
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
File: A90B2F28B1F611EF86337B54C4F9AE02.roa (raw, json)
Hash identifier: FpKYebTOMUd8YipYtl4iDbEzYiMKyHWRqn8sMgieEyo=
Subject key identifier: 9B:78:0C:03:9A:1D:43:A3:F7:39:F0:68:CF:13:FE:EA:DD:5B:61:2F
Certificate issuer: /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial: F3
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:14:55 +0000
ROA not before: Sat 13 Dec 2025 05:44:57 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134801
IP address blocks: 160.250.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:57:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Validity
Not Before: Dec 13 05:44:57 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43bce-ecf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:62:59:72:48:07:9a:79:51:e4:6c:5a:62:
44:57:48:77:5a:10:49:ec:01:8e:8f:d6:2c:82:ee:
d7:90:e3:cb:a2:4c:a2:69:b0:df:4b:25:3f:2f:f7:
dc:df:10:a1:80:0d:09:ed:66:ca:26:c4:90:df:80:
9d:20:49:f3:5d:1e:cb:54:86:8a:eb:0c:51:df:82:
44:d2:8b:ed:0f:8c:9a:d8:61:cc:ed:74:26:70:9a:
e2:fe:0e:f9:35:12:02:61:6f:e8:bf:93:db:da:92:
41:cf:11:1f:1a:28:a2:bf:87:c3:d1:ed:d7:09:1d:
eb:1d:ab:90:b6:7c:53:4f:9f:43:0d:14:ae:b1:59:
ff:3e:e1:de:d7:e9:62:b4:f4:2a:17:d9:94:0b:21:
21:83:e9:73:ee:80:83:57:83:42:9b:63:63:50:03:
4e:bc:40:9e:28:d9:8e:a6:05:d7:bd:16:fb:d2:b9:
a6:61:a8:1d:6f:b4:43:f6:fd:fe:86:89:ba:fc:b5:
2a:1c:d7:89:d2:d6:49:0e:57:a2:1a:83:9d:6e:74:
43:93:36:e3:de:83:6c:79:14:84:5b:c1:e0:05:7f:
86:f4:8b:5a:a9:0a:98:18:87:ec:aa:95:8c:e2:70:
3f:0f:81:8d:91:40:3e:2a:73:33:50:c6:da:f4:71:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:78:0C:03:9A:1D:43:A3:F7:39:F0:68:CF:13:FE:EA:DD:5B:61:2F
X509v3 Authority Key Identifier:
keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.68.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:72:ee:d6:93:f4:59:b8:38:c0:52:2e:e4:8c:b9:0f:46:06:
b9:94:74:9b:47:57:97:d6:44:ce:ae:d9:4f:42:5c:fe:64:da:
a8:be:84:c8:e6:8e:b1:5a:f8:58:b3:5c:ad:7c:90:8c:26:41:
5d:34:ea:97:5f:a4:33:0d:51:60:e2:80:9c:c7:45:08:e3:39:
66:24:a3:e6:b2:c3:2f:a8:92:dd:86:0f:d0:42:1a:1c:b0:3d:
85:a4:6e:62:a5:5f:3b:ea:aa:e0:4e:1e:5a:45:6a:84:a3:8b:
81:87:1e:17:30:34:f9:c5:22:6d:ab:df:5d:09:af:2d:8e:55:
a3:2d:ca:7a:eb:bb:e1:9c:96:da:4f:7d:29:45:a8:e5:77:02:
41:c2:22:bf:7e:69:88:8b:41:fe:ce:f2:c6:32:3a:14:30:41:
12:8e:f2:c3:9d:de:8a:12:60:c8:7c:09:7a:68:11:c8:0d:70:
6c:7b:55:1f:c4:89:bc:53:db:04:73:34:ab:80:25:60:dc:92:
ba:c3:53:44:3c:54:8f:ac:30:4d:a8:55:ce:08:99:da:77:a9:
11:0a:1c:c6:6d:e2:81:9c:9e:ef:37:0e:4b:37:c9:49:3f:e9:
e3:9a:4e:03:de:5b:73:8d:3c:31:4f:8e:a8:5f:9d:9e:8d:30:
6b:be:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:11 2026 by rpki-client