:8a:a8:af:eb:27:82:6f:
74:ba:34:eb:f2:4a:f6:11:dd:66:e3:ed:79:ca:02:
f3:13:32:64:07:0d:5d:fa:e3:5f:08:8c:e1:6f:8f:
88:58:35:0c:85:c7:07:4e:90:05:d8:c6:67:b7:46:
a3:a2:85:4b:5c:56:9b:8d:79:c0:d7:0f:d3:34:99:
21:5c:8b:b0:a1:d9:bb:32:3d:67:4d:69:be:7e:2c:
79:9b:fe:9a:d8:cb:86:c7:2d:fd:c3:1f:61:bc:0e:
5c:83:62:fc:20:e8:6c:4a:a1:1e:2c:f9:1c:49:58:
1e:6c:f6:fc:f9:93:6a:75:5e:15:42:d8:56:78:53:
48:1b:06:08:0e:02:d0:e6:41:35:3b:71:3e:a2:ce:
1b:af:a8:d0:e5:ac:58:8d:0d:9d:bd:ab:89:d0:6b:
24:ca:39:ad:e8:10:95:22:d8:f5:3c:ba:3b:dc:92:
b8:b7:c1:58:d7:b3:0a:3c:29:ea:5b:04:78:ea:59:
f0:66:43:9b:0c:06:9d:bd:fa:63:16:d7:9c:70:e1:
83:92:ca:c1:fc:ec:15:af:c4:b9:c2:ee:c8:9a:eb:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:8B:EC:15:91:C3:6F:D6:5E:73:28:BF:B9:D6:61:A4:C2:9A:63
X509v3 Authority Key Identifier:
keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/CF24AA2890BA11F1BA9FFC863B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.145.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c0:51:95:ef:09:49:27:af:f7:a6:9e:18:4d:21:38:27:97:
14:8a:90:48:7d:fa:c1:7a:8b:5d:35:2f:72:88:85:7f:86:ae:
5b:0f:a4:0d:19:0d:0e:d5:b8:a6:46:d5:e3:2d:bb:20:a8:bc:
49:75:1c:58:bc:4b:b5:79:80:cb:a7:94:27:94:19:ef:ae:61:
08:1b:8b:57:91:99:77:12:83:89:ce:89:51:44:69:b4:d8:d4:
aa:a0:7f:16:07:79:24:26:33:53:e3:d9:41:21:ce:59:34:1a:
c2:bd:a9:5d:7b:dc:72:c8:ad:bd:ff:da:cd:02:a2:d4:31:2c:
f8:72:70:ce:32:69:1a:4f:62:81:a8:28:f5:b6:4f:02:4e:22:
2e:68:29:a0:d6:e6:88:ec:82:ad:70:6a:a5:5d:3c:0e:53:c2:
bd:5d:c2:d8:8a:bc:a8:74:97:fc:da:44:62:11:f7:18:67:17:
1c:3f:73:b2:f8:c8:be:04:ec:44:44:e0:2d:41:81:ca:8e:11:
51:9e:27:fc:07:e9:8f:ae:c5:57:b7:81:f6:dd:72:3c:ce:5f:
84:2e:ab:2e:fb:61:48:2a:d4:ec:85:85:5f:1c:c1:60:46:b5:
3f:7b:55:0a:e3:38:89:ea:46:d4:eb:e0:9f:a3:2c:0c:be:0d:
a3:c0:79:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:39 2026 by rpki-client