
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
File: 5FFE79CEB30E11F0B1F91F33C4F9AE02.roa (raw, json)
Hash identifier: jzVSoUWGcGAMHVf0eDiG3tkiz9O8wAxR4Db4KZvyS+k=
Subject key identifier: 5E:66:0A:BF:23:4E:74:EB:23:50:A3:72:54:A6:1D:BF:BB:4D:98:74
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 21F3
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
Signing time: Mon 13 Apr 2026 07:11:35 +0000
ROA not before: Mon 13 Apr 2026 07:11:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153410
IP address blocks: 160.191.230.0/23 maxlen: 23
165.101.38.0/23 maxlen: 24
165.101.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8691 (0x21f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Apr 13 07:11:35 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69dc9727-63fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a5:43:0b:d7:dd:8e:42:db:91:5d:f8:9a:6a:
51:02:a2:36:9f:a9:dd:1a:db:66:4f:94:5f:4b:b6:
d3:76:f2:07:c2:76:1d:b4:04:c0:00:5b:e0:af:b0:
b0:85:95:15:b9:63:81:c6:14:76:ae:a7:73:b3:04:
c0:52:00:ce:2f:e8:64:76:ca:37:b8:60:dc:7d:6b:
6f:c4:41:0b:b8:56:2e:19:fd:aa:26:3e:fe:da:6a:
45:03:e2:2a:02:0b:02:79:3c:72:c9:de:92:34:4d:
e9:09:03:1c:31:40:8c:62:2d:13:5a:b0:79:80:3d:
96:00:44:a3:2d:5c:92:c2:46:cb:16:3f:b6:7d:38:
c3:6b:ea:24:be:51:fb:45:fc:3b:f8:cf:1b:b7:1e:
95:2d:be:fe:6c:3b:40:f5:da:f1:8f:b5:63:be:7e:
97:db:80:ed:29:fe:70:98:96:35:b8:8f:9c:b3:4d:
ab:b6:06:d3:f7:55:42:64:43:3f:c0:83:c1:22:2d:
71:16:16:c2:ff:93:1e:df:ea:92:02:63:9c:a2:ed:
0d:ff:7e:07:4a:45:7d:73:a8:ae:78:71:e7:b0:df:
2a:40:46:e4:ed:bf:89:a9:b5:59:4a:af:5d:d4:60:
e5:28:ea:a3:68:38:5c:ad:10:f7:45:a9:56:da:7e:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:66:0A:BF:23:4E:74:EB:23:50:A3:72:54:A6:1D:BF:BB:4D:98:74
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.230.0/23
165.101.38.0-165.101.41.255
Signature Algorithm: sha256WithRSAEncryption
44:c8:f4:65:5f:98:09:77:98:1b:d6:8f:21:79:7a:a1:be:eb:
06:71:a3:87:c0:b8:3a:95:f4:59:02:0b:cd:e3:e6:f7:b5:93:
a1:95:98:54:f3:cf:a4:ec:e2:7c:a4:9c:05:e5:d8:40:49:c7:
e1:26:09:28:74:36:f7:8f:c9:a5:2e:ce:28:33:48:94:71:d1:
71:7a:3d:0f:34:18:94:cf:8d:1a:74:20:47:14:cd:02:07:8d:
cb:ab:6c:c1:f7:f6:53:90:0c:15:66:82:94:92:17:96:8b:1c:
1d:c8:91:3b:dc:d5:14:ea:ba:ec:1a:97:85:49:2b:34:fa:4d:
57:57:83:01:1e:21:7f:2f:2e:85:9a:15:e7:dc:79:74:9e:2d:
4d:86:33:03:72:e9:f4:df:8f:94:d4:c1:a1:ab:3a:7d:b1:b1:
6f:67:ee:90:b7:da:d3:6b:90:3d:f5:e3:8a:ec:14:53:2e:ed:
cf:34:7d:1b:c7:db:dd:c4:17:0c:41:f3:8b:b9:df:94:81:f4:
8a:37:1c:71:f5:18:52:56:e7:94:1a:3b:a0:20:0f:72:ef:e5:
14:29:c1:4c:61:40:e9:78:eb:01:13:85:36:54:46:14:40:a6:
5b:23:30:83:4f:73:dc:72:22:db:a3:47:62:6e:8b:8a:3d:76:
92:93:94:2e
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICIfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYwNDEzMDcxMTM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRjOTcyNy02M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAraVDC9fdjkLbkV34mmpRAqI2n6ndGttmT5RfS7bTdvIHwnYdtATAAFvgr7Cw
hZUVuWOBxhR2rqdzswTAUgDOL+hkdso3uGDcfWtvxEELuFYuGf2qJj7+2mpFA+Iq
AgsCeTxyyd6SNE3pCQMcMUCMYi0TWrB5gD2WAESjLVySwkbLFj+2fTjDa+okvlH7
Rfw7+M8btx6VLb7+bDtA9drxj7Vjvn6X24DtKf5wmJY1uI+cs02rtgbT91VCZEM/
wIPBIi1xFhbC/5Me3+qSAmOcou0N/34HSkV9c6iueHHnsN8qQEbk7b+JqbVZSq9d
1GDlKOqjaDhcrRD3RalW2n5rOwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFF5mCr8j
TnTrI1CjclSmHb+7TZh0MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUZGRTc5Q0VC
MzBFMTFGMEIxRjkxRjMzQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQBoL/mMAwDBAGlZSYDBAGlZSgwDQYJKoZIhvcNAQELBQADggEBAETI
9GVfmAl3mBvWjyF5eqG+6wZxo4fAuDqV9FkCC83j5ve1k6GVmFTzz6Ts4nyknAXl
2EBJx+EmCSh0NvePyaUuzigzSJRx0XF6PQ80GJTPjRp0IEcUzQIHjcurbMH39lOQ
DBVmgpSSF5aLHB3IkTvc1RTquuwal4VJKzT6TVdXgwEeIX8vLoWaFefceXSeLU2G
MwNy6fTfj5TUwaGrOn2xsW9n7pC32tNrkD3144rsFFMu7c80fRvH293EFwxB84u5
35SB9Io3HHH1GFJW55QaO6AgD3Lv5RQpwUxhQOl46wEThTZURhRAplsjMINPc9xy
ItujR2Jui4o9dpKTlC4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:15 2026 by rpki-client