
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
File: 961F0878679311F0BBE7DC25C4F9AE02.roa (raw, json)
Hash identifier: KHG+rJopelXjzt8cNbdmwu7oPBRu7qmwCd92fbrlzpI=
Subject key identifier: C0:26:DB:70:FE:B8:B5:F2:34:0F:DB:88:86:1C:15:50:6C:18:1C:F8
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 21CD
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
Signing time: Mon 06 Apr 2026 09:45:14 +0000
ROA not before: Mon 06 Apr 2026 09:45:14 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135935
IP address blocks: 148.222.82.0/23 maxlen: 23
148.222.82.0/24 maxlen: 24
148.222.83.0/24 maxlen: 24
148.222.88.0/23 maxlen: 23
148.222.88.0/24 maxlen: 24
148.222.89.0/24 maxlen: 24
148.222.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8653 (0x21cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Apr 6 09:45:14 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69d380aa-794e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:9f:c1:2a:ae:07:6f:55:f7:0b:66:9a:c6:
6b:53:5d:92:a9:ac:3a:f1:cc:dd:ab:08:0c:fa:14:
e8:64:13:40:24:35:a3:48:15:d6:55:6a:3b:5e:10:
28:5a:00:42:fb:19:b0:26:52:9e:25:64:55:c6:c5:
d4:2f:c6:68:25:76:e2:d7:69:27:21:ee:e3:cc:b5:
03:b6:01:c4:ad:5c:79:a2:df:3d:cc:63:10:6c:8f:
75:39:22:6a:6d:93:c6:57:e5:75:d3:90:22:b5:b8:
e0:df:ff:2b:e3:c2:b2:4c:59:d0:9b:96:ff:2a:08:
8c:83:1c:b7:28:80:d0:21:e3:0e:00:1d:4c:64:e9:
f4:88:43:d8:f7:ee:fd:56:00:2d:31:a5:f2:25:dc:
e5:81:51:85:b3:75:c0:53:05:1e:c5:de:4d:bc:51:
f5:64:b9:6a:35:58:57:38:a9:c1:3b:a8:ad:22:1a:
6e:d7:74:6c:d4:f9:bc:c2:e3:fa:83:53:93:a0:e2:
7e:1b:d6:ad:f0:fb:bd:ce:89:b2:10:8a:f7:a8:c4:
72:53:30:87:4c:1c:cf:a9:1a:59:4f:40:82:13:05:
18:b9:46:f7:f3:96:6f:00:92:b9:38:5d:05:ad:8f:
46:49:5e:e0:b8:b0:8f:16:35:e0:67:e1:6f:65:0d:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:DB:70:FE:B8:B5:F2:34:0F:DB:88:86:1C:15:50:6C:18:1C:F8
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
148.222.82.0/23
148.222.88.0/23
148.222.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:c9:29:96:5a:ef:dc:78:30:fa:59:7d:64:cb:ec:4c:d9:53:
68:6d:04:aa:ca:95:14:5a:da:c7:e7:76:d7:ed:95:c9:3d:1d:
a3:21:0a:ab:9b:c8:4d:8d:7a:27:a0:65:7c:05:bb:1b:ce:93:
93:86:97:ad:e2:d5:49:57:2c:57:f8:96:46:87:21:51:38:88:
14:33:a9:34:b4:7f:0f:80:c6:5a:df:ef:ff:83:1a:76:84:44:
b1:29:17:f3:b5:95:53:e1:e6:68:df:f3:06:06:aa:de:42:c4:
fb:8b:7f:1a:31:ee:dc:b7:32:d2:1b:68:72:73:95:e8:eb:d1:
6f:3a:a6:5c:e5:b9:d3:a8:cb:42:ae:37:c4:9d:7d:df:0d:47:
7b:bb:0c:70:ba:8e:1f:43:0f:8f:bc:15:67:c9:92:4b:69:e6:
04:4e:4c:61:40:df:84:50:24:90:6e:66:87:9a:05:0a:9b:fa:
28:1b:6e:31:89:24:9d:2f:da:c5:f7:2f:f4:eb:65:63:34:00:
94:13:c9:0b:c6:fb:74:c8:1c:45:0e:b0:f5:13:93:b8:84:51:
18:10:87:43:01:9f:c0:6a:84:e8:a2:e8:5b:06:87:91:be:9b:
e7:5a:fc:c8:61:2e:7a:bd:f0:f2:84:3f:f9:16:3e:dc:45:93:
e0:10:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:05:18 2026 by rpki-client