
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
File: 5D5359F8E3AA11EFA9ED913FC4F9AE02.roa (raw, json)
Hash identifier: Kyz6eyTVOOhRfb7wtJ7zILREWWkOnemcTv2v7C9l/c0=
Subject key identifier: F3:C0:2A:EB:0D:F9:15:CD:B1:AD:2B:CA:39:2B:E8:F4:AE:17:C8:E9
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0840
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:34 +0000
ROA not before: Thu 28 Aug 2025 14:51:57 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153543
IP address blocks: 161.248.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:57 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac76-7713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:ab:b0:22:c2:2b:00:5a:10:82:f9:dc:0a:
35:a5:71:c4:dc:e6:f3:e1:c3:f1:f5:ec:3c:60:8a:
e1:3c:88:80:ec:d4:29:dd:4f:29:5a:9a:c0:da:7b:
b1:49:b0:a0:ae:1f:f2:15:e8:03:3d:aa:08:6e:df:
74:50:00:77:b4:72:d8:81:7e:af:c3:b9:e6:44:48:
f5:a8:16:e7:cf:74:42:57:d4:5d:38:0c:f1:dd:2e:
5e:31:9c:36:a7:4c:0b:b7:81:11:44:7d:a3:a3:4a:
f8:c1:aa:a9:38:78:b4:8f:d8:5b:1c:c8:6b:8e:bd:
1b:82:8e:dc:05:67:bd:12:79:29:1d:f5:c7:78:65:
15:80:d7:58:06:5d:6f:93:60:db:da:b8:e3:9e:0d:
a9:e8:a4:4c:bf:b6:3c:95:33:35:00:42:3d:5d:15:
72:50:a5:59:43:73:b9:b4:12:cf:fc:65:5d:76:d1:
fa:53:ec:1b:ab:5d:25:52:57:12:82:4a:76:8d:e2:
fd:8b:f2:93:31:c7:8e:c4:aa:b7:72:a5:f1:3c:93:
2c:06:d3:38:4d:d1:86:09:1e:d8:95:dc:ce:4e:53:
2a:ea:b2:c6:d1:6b:49:09:36:f3:0c:60:26:74:56:
48:8a:ff:87:35:9d:1e:4b:f7:d3:69:82:8c:f0:b8:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:2A:EB:0D:F9:15:CD:B1:AD:2B:CA:39:2B:E8:F4:AE:17:C8:E9
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5D5359F8E3AA11EFA9ED913FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.212.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:c7:06:08:2b:a6:15:74:d6:65:98:06:e0:e0:f4:45:e5:d9:
ce:e5:ca:5a:a1:57:36:a2:cb:36:73:95:3f:3c:04:0e:c8:6e:
a1:de:74:6c:26:95:31:f8:e3:a5:11:46:04:23:52:f0:71:2b:
f8:89:c6:b3:0e:73:79:43:9f:c3:27:38:e3:2c:88:88:0c:b2:
6f:f2:95:5c:d5:68:c0:6c:81:10:33:21:62:9f:81:ed:af:38:
8e:f1:a9:c7:10:e0:a8:00:6d:4a:a8:7b:42:13:8d:14:47:2b:
f3:18:25:74:fd:4f:9e:7f:77:2b:ce:69:90:e1:fa:b1:09:ae:
5d:bf:b8:1e:5f:49:80:d3:b1:0b:c2:7d:ce:be:3a:22:12:84:
62:f7:81:da:e1:76:12:aa:fa:0c:9f:0e:1c:7c:49:ba:be:12:
d5:2b:08:26:e3:22:4f:27:7b:81:3f:dc:ff:dc:be:46:a1:ac:
e7:c0:60:e0:36:3f:f6:dd:4c:82:f0:06:9b:5b:a8:0f:ca:27:
4d:ca:c5:97:35:56:7d:4b:9a:65:e0:de:f1:4a:fd:02:b3:d6:
3e:06:02:7b:85:b6:13:64:7b:27:a3:a6:04:45:5d:d1:e7:58:
2e:f4:d9:8e:d9:88:6a:4f:e3:b0:f2:da:45:07:f9:81:9d:c7:
f5:c3:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:33 2026 by rpki-client