
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
File: 5FFE79CEB30E11F0B1F91F33C4F9AE02.roa (raw, json)
Hash identifier: zM+5XP8kmJ6N6aVH9YVK4CjqJtbsCAH3y+HoryeDvF8=
Subject key identifier: 58:D0:C2:11:C1:8A:F9:E0:1C:82:58:91:07:67:5E:98:D8:8D:12:8C
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 084D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:46 +0000
ROA not before: Tue 04 Nov 2025 10:14:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153410
IP address blocks: 160.191.230.0/23 maxlen: 23
165.101.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125 (0x84d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Nov 4 10:14:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac82-f4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:ba:10:f1:be:c4:b1:d3:48:22:46:b2:e2:
4d:e3:3f:f9:55:aa:9b:3b:91:65:28:53:19:40:b5:
47:02:92:0f:54:28:c6:42:50:b7:75:74:2c:0c:eb:
1f:4f:90:2f:88:09:26:d1:34:11:b6:12:f5:9a:b8:
ed:d6:6f:d9:c7:60:d9:91:d9:12:d9:c9:61:f3:fd:
a7:da:25:7c:0d:46:4e:e3:54:1a:62:4d:ed:1c:75:
43:50:09:30:cb:25:4f:0b:8a:18:e5:fa:2f:ad:4c:
e4:6d:da:ef:7d:08:1a:bc:f9:73:9f:d9:9b:18:24:
aa:2d:e5:85:57:c6:7f:89:7b:b6:19:de:0d:24:ee:
9f:9a:cc:c5:13:44:3b:95:63:52:95:7d:ef:11:9f:
11:6b:4b:ad:0c:5c:60:4f:08:df:ac:6f:77:14:11:
e5:cc:28:1a:ad:3d:6c:83:27:3d:05:26:f0:2c:2d:
f6:64:79:b2:ef:19:5f:ab:fd:c0:7c:93:54:71:39:
8d:f7:85:be:a0:10:cd:08:d0:87:51:23:78:1d:3e:
3c:15:71:e0:86:a1:c4:4a:12:75:e0:29:54:46:cd:
76:77:cb:b5:6a:47:3d:d1:cc:1c:b8:c3:8e:51:92:
37:ad:ee:43:95:f7:38:b1:5d:62:8b:ba:2b:f3:c8:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D0:C2:11:C1:8A:F9:E0:1C:82:58:91:07:67:5E:98:D8:8D:12:8C
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.230.0/23
165.101.38.0/23
Signature Algorithm: sha256WithRSAEncryption
91:d9:ad:e1:46:1f:65:da:2a:8b:b8:7a:df:12:56:b0:67:a6:
70:55:39:4c:46:2f:60:d4:81:13:7e:04:5b:e3:c6:05:9a:5d:
f8:cd:87:62:09:00:86:0d:2c:78:d0:60:63:0c:ac:18:52:d1:
45:b8:5f:91:bc:7a:7c:11:d3:32:cb:8d:c5:74:61:fd:7c:b0:
05:b4:fb:60:b3:ce:45:c0:32:02:6d:f0:89:72:3f:66:9b:e9:
d1:80:ce:b7:97:5a:bf:d9:3b:8f:40:f2:8e:2b:7f:ff:5e:db:
b3:3f:af:65:72:bf:4a:fc:b8:67:10:0e:52:23:51:60:b9:70:
f4:d8:3c:4e:6e:c2:9b:1e:53:b6:79:28:2b:08:7a:eb:ee:bd:
08:f2:9a:61:b2:fc:cb:55:5e:93:a2:e9:d6:c5:a5:33:b7:42:
aa:9f:5c:e5:35:34:b6:0d:e0:28:3b:98:30:cd:cb:ac:65:54:
b1:f9:ec:1e:82:75:5f:c3:23:e9:d4:b0:ca:de:77:85:68:8d:
91:3d:bf:b5:af:04:a6:b2:10:17:6b:3e:d4:7d:d2:4d:0c:55:
fa:c8:8f:f7:a6:d3:cc:ff:5b:b0:a6:e4:7b:d8:b8:e4:ca:64:
2a:26:5e:97:22:fe:e0:b7:34:7b:c8:fd:37:8b:07:78:93:00:
ae:d7:9e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:47 2026 by rpki-client