
$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/F2A90F6A86AE11EF999DAD2FC4F9AE02.roa
File: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (raw, json)
Hash identifier: vlR6KwXR8TL2mf6RJa/2FvIbd+B9HhzeWeJ+vJVsVYo=
Subject key identifier: 5C:66:89:1B:B6:0C:49:E3:84:A5:74:C0:81:AD:D2:C0:DE:28:77:69
Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Certificate serial: 0157
Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/F2A90F6A86AE11EF999DAD2FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:13:24 +0000
ROA not before: Thu 05 Jun 2025 05:15:13 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140065
IP address blocks: 160.22.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91698EC, serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7
Validity
Not Before: Jun 5 05:15:13 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a465a4-71bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:66:a6:c9:c4:4b:d1:57:0e:79:03:2e:6d:
c3:b2:b6:1b:9b:d8:cd:fd:35:91:64:86:53:31:53:
ae:8e:33:06:3f:73:86:06:7d:89:95:3c:52:eb:5b:
fe:0c:7a:c0:09:7c:de:23:2a:b1:bb:d4:b0:0a:d3:
02:c7:a5:8a:78:15:a9:1f:b0:ed:12:c2:84:e3:a1:
87:e3:ac:c7:d7:f5:e9:7e:1c:8d:43:4f:44:b9:a2:
21:8c:5c:4c:8a:f9:c7:4d:63:57:49:80:4d:23:8b:
fc:59:f6:1c:36:00:46:51:1f:2d:33:c2:ae:e6:88:
bd:25:23:e6:02:93:f3:64:3b:7a:a5:2f:f5:3b:8c:
88:68:5b:ec:d5:de:5a:e5:d9:20:72:c4:80:e4:8f:
6a:92:8b:b4:7f:91:52:fb:ce:8b:0d:8b:65:5d:9d:
76:fa:60:61:cc:03:88:c0:81:18:43:3f:1b:a8:5a:
0e:70:b6:a3:01:e6:92:04:f8:98:07:b5:1f:38:68:
d9:29:ab:02:55:18:1b:1c:06:e1:ce:9b:31:eb:f1:
f2:b9:ad:a0:b2:ad:93:22:d3:cf:57:89:21:3e:5c:
94:d0:fc:39:38:55:0b:25:a8:43:d6:27:74:63:fb:
2b:ea:c0:d2:fe:d9:c0:04:8a:50:5d:df:e6:1b:ac:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:66:89:1B:B6:0C:49:E3:84:A5:74:C0:81:AD:D2:C0:DE:28:77:69
X509v3 Authority Key Identifier:
keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/F2A90F6A86AE11EF999DAD2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9a:cc:f2:3a:ef:8f:74:e1:8d:37:84:a2:6f:9d:26:32:0b:
6d:e2:a3:3b:8f:19:c8:a2:a2:79:c5:cc:69:ed:15:c8:03:04:
af:e7:90:54:5b:8d:ed:61:a8:df:e3:6c:97:8a:58:5b:19:94:
c5:20:30:43:86:3e:c1:48:81:84:bb:fd:94:b9:41:c0:8c:0f:
91:69:57:d0:ba:f6:50:f7:a1:a9:be:e3:8d:ce:eb:7a:1c:79:
dc:da:b2:82:41:82:aa:0e:6b:60:bc:40:ac:4b:f2:03:4f:1e:
a2:99:72:29:9e:1e:38:7f:2a:a4:7a:39:b4:9e:93:57:7c:d7:
01:9a:09:4e:86:3a:17:84:56:a3:2d:63:eb:75:d5:a7:25:1e:
5f:17:1c:cd:ff:9e:46:04:46:cf:01:74:14:9f:3a:63:6b:da:
b1:bf:8d:04:8e:09:57:86:25:a0:41:39:1c:98:e4:cc:64:9a:
8e:51:40:a6:ff:4c:b5:37:dd:3c:39:b9:49:31:73:37:4b:12:
46:86:5d:3b:6b:d6:6c:23:2e:f8:90:ea:9a:e1:a1:46:60:45:
f9:ba:8e:69:0b:db:d7:53:46:bf:9e:59:21:5f:b4:2a:0d:2c:
a5:53:65:03:74:10:49:ae:ad:f2:b7:ad:9d:78:1a:b7:1a:f6:
e4:6b:36:f1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njk4RUMxMTAvBgNVBAUTKDREQjNCMkUzNTk5QjY0NkU5RjMwQUY3NEE1OEM2Njc4
RkFGMUQyQjcwHhcNMjUwNjA1MDUxNTEzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjVhNC03MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7y1mpsnES9FXDnkDLm3DsrYbm9jN/TWRZIZTMVOujjMGP3OGBn2JlTxS61v+
DHrACXzeIyqxu9SwCtMCx6WKeBWpH7DtEsKE46GH46zH1/XpfhyNQ09EuaIhjFxM
ivnHTWNXSYBNI4v8WfYcNgBGUR8tM8Ku5oi9JSPmApPzZDt6pS/1O4yIaFvs1d5a
5dkgcsSA5I9qkou0f5FS+86LDYtlXZ12+mBhzAOIwIEYQz8bqFoOcLajAeaSBPiY
B7UfOGjZKasCVRgbHAbhzpsx6/Hyua2gsq2TItPPV4khPlyU0Pw5OFULJahD1id0
Y/sr6sDS/tnABIpQXd/mG6wyswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFxmiRu2
DEnjhKV0wIGt0sDeKHdpMB8GA1UdIwQYMBaAFE2zsuNZm2RunzCvdKWMZnj68dK3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OThFQy8zQThGODQxMDIx
NDkxMUVGQkU4OENGMjlDNEY5QUUwMi9UYk95NDFtYlpHNmZNSzkwcFl4bWVQcngw
cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDByYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njk4RUMvM0E4Rjg0MTAyMTQ5MTFFRkJFODhDRjI5QzRGOUFFMDIvRjJBOTBGNkE4
NkFFMTFFRjk5OURBRDJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBYrMA0GCSqGSIb3DQEBCwUAA4IBAQClmszyOu+PdOGNN4Sib50m
Mgtt4qM7jxnIoqJ5xcxp7RXIAwSv55BUW43tYajf42yXilhbGZTFIDBDhj7BSIGE
u/2UuUHAjA+RaVfQuvZQ96GpvuONzut6HHnc2rKCQYKqDmtgvECsS/IDTx6imXIp
nh44fyqkejm0npNXfNcBmglOhjoXhFajLWPrddWnJR5fFxzN/55GBEbPAXQUnzpj
a9qxv40EjglXhiWgQTkcmOTMZJqOUUCm/0y1N908OblJMXM3SxJGhl07a9ZsIy74
kOqa4aFGYEX5uo5pC9vXU0a/nlkhX7QqDSylU2UDdBBJrq3yt62deBq3Gvbkazbx
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:55 2026 by rpki-client