
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa
File: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (raw, json)
Hash identifier: CQq8lNgG26KinVaacQnYutpt59IXUPvX9AhSc+uF38c=
Subject key identifier: 1A:BE:72:14:CF:12:7A:82:9C:37:85:AE:39:EA:E0:04:6C:ED:2F:A3
Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Certificate serial: CB
Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa
Signing time: Thu 29 Jan 2026 05:29:17 +0000
ROA not before: Thu 29 Jan 2026 05:29:17 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153493
IP address blocks: 161.248.122.0/23 maxlen: 23
161.248.122.0/24 maxlen: 24
161.248.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 05:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Validity
Not Before: Jan 29 05:29:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697af02d-8cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:1d:81:b9:66:75:4e:c0:67:ca:14:b7:64:
d5:ba:fc:7b:61:e0:c6:32:27:10:f9:91:97:10:e1:
d1:46:f5:ab:d2:76:fa:68:4b:7b:22:02:31:c1:d4:
86:a3:33:d8:39:6a:f2:55:42:94:b1:c0:b2:25:74:
46:d8:c2:c4:10:00:93:b8:71:aa:e0:59:96:23:04:
d6:12:c5:f4:14:ed:85:fb:93:e1:57:27:61:76:b2:
26:12:bf:b8:98:42:82:fc:ee:36:58:fd:27:ea:de:
b7:31:2a:1e:68:b5:78:15:96:05:28:cc:e9:0b:d6:
c3:57:d2:09:5e:81:91:ce:79:a4:04:36:07:bb:8e:
4a:86:35:f3:9d:38:82:6b:1b:7d:5d:4e:50:2b:7f:
12:4a:66:a9:54:f8:04:61:43:c5:21:c4:4d:57:95:
60:36:2c:14:aa:b2:cd:d0:dd:fd:7e:41:cb:4a:fa:
c7:38:96:82:cd:ca:b1:18:4e:75:ff:fb:e4:e9:d3:
c5:22:0a:c1:2a:e6:89:90:fe:f2:17:f8:88:46:5b:
75:9d:e3:68:97:3c:88:f7:04:f5:a1:c2:f7:59:c9:
14:ff:ad:c4:eb:4e:a2:44:02:a2:03:ce:7d:40:65:
09:93:9d:38:3b:89:ea:77:6b:8b:c0:c1:51:e6:2c:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:72:14:CF:12:7A:82:9C:37:85:AE:39:EA:E0:04:6C:ED:2F:A3
X509v3 Authority Key Identifier:
keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:fb:41:84:e8:a8:02:21:d5:6b:e3:01:c9:41:40:98:35:d8:
09:25:55:68:da:94:87:f3:ba:c0:54:ad:76:86:57:82:f3:90:
83:85:0e:8e:65:88:e1:2b:1f:4a:66:32:e2:f7:4d:1f:2d:e9:
cb:4d:7b:5a:5b:01:72:54:c4:e0:da:5e:1c:47:51:b2:63:ac:
c3:3f:23:5d:6d:0f:9d:5e:9d:38:9b:7f:6e:92:04:d4:f5:aa:
45:d1:40:68:07:e0:06:15:bc:e2:1d:50:61:49:02:0e:c3:a0:
30:23:4c:72:9b:7f:72:f4:af:73:36:be:a3:32:df:f7:c5:98:
d2:0a:5f:f5:e8:b7:d9:b3:00:a2:5e:58:9d:26:09:58:38:22:
09:33:fb:49:76:bb:30:9b:ab:d2:aa:b9:79:e6:c4:e8:a0:45:
52:d8:09:0e:ec:90:21:7e:ad:6f:82:85:d4:5a:be:94:12:d8:
d8:14:27:fd:0f:3e:49:9f:7a:63:34:b2:4d:e4:d9:02:00:ba:
d1:74:68:cd:e4:40:d1:9e:bd:91:b1:30:bd:b9:95:28:45:a6:
cd:92:48:91:d7:5c:e2:ff:c1:2d:dc:6c:a6:58:06:7c:99:9d:
a3:5b:e1:71:93:aa:4b:f0:97:9d:47:c5:b9:e0:32:b3:77:35:
ae:d1:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:34:52 2026 by rpki-client