
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2EC3F75E717D11EF911E7525C4F9AE02.roa
File: 2EC3F75E717D11EF911E7525C4F9AE02.roa (raw, json)
Hash identifier: lrxX2DrFBKnPVPSanrIdD4RyoAtrjTJrfjCMzYUB2P4=
Subject key identifier: 62:5A:30:95:4B:40:35:63:D1:DA:40:6A:53:AB:B4:FF:50:81:13:E3
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0822
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2EC3F75E717D11EF911E7525C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:08 +0000
ROA not before: Thu 28 Aug 2025 14:51:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152980
IP address blocks: 160.30.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2082 (0x822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:33 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac5c-259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:d5:16:85:76:7d:f8:a1:3a:22:2e:4c:45:
b3:ec:a8:fc:b3:6d:95:7e:8d:72:12:43:64:b6:4a:
ce:0b:91:6e:b8:f1:09:7e:0b:fe:5b:bf:3a:ba:c8:
47:de:43:a2:d8:79:4e:5a:b1:9c:cf:d3:27:a9:8d:
d2:c6:e8:46:04:a4:21:b2:13:0c:3a:87:c0:7f:00:
96:19:f5:8c:b5:64:35:f8:ac:85:0a:56:b5:b1:4f:
aa:a5:9d:4a:d1:6a:03:e7:a4:95:3d:ba:63:26:c2:
6a:08:d8:a0:5f:52:21:94:d8:30:3c:07:eb:5f:77:
c7:98:61:66:c3:fa:9c:17:f2:7d:70:43:c0:3a:49:
67:81:e8:9e:97:1b:0b:43:9e:5f:63:cf:84:c9:47:
0a:24:58:80:92:65:bd:77:ed:e1:31:58:2a:bf:2b:
e4:b1:48:66:83:74:fb:32:c7:51:ed:e6:9a:7a:84:
2d:4d:f2:c5:2b:00:83:84:f1:b5:2f:e5:eb:8b:2b:
7f:c8:01:3d:b7:29:33:01:37:f6:71:25:78:bf:1b:
1a:27:a6:20:f5:b6:1d:db:8e:be:a1:42:1b:63:68:
ad:f6:46:ce:c3:dc:4f:01:a3:8c:fd:66:92:cf:fa:
a1:00:0d:bc:98:7f:2c:89:63:6f:c1:5b:00:35:96:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:30:95:4B:40:35:63:D1:DA:40:6A:53:AB:B4:FF:50:81:13:E3
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2EC3F75E717D11EF911E7525C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.162.0/23
Signature Algorithm: sha256WithRSAEncryption
10:34:b4:82:48:cf:43:ea:a7:f3:61:2f:ca:db:07:37:dd:0e:
68:28:9a:a9:9c:a2:22:40:24:cd:e1:b1:63:6b:81:ad:cd:81:
e9:49:4d:3e:2b:c3:1d:51:5e:69:df:d1:5b:fd:e9:15:3d:8e:
28:aa:2a:e7:6d:a5:50:9b:42:5a:59:9b:ed:b3:20:39:45:11:
1d:a2:d4:04:c9:a4:ac:df:a0:26:4a:f3:6f:65:e2:6b:67:25:
fc:81:93:12:b2:48:0d:1e:5e:82:89:69:65:87:6c:7a:9b:7c:
9e:3e:63:b1:ba:3d:8d:01:32:e4:88:ed:02:27:d1:08:48:34:
10:6c:15:11:81:f4:ad:7c:de:33:95:2d:61:a1:a3:6b:7c:09:
d7:46:6f:6e:03:fd:e9:7e:ad:95:f7:c4:c8:0a:0e:7f:20:09:
22:0b:d7:5c:83:77:d3:1b:cb:71:94:ee:26:dd:38:93:77:62:
ee:42:a2:0c:e1:f0:fe:e1:aa:68:db:02:9f:e8:f8:84:88:47:
2b:e7:77:5c:51:d8:8e:96:b0:66:1d:7a:05:9a:e5:16:9d:48:
20:68:0e:93:e6:00:52:2f:b7:23:24:8c:02:f8:c2:7a:63:54:
3a:3d:88:55:44:8d:70:60:71:55:ec:0c:4e:6b:b7:6b:9c:fa:
0d:5d:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:20 2026 by rpki-client