
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa
File: A409C5D2746611F187F6609D76A30FBC.roa (raw, json)
Hash identifier: tiKplu1qT1GoUcJ4ddjN4UtgXJrJ59ZmPU/cpNeDfZ8=
Subject key identifier: A4:A1:CC:24:4B:E4:33:A6:B7:06:C4:CE:8C:AD:BC:6E:6A:41:1B:15
Certificate issuer: /CN=A91FE40B/serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43
Certificate serial: 3B
Authority key identifier: 4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa
Signing time: Sat 10 Oct 2026 18:35:38 +0000
ROA not before: Sat 10 Oct 2026 18:35:38 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 136911
IP address blocks: 160.236.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl
rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 18:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FE40B, serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43
Validity
Not Before: Oct 10 18:35:38 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aca857a-3ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:54:af:80:cb:f2:bb:ac:1a:d1:dc:57:4c:
cf:d0:1c:53:a2:da:d0:02:0d:f5:96:21:26:21:dd:
b1:89:7c:5b:6c:3f:44:96:e2:0d:4b:4f:91:b4:06:
ee:fb:b2:cb:39:e6:25:30:be:55:c9:0f:5a:a9:46:
16:20:c0:6d:aa:bc:a0:7e:65:c5:a7:37:42:b9:99:
bc:9c:1b:ef:ee:d0:48:f7:5c:07:6f:64:2c:02:a9:
2f:7e:70:1c:a1:9d:89:74:b5:86:59:5d:c6:da:43:
28:70:e1:32:e0:2c:ba:ff:dc:b9:04:dd:94:fe:82:
60:c2:2a:5b:5a:67:f6:9c:62:4e:7e:51:79:89:9a:
27:02:c9:f6:8c:47:2c:c2:63:14:1e:6d:2e:87:bd:
f2:09:1b:2e:eb:32:f4:c3:8e:4b:6e:bf:e9:8a:9e:
09:13:bc:02:b6:05:2b:95:9c:0f:f7:b0:be:13:3b:
2b:30:4d:7c:39:68:04:d3:24:43:ab:ca:39:8a:b6:
d0:a4:57:11:39:a2:74:52:0d:27:a4:80:cc:6b:bc:
cf:1e:52:13:ea:98:29:4c:00:56:e7:73:f6:dc:d2:
d5:c0:c5:04:9e:9a:8e:81:d1:99:76:6c:0d:53:f8:
a2:37:42:1d:3f:23:16:a8:eb:cc:4a:4c:e1:c1:6b:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A1:CC:24:4B:E4:33:A6:B7:06:C4:CE:8C:AD:BC:6E:6A:41:1B:15
X509v3 Authority Key Identifier:
keyid:4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a5:b7:9a:f5:f4:e7:69:69:84:55:09:04:0d:35:85:bc:75:
1d:74:f1:65:62:48:5d:ff:9e:4a:19:8b:c5:92:33:d0:73:f9:
98:0a:2a:6d:c8:61:8f:83:66:d0:99:5f:f3:5b:2e:80:77:12:
f5:51:66:cd:03:88:16:39:de:50:ce:e0:95:1f:86:a5:a3:4f:
06:54:d2:65:15:3f:61:96:05:ef:41:1c:52:6d:e6:59:7b:5a:
54:eb:57:22:30:a1:71:f4:b9:3f:66:7c:b1:c2:9b:71:dc:2a:
ac:fd:21:dc:1f:cf:58:e7:d5:77:00:61:d2:e1:8a:41:97:90:
d9:36:f6:38:56:34:5a:8e:7b:47:75:e9:5c:5f:b7:1e:cd:8f:
27:c7:43:fe:da:dd:1b:ae:ab:69:71:03:ff:53:98:fb:22:39:
8f:ab:8a:84:01:8b:7d:44:fb:63:df:14:fb:bd:ca:ee:ff:8c:
9d:50:37:9a:16:b1:4d:75:01:7c:fc:32:c5:09:f5:e7:fe:0c:
a3:70:ee:55:1e:60:94:aa:8a:64:e7:06:77:12:ce:b1:a1:b9:
35:5c:9f:b3:63:14:e0:5a:d3:c8:24:ca:6f:a2:95:75:56:a2:
ce:1b:50:3b:83:08:88:4a:4b:cc:42:79:c0:fc:10:a6:a0:de:
5d:16:ec:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:52:20 2026 by rpki-client