
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/812B7A9E905411EF9B4B1342C4F9AE02.roa
File: 812B7A9E905411EF9B4B1342C4F9AE02.roa (raw, json)
Hash identifier: fAamefLHNOSeQgplRkPA7921C4/+E2ZS4jK3rvLu+S4=
Subject key identifier: B7:14:59:40:C6:47:D7:70:06:21:11:F3:5C:03:22:5E:8C:07:3B:77
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 07EE
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/812B7A9E905411EF9B4B1342C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:14:23 +0000
ROA not before: Thu 28 Aug 2025 14:50:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 131378
IP address blocks: 160.191.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:50:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac2f-60a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:77:35:e4:64:b6:62:54:10:c6:c1:f5:e4:
ba:41:89:85:f3:80:f5:ee:44:34:24:ad:36:d8:c6:
e2:3a:d8:31:ad:a7:be:8c:fa:27:ef:d3:0d:68:b2:
49:e5:a8:f3:0e:48:dd:37:33:0f:a6:c4:bb:b5:b3:
8d:2c:91:f9:d2:b7:01:a4:61:cf:6f:e8:d6:95:91:
82:ac:b0:35:6d:90:e0:47:fe:76:34:a0:7c:42:a7:
61:5f:b2:98:ec:76:25:9d:06:c1:a1:42:c4:ec:ad:
b3:54:bb:1c:df:ab:14:7e:82:5a:b4:dc:b1:c6:ce:
ec:f9:93:70:7a:e5:37:27:74:62:b1:79:51:50:a3:
7c:91:e2:ea:f0:22:84:7b:55:a3:78:55:11:59:9e:
3b:26:2b:be:e1:0c:83:64:f4:a8:c9:0d:15:38:a0:
6e:14:93:63:cf:fc:43:2c:a6:e1:a6:0f:79:10:5b:
01:48:a0:f0:3b:36:93:b4:e8:3f:46:92:a9:7b:94:
c6:61:39:b7:0d:1d:ce:65:37:9f:6a:b4:93:d3:e4:
40:b2:63:97:23:3c:94:72:df:00:be:b5:d2:12:37:
eb:76:5f:ed:5a:44:fc:d3:03:e3:33:14:38:de:47:
8e:ef:2f:0c:88:19:0d:d7:be:37:3b:45:a9:0f:87:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:59:40:C6:47:D7:70:06:21:11:F3:5C:03:22:5E:8C:07:3B:77
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/812B7A9E905411EF9B4B1342C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:65:e7:63:75:5b:ff:b0:9b:01:a8:1a:3d:82:ed:c8:9e:7d:
95:d2:ce:da:99:fc:d0:d7:4c:9d:dd:89:0c:56:49:9f:99:2e:
6a:2c:ab:5c:e3:e2:91:da:ba:ec:8f:3c:31:67:2a:eb:4f:c2:
16:2f:91:61:b4:28:33:d6:88:ba:33:5b:4e:6d:98:9c:5f:17:
b6:a2:22:2e:6e:0e:10:40:70:31:d2:72:67:9d:0f:79:a9:ab:
5b:57:a5:16:e5:dc:06:4d:36:da:1f:8a:04:50:ab:f5:01:2a:
23:4a:87:7b:83:22:35:8a:07:58:cd:a2:82:98:06:32:00:58:
b4:ca:7f:21:8e:5b:a7:9d:db:c9:b3:e7:86:a2:2a:f1:10:d1:
ed:49:5f:34:68:0e:b7:9d:46:52:48:ae:3f:ba:80:f2:bc:16:
e9:86:95:44:7f:f9:66:b9:a3:97:32:95:93:fc:cb:4c:df:2e:
75:1e:30:d0:71:b4:63:14:8f:c4:a6:d2:6d:1b:a7:1f:8f:92:
1c:b0:14:ac:b9:85:01:e6:ac:b0:c3:5b:0c:b4:3a:de:86:85:
55:df:a1:3f:fd:ec:5e:3e:b2:71:01:66:ef:50:fc:6d:a0:b6:
cf:47:d9:c6:ea:a9:90:da:96:17:82:05:81:9a:cc:94:b7:78:
18:fa:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:16 2026 by rpki-client