
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa
File: 2171B7C0B7A111EF88C1E184C4F9AE02.roa (raw, json)
Hash identifier: FW518ITkHVuPJ957Qg+dX9nJ0SjSmkGmkp/mGPQB4iw=
Subject key identifier: F4:29:58:5E:E3:F3:9A:DA:CE:68:6D:6B:56:54:EB:69:3B:39:21:F9
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0838
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:27 +0000
ROA not before: Thu 28 Aug 2025 14:51:51 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153435
IP address blocks: 160.250.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:51 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac6f-0e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:4b:b9:ae:0e:9b:b2:f6:ce:43:5c:a8:8f:
cc:d2:f6:b6:b3:6b:c1:f4:0e:78:e4:d6:8d:9a:78:
9a:c6:17:fa:22:2a:8a:59:db:f9:09:8e:ce:c5:65:
cf:1f:ec:8c:03:4f:b0:a3:ed:d0:da:4b:e2:8f:6b:
0c:52:0c:b5:32:fa:bb:9d:7c:e7:60:ad:ca:38:48:
4c:a0:95:18:9d:e4:98:b7:56:16:6a:66:16:ea:a1:
7c:a4:a9:8a:67:dc:79:4d:c9:fd:71:b6:d6:f4:f2:
05:45:6c:35:f6:ac:36:08:14:98:d6:2b:61:f0:a9:
9e:97:0c:aa:c1:69:c2:84:d4:61:1e:62:4f:de:39:
22:c7:d7:59:91:8f:02:91:50:38:61:d8:9e:9d:a9:
fd:c4:43:8f:b7:fe:ad:b4:81:60:fd:91:87:8a:27:
c1:65:93:37:aa:e4:34:8c:e0:63:dd:50:da:b1:bb:
d4:e5:f9:8b:90:03:b7:99:67:df:03:a7:db:24:c7:
91:26:04:fd:a7:30:0b:49:88:12:46:10:9b:b7:ed:
c0:a4:b9:38:29:5e:d5:cd:72:8a:22:1d:a5:26:27:
63:18:34:33:20:cd:65:6b:e3:f0:aa:b0:95:e2:f9:
a5:87:36:6d:b1:b2:98:66:3e:a5:66:e5:af:6d:76:
70:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:29:58:5E:E3:F3:9A:DA:CE:68:6D:6B:56:54:EB:69:3B:39:21:F9
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.124.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:91:3c:d9:8a:f4:d8:52:78:d4:d0:98:59:18:73:60:55:31:
bf:76:64:80:30:c3:0c:34:61:53:6e:87:6a:cd:52:67:30:28:
71:1c:1e:f7:12:d3:53:c0:45:8f:f1:d0:d9:b4:db:e9:6d:aa:
34:ab:5c:3d:39:27:7c:d0:1c:5f:bb:05:3d:14:98:c8:35:f6:
e0:0e:94:3f:69:44:d0:86:69:ae:ab:55:34:36:5c:ec:ed:e6:
84:d0:1a:cf:59:00:a0:f9:5b:2f:5e:1b:15:f3:fc:84:f1:a5:
d2:0e:6e:f3:2e:26:f2:7e:b1:b4:87:87:e0:f3:d8:4b:30:38:
21:12:e4:48:db:33:64:b4:fd:17:d9:88:96:de:e3:b9:6d:f6:
cf:df:e3:f0:b5:06:ae:de:6a:57:29:36:92:19:65:9f:73:15:
db:64:6f:0d:38:ca:6b:d0:a2:db:05:67:30:f0:85:3f:3d:06:
74:0b:c4:46:5b:71:b9:ac:b0:ec:34:80:63:a8:f4:48:91:5c:
9a:c8:cc:80:43:a3:46:47:07:ac:d3:27:8f:71:d5:78:32:fc:
12:61:73:8e:8d:52:98:87:c2:75:15:d7:ed:12:ca:f0:14:c4:
65:70:46:6b:a1:3a:7d:c6:8f:59:b3:61:d3:e8:c0:d1:01:51:
df:fc:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:33 2026 by rpki-client