
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/EC509DE4501211F0BE5D2025C4F9AE02.roa
File: EC509DE4501211F0BE5D2025C4F9AE02.roa (raw, json)
Hash identifier: L5L1ECl728HDCibYSZyhJFG9nLd5Huwk3rtZapHfWlI=
Subject key identifier: 86:C8:18:58:72:C9:04:9C:E2:95:35:44:FE:A5:37:F1:2C:5F:21:33
Certificate issuer: /CN=A91955D9/serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Certificate serial: 0101
Authority key identifier: 57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/EC509DE4501211F0BE5D2025C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:11:38 +0000
ROA not before: Sun 11 Jan 2026 05:23:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153455
IP address blocks: 160.250.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91955D9, serialNumber=57B5832B49001819CAE1CCB92CDB1CB46887E09C
Validity
Not Before: Jan 11 05:23:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a41eea-e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d3:ad:72:7d:57:6d:20:e4:05:4a:10:cd:5a:
03:6e:65:2b:fb:84:c8:f6:e4:f3:aa:99:80:cf:9c:
a6:86:2f:d3:9f:f7:2b:fc:a7:22:a5:db:d9:7d:fe:
86:ba:bc:77:fa:78:16:2e:c6:d3:d1:d5:58:8c:76:
ea:92:06:51:a3:5f:3d:1c:61:58:dd:c6:3d:82:25:
1b:95:b1:fe:85:a7:5a:97:c7:7e:57:cc:46:90:e1:
c9:2f:ef:01:22:b0:f1:7d:01:e7:fe:f7:69:9c:2e:
76:0f:98:b2:b2:90:ae:f5:e8:50:11:14:1b:ba:31:
0a:3e:63:16:74:f6:5e:f8:87:85:6f:06:c2:d5:fa:
24:15:7d:a0:62:0b:aa:48:d8:c9:d5:71:e4:2d:68:
a2:10:70:74:4b:16:b6:be:8c:80:d7:ca:69:f7:db:
39:d0:10:16:bf:72:65:6d:a5:50:5f:0f:73:4d:bb:
fd:8b:67:2f:ba:0a:01:e6:f3:23:20:6b:ef:9d:36:
8a:19:34:49:92:1e:46:4a:81:36:20:9b:fd:53:d5:
5e:e1:b6:98:55:60:27:78:05:10:77:cb:06:cc:41:
ae:c1:3c:5d:63:c3:1d:b7:e8:e7:b2:7a:a1:82:e9:
60:06:b3:8d:4e:a3:5a:2e:00:81:ae:09:29:dd:51:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C8:18:58:72:C9:04:9C:E2:95:35:44:FE:A5:37:F1:2C:5F:21:33
X509v3 Authority Key Identifier:
keyid:57:B5:83:2B:49:00:18:19:CA:E1:CC:B9:2C:DB:1C:B4:68:87:E0:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/V7WDK0kAGBnK4cy5LNsctGiH4Jw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V7WDK0kAGBnK4cy5LNsctGiH4Jw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/C54F2246A28511EFB66B1811C4F9AE02/EC509DE4501211F0BE5D2025C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.6.0/23
Signature Algorithm: sha256WithRSAEncryption
36:56:aa:2c:b9:f0:a0:6a:fb:03:fe:61:aa:f9:56:44:e9:f1:
5b:92:f8:1a:da:3f:90:45:56:51:06:63:18:08:b2:14:17:c9:
d9:07:68:b0:40:ea:ac:a6:28:7d:4e:b5:ae:3d:93:f9:d3:28:
f4:9a:ef:63:d7:2b:45:f7:eb:76:8e:de:01:e3:e4:d2:75:98:
23:fe:ff:24:1c:f0:6f:3c:58:48:09:2b:b2:61:ed:e1:cd:34:
12:0c:c5:4d:ba:37:d6:27:8c:17:d6:61:4d:82:d9:31:1c:7a:
7c:fc:5c:19:1e:b4:59:aa:dd:d5:54:73:c2:1c:b1:26:8e:fb:
2d:2c:8c:7e:18:73:c5:6a:5d:dc:0a:c6:af:09:98:4b:ab:50:
9f:73:a5:f2:8e:d4:74:14:c4:58:bb:94:a5:dc:8d:fb:78:42:
1e:13:13:26:8e:63:dc:48:7a:8a:90:ab:b0:87:c0:ee:08:ed:
2d:e2:10:b1:a4:f4:6c:dc:d1:14:5e:0c:bd:bc:da:14:b4:b4:
42:1a:67:25:34:d0:22:1a:3e:2d:5a:e3:83:8e:40:a1:80:cd:
8c:ba:e6:47:c3:a3:37:38:c4:a2:2d:b8:c7:eb:cf:cd:48:04:
72:6f:3f:47:eb:b3:54:e8:74:4e:6f:e5:c8:77:99:56:9a:53:
db:67:44:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:23:41 2026 by rpki-client