
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/D4C92086A6F811F1B9352D575611F970.roa
File: D4C92086A6F811F1B9352D575611F970.roa (raw, json)
Hash identifier: vk74Ml0L3rYLO0OFSVDbrRJjMbXLxXzytbufm1ILTKs=
Subject key identifier: 4B:98:EF:F9:E8:B4:88:2D:79:5B:62:3E:66:4E:E3:94:51:D3:D7:21
Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Certificate serial: 017E
Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/D4C92086A6F811F1B9352D575611F970.roa
Signing time: Wed 02 Sep 2026 18:12:30 +0000
ROA not before: Wed 02 Sep 2026 18:12:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 197537
IP address blocks: 160.191.128.0/23 maxlen: 23
160.191.128.0/24 maxlen: 24
160.191.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 05:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382 (0x17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293
Validity
Not Before: Sep 2 18:12:30 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a98670e-87ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:90:63:b6:5d:eb:55:a9:77:80:85:fb:e3:
28:09:43:98:df:e0:8c:19:71:57:a9:a1:eb:33:b7:
0e:79:0f:88:a8:a5:d7:f7:9c:c7:b9:f7:d2:cb:88:
ae:06:48:39:b6:be:76:1d:c4:99:9b:ee:37:96:44:
7a:06:49:d4:01:53:06:24:7f:1e:3d:fe:80:1e:1d:
68:94:dc:e7:9b:8c:d5:19:d3:4e:a9:f5:75:2e:dc:
a7:b1:26:70:20:f4:9d:a0:f6:86:39:1c:7a:e8:43:
4a:38:8c:4c:66:a1:c2:0b:2a:38:e7:17:d0:c8:a1:
45:15:67:25:03:44:fe:71:33:5f:95:81:8e:e7:ee:
f2:54:76:7b:29:34:d4:5a:13:c2:c2:b5:ec:21:24:
97:c4:50:a1:7a:03:b7:e6:d8:48:86:86:8e:39:6f:
cf:eb:eb:5e:52:71:83:ef:a5:88:0f:f0:fa:e3:f9:
9e:f5:f9:03:76:7a:8b:33:8e:df:f6:72:7d:05:9f:
e8:62:fc:b4:27:b2:f5:f2:74:ee:fd:99:2d:8e:d4:
ab:3d:b9:51:6f:c5:a6:3d:f6:e8:41:8f:f2:69:17:
11:b1:e7:18:16:88:50:b3:23:d2:ef:cb:51:a3:bb:
92:af:69:b9:65:82:18:90:f8:f1:34:75:73:cd:70:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:EF:F9:E8:B4:88:2D:79:5B:62:3E:66:4E:E3:94:51:D3:D7:21
X509v3 Authority Key Identifier:
keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/D4C92086A6F811F1B9352D575611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.128.0/23
Signature Algorithm: sha256WithRSAEncryption
88:69:3f:51:16:9f:fe:ad:5f:e5:0f:a7:b8:a2:7a:fc:70:8b:
f8:79:7e:94:90:0d:be:ee:8e:20:82:79:d5:7b:bd:73:ad:fc:
b1:dc:3d:f5:91:a6:11:93:d7:89:05:14:bf:78:5b:83:89:8a:
e8:a9:d8:03:4d:e2:d4:c5:87:88:3a:8a:5c:18:a2:08:61:9a:
37:dc:d1:6f:cf:bb:54:22:3d:6a:70:60:0b:29:2d:2f:fa:37:
2f:85:4a:73:56:78:3f:73:c8:1f:d9:62:a3:68:3d:2f:1e:7e:
f8:1a:c7:62:f8:59:4c:6b:ff:43:46:44:27:cb:f0:72:05:e4:
fa:46:28:57:f3:88:1b:18:6c:03:01:1f:5b:a0:c8:13:24:c7:
36:48:1f:0c:4f:a5:bb:2e:d6:26:3c:64:29:70:7e:53:8c:e1:
48:07:3b:e6:51:b7:dc:15:83:08:93:7b:8f:f2:4e:df:28:e7:
6c:d5:26:78:54:b2:ae:0b:64:bc:d5:42:67:d8:b0:44:01:99:
43:85:47:bb:fa:d0:c2:4b:b5:76:68:03:b9:c5:f5:7b:c2:79:
16:2a:88:ad:cc:92:1d:e2:cf:8c:fb:66:5d:3a:b8:80:53:ea:
95:69:6a:46:03:d5:f9:f9:ae:22:8e:3b:49:4f:34:bf:11:3b:
a3:8e:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 04:42:08 2026 by rpki-client