
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/122F982CB92311EE8A5A4670C4F9AE02.roa
File: 122F982CB92311EE8A5A4670C4F9AE02.roa (raw, json)
Hash identifier: YLfc40jT9lIRkx/j5cMQGW6MNIQ/RyygXOb5QqqjivM=
Subject key identifier: B8:8D:68:13:06:37:5A:11:18:38:CE:7D:79:09:7B:F8:BC:8F:DE:8B
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 07F3
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/122F982CB92311EE8A5A4670C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:14:27 +0000
ROA not before: Thu 28 Aug 2025 14:50:51 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140766
IP address blocks: 64.239.24.0/22 maxlen: 24
157.10.186.0/23 maxlen: 24
157.10.188.0/23 maxlen: 24
157.66.96.0/23 maxlen: 24
192.223.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035 (0x7f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:50:51 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac33-aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:e5:da:13:3e:27:e1:4e:f8:1f:e7:ce:ea:
82:ce:fb:32:e2:44:45:b2:c4:8b:03:86:08:56:af:
fd:44:1e:8a:c4:b6:be:a3:1b:41:d9:16:ec:bb:47:
38:d3:f1:99:ec:24:37:bb:03:94:41:c0:1d:84:eb:
61:6f:d9:5a:18:6a:29:c3:46:e9:63:c1:20:9c:06:
4d:86:17:bb:f9:aa:5d:4c:23:27:c3:16:85:0d:ae:
48:ed:67:5e:b2:a4:32:3c:9f:fd:dc:ec:44:f7:3f:
f7:76:b8:7d:3f:0b:70:a5:9c:1d:7e:d0:d4:7d:9d:
2d:e8:84:6d:fd:a7:e5:0d:fa:01:62:21:6f:bd:c9:
91:25:b8:7d:ac:3c:48:95:f3:73:4e:2d:81:4a:a5:
77:cb:25:34:1d:cf:7a:66:0a:d8:8a:64:74:f8:29:
e2:21:95:fc:c2:0a:f4:e9:13:68:68:dd:26:be:07:
77:eb:51:b0:12:a5:fc:06:84:8e:f8:85:dc:be:9e:
d5:e7:8d:43:b8:16:e5:0f:7a:80:ee:e2:3a:8a:ff:
af:3b:9c:08:6e:ef:f4:ab:ef:4b:39:63:3b:c5:c8:
4b:b0:02:bd:fe:b3:2d:f6:bd:67:39:51:38:15:24:
d1:02:c2:5f:65:bd:f2:ad:3e:7a:3d:48:c9:23:a9:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:68:13:06:37:5A:11:18:38:CE:7D:79:09:7B:F8:BC:8F:DE:8B
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/122F982CB92311EE8A5A4670C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.239.24.0/22
157.10.186.0-157.10.189.255
157.66.96.0/23
192.223.12.0/22
Signature Algorithm: sha256WithRSAEncryption
50:c2:2f:2e:d4:24:1d:e6:d6:e0:96:8c:a4:d0:3d:83:33:23:
ff:01:05:c2:43:a1:37:48:ee:25:3a:3e:38:78:2d:db:c4:a6:
11:15:9c:78:1c:71:81:42:95:ba:69:cd:b7:7e:89:11:fb:8b:
ca:a2:0f:46:4b:2b:d4:47:61:ed:08:84:b3:e7:7c:e3:03:73:
91:4e:b0:f0:e3:6e:3c:e9:0d:6d:ba:a7:29:f8:90:61:48:a4:
5b:fe:f3:cb:26:88:4b:5e:bf:e0:78:d4:1e:2b:01:2b:b2:d5:
50:0a:48:02:37:34:f3:78:17:05:bf:ed:3f:25:ac:f0:9a:28:
f5:81:9a:d1:6d:0b:09:f9:06:6b:a2:d3:03:5d:0f:a2:07:eb:
61:83:c5:44:12:52:5b:32:5b:29:04:a6:c7:7c:4a:b2:d9:c0:
51:69:5c:fe:44:e4:5a:24:08:88:ab:75:90:74:9a:f7:95:dc:
06:07:51:2c:cd:c4:84:35:b8:55:af:90:ec:e1:75:c0:91:ca:
3b:a6:a6:22:9e:39:4b:ca:38:77:41:61:4e:6b:9b:9c:4a:bc:
47:2f:35:bd:b3:34:5e:40:e9:e9:bd:64:b2:ad:e4:65:53:c5:
65:18:09:f9:c2:3b:9e:f8:2b:4c:3e:70:6d:4c:05:70:82:dc:
c5:b1:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:36 2026 by rpki-client