
$ rpki-client -vvf rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/88A6DB9086E211EF82ACA725C4F9AE02.roa
File: 88A6DB9086E211EF82ACA725C4F9AE02.roa (raw, json)
Hash identifier: cV0epGQTem/GEv7IIKubFOnRwGYNIWNxG9bk0ie+Eac=
Subject key identifier: A4:6C:46:14:F0:E1:40:F8:E2:3D:47:5E:DC:CB:9F:E8:D4:7D:14:A8
Certificate issuer: /CN=A913647F/serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Certificate serial: 0118
Authority key identifier: 46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/88A6DB9086E211EF82ACA725C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:01:29 +0000
ROA not before: Sat 31 May 2025 06:58:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 133453
IP address blocks: 160.22.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913647F, serialNumber=4641907FE5F473F18906D46AA20307EDEDA19C9D
Validity
Not Before: May 31 06:58:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a649-25f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:3c:f3:ea:8a:f5:3b:81:6c:2c:83:71:74:
3f:72:66:55:0c:3d:a5:c5:b6:4e:8f:3b:1e:70:3d:
0e:ca:b0:11:71:0a:7b:16:6a:72:85:0c:55:b0:2d:
60:77:d7:90:ca:a8:82:0e:ef:e2:0c:b9:9e:15:e3:
9a:25:ee:00:64:d7:9e:ec:0e:f8:36:8a:fd:29:ed:
06:42:cf:84:71:c7:a3:05:db:e3:76:cb:c6:2f:be:
9a:55:05:c3:d3:2d:19:fa:1c:57:bd:c5:68:6f:f2:
af:37:d0:8d:63:ed:7a:68:3a:9f:1d:ed:78:b1:f5:
e9:e2:30:49:9d:32:a3:8f:fb:be:7e:58:f3:31:ed:
a9:5e:09:c6:ed:2d:37:cf:60:8f:06:3b:2a:ee:54:
c4:85:94:a4:7d:da:3a:fa:40:7d:25:a9:4e:36:5b:
5f:91:97:68:83:32:7a:65:bf:e5:72:54:dd:d5:28:
ca:3e:b6:e2:5c:fa:61:8f:a2:a8:8c:82:41:35:c5:
e7:17:d4:30:e5:30:e4:33:42:77:7d:f6:e0:89:8b:
5d:78:ac:e9:fa:0d:e3:7d:26:95:6c:42:c4:29:4d:
e8:62:7d:c0:fc:a5:b5:88:61:19:c3:8d:70:0e:3a:
fe:4c:0b:02:55:bf:c0:e2:d0:4e:e8:93:51:50:72:
fc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:46:14:F0:E1:40:F8:E2:3D:47:5E:DC:CB:9F:E8:D4:7D:14:A8
X509v3 Authority Key Identifier:
keyid:46:41:90:7F:E5:F4:73:F1:89:06:D4:6A:A2:03:07:ED:ED:A1:9C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/RkGQf-X0c_GJBtRqogMH7e2hnJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkGQf-X0c_GJBtRqogMH7e2hnJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913647F/B91AAA7486DB11EFBA4D5F26C4F9AE02/88A6DB9086E211EF82ACA725C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.210.0/23
Signature Algorithm: sha256WithRSAEncryption
34:be:be:6a:0e:9a:0c:d1:f7:45:c2:6b:5f:d7:7c:18:53:fc:
43:40:95:c2:d0:48:75:83:03:1d:ff:ca:d5:7f:df:8e:f5:64:
29:89:42:94:1b:37:e8:da:35:73:23:11:f7:de:55:c7:d5:e1:
07:cd:9b:d0:df:87:cf:fb:1d:ff:04:bc:0a:53:5c:7c:83:26:
40:a4:92:07:f1:0a:77:bc:cc:ff:d2:32:50:b2:32:f3:dc:d3:
be:24:b4:fa:8f:71:72:c1:f2:b6:1b:cc:5b:7d:88:d6:dd:ea:
b5:37:46:dc:bf:40:30:c0:7f:be:8f:d6:24:01:da:2a:0b:ba:
28:a8:0e:99:a1:95:c8:1d:79:95:78:33:4c:e3:20:c3:71:f3:
b5:d4:60:88:8c:b0:a8:61:d3:99:3c:23:7b:a2:67:0a:f5:fd:
e7:ef:5b:95:12:21:7a:3f:69:35:1a:ec:d3:bd:35:71:b2:db:
99:16:f5:ba:44:58:a6:48:55:1d:dd:62:19:ee:92:91:1b:ec:
48:63:19:e6:57:17:15:97:0d:39:a8:a0:31:7b:aa:48:e1:11:
d3:67:8f:cf:7a:ef:4a:49:93:48:4e:01:03:0d:26:32:f4:6e:
9a:f8:a3:0f:5f:6c:55:d3:bf:59:97:1c:4a:59:cb:38:b2:3d:
b5:cf:86:c9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY0N0YxMTAvBgNVBAUTKDQ2NDE5MDdGRTVGNDczRjE4OTA2RDQ2QUEyMDMwN0VE
RURBMTlDOUQwHhcNMjUwNTMxMDY1ODIzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTY0OS0yNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWo88+qK9TuBbCyDcXQ/cmZVDD2lxbZOjzsecD0OyrARcQp7FmpyhQxVsC1g
d9eQyqiCDu/iDLmeFeOaJe4AZNee7A74Nor9Ke0GQs+EccejBdvjdsvGL76aVQXD
0y0Z+hxXvcVob/KvN9CNY+16aDqfHe14sfXp4jBJnTKjj/u+fljzMe2pXgnG7S03
z2CPBjsq7lTEhZSkfdo6+kB9JalONltfkZdogzJ6Zb/lclTd1SjKPrbiXPphj6Ko
jIJBNcXnF9Qw5TDkM0J3ffbgiYtdeKzp+g3jfSaVbELEKU3oYn3A/KW1iGEZw41w
Djr+TAsCVb/A4tBO6JNRUHL8jQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKRsRhTw
4UD44j1HXtzLn+jUfRSoMB8GA1UdIwQYMBaAFEZBkH/l9HPxiQbUaqIDB+3toZyd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjQ3Ri9COTFBQUE3NDg2
REIxMUVGQkE0RDVGMjZDNEY5QUUwMi9Sa0dRZi1YMGNfR0pCdFJxb2dNSDdlMmhu
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1JrR1FmLVgwY19HSkJ0UnFvZ01IN2UyaG5KMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzY0N0YvQjkxQUFBNzQ4NkRCMTFFRkJBNEQ1RjI2QzRGOUFFMDIvODhBNkRCOTA4
NkUyMTFFRjgyQUNBNzI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBbSMA0GCSqGSIb3DQEBCwUAA4IBAQA0vr5qDpoM0fdFwmtf13wY
U/xDQJXC0Eh1gwMd/8rVf9+O9WQpiUKUGzfo2jVzIxH33lXH1eEHzZvQ34fP+x3/
BLwKU1x8gyZApJIH8Qp3vMz/0jJQsjLz3NO+JLT6j3FywfK2G8xbfYjW3eq1N0bc
v0AwwH++j9YkAdoqC7ooqA6ZoZXIHXmVeDNM4yDDcfO11GCIjLCoYdOZPCN7omcK
9f3n71uVEiF6P2k1GuzTvTVxstuZFvW6RFimSFUd3WIZ7pKRG+xIYxnmVxcVlw05
qKAxe6pI4RHTZ4/Peu9KSZNITgEDDSYy9G6a+KMPX2xV079ZlxxKWcs4sj21z4bJ
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:59 2026 by rpki-client