
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
File: AD3ED5B6608F11F0856BA159C4F9AE02.roa (raw, json)
Hash identifier: rc+VNsx7q1K2PhK/fw/aBGu6V2vGt6OoDZvDpRF73OY=
Subject key identifier: 0F:9C:8E:95:11:62:0A:3D:46:0C:96:96:2D:87:48:2D:E1:3D:B8:35
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0844
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:38 +0000
ROA not before: Thu 28 Aug 2025 14:52:01 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154042
IP address blocks: 165.101.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116 (0x844)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:52:01 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac7a-2e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:81:6f:33:be:b5:64:24:23:25:17:18:14:
60:b0:67:13:d4:e2:fb:60:09:cb:90:8a:44:3f:e2:
37:5f:06:63:85:3f:14:fb:19:b5:7c:7f:8d:2d:1e:
cf:1f:d3:41:2d:ca:ad:f4:a2:b9:e3:38:94:0d:f5:
74:ca:55:6a:1b:5f:3f:73:3f:5f:8b:6b:76:e9:df:
c2:65:d7:10:0c:8c:c7:0b:44:81:9a:bb:4d:3b:6a:
99:12:9d:5f:ba:c3:96:2b:d3:59:54:51:ad:06:62:
96:f0:c5:a0:7d:33:0e:2b:d9:d4:ef:4e:d5:5b:28:
57:34:9e:71:b4:34:24:93:e3:99:5d:34:46:31:ad:
53:e5:ef:3b:66:fd:c5:d5:9a:76:a0:49:c7:08:43:
d6:dc:98:06:4c:1f:d5:4a:7b:af:85:c4:ce:0d:b1:
9e:fb:51:b9:2c:5e:8d:2f:e5:dd:1d:79:b4:a4:14:
e7:02:17:2c:88:7c:64:f3:cc:dd:40:3d:ca:77:7c:
24:99:87:b1:b9:45:ab:fa:a7:52:2c:f7:f7:89:9a:
c1:bc:2b:df:c3:01:9a:df:4f:9a:5d:03:fe:29:3b:
ca:07:9a:f4:5b:be:18:48:af:1d:c6:14:b3:9b:bf:
4e:5c:70:f3:f9:7e:7b:06:f2:a4:45:d6:12:26:59:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:8E:95:11:62:0A:3D:46:0C:96:96:2D:87:48:2D:E1:3D:B8:35
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AD3ED5B6608F11F0856BA159C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.101.158.0/23
Signature Algorithm: sha256WithRSAEncryption
13:6f:20:a1:b9:87:d3:fd:21:d4:76:c8:fe:e1:8f:dd:57:60:
34:27:be:c5:6d:c7:c6:56:66:a8:6f:04:f4:58:68:a8:7a:61:
a7:1a:a8:23:61:80:fc:78:8e:c2:ca:85:51:c2:ca:58:0a:fd:
a6:4b:6d:7e:27:d2:f1:47:38:5a:11:03:22:bd:da:ad:8c:50:
f9:0c:88:1c:3f:74:cc:4b:4c:bd:00:e7:d9:1a:73:e3:d8:94:
be:30:1b:6c:58:29:a1:53:f0:4c:e7:7b:a8:f0:07:27:71:da:
bd:db:b2:47:7e:e1:e7:8a:67:cf:e6:9d:5e:cb:a1:7e:e1:46:
bb:f5:c5:18:1c:33:09:29:c9:d6:2f:51:c3:56:82:f6:ae:ca:
17:e7:36:88:3d:22:b3:ac:81:65:80:ca:47:c1:46:e3:c7:f2:
96:c6:32:c6:e5:1f:1d:f7:4c:04:28:dc:38:52:d0:18:c5:78:
d8:c8:64:cf:90:a3:85:ca:b4:55:4d:61:77:f4:5c:6f:84:fd:
6d:4f:b2:70:73:cf:98:22:8b:4d:45:40:18:3e:38:8b:b4:8a:
54:e7:4e:c4:83:d0:e2:8d:f9:49:fa:92:da:f8:fa:bc:05:37:
a4:99:94:a4:2c:ae:e8:1d:cb:a5:cf:30:d1:9b:f0:d0:43:cf:
23:3e:3f:84
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MjAxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWM3YS0yZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjyiBbzO+tWQkIyUXGBRgsGcT1OL7YAnLkIpEP+I3XwZjhT8U+xm1fH+NLR7P
H9NBLcqt9KK54ziUDfV0ylVqG18/cz9fi2t26d/CZdcQDIzHC0SBmrtNO2qZEp1f
usOWK9NZVFGtBmKW8MWgfTMOK9nU707VWyhXNJ5xtDQkk+OZXTRGMa1T5e87Zv3F
1Zp2oEnHCEPW3JgGTB/VSnuvhcTODbGe+1G5LF6NL+XdHXm0pBTnAhcsiHxk88zd
QD3Kd3wkmYexuUWr+qdSLPf3iZrBvCvfwwGa30+aXQP+KTvKB5r0W74YSK8dxhSz
m79OXHDz+X57BvKkRdYSJlngcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA+cjpUR
Ygo9RgyWli2HSC3hPbg1MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQUQzRUQ1QjY2
MDhGMTFGMDg1NkJBMTU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWWeMA0GCSqGSIb3DQEBCwUAA4IBAQATbyChuYfT/SHUdsj+4Y/d
V2A0J77FbcfGVmaobwT0WGioemGnGqgjYYD8eI7CyoVRwspYCv2mS21+J9LxRzha
EQMivdqtjFD5DIgcP3TMS0y9AOfZGnPj2JS+MBtsWCmhU/BM53uo8Acncdq927JH
fuHnimfP5p1ey6F+4Ua79cUYHDMJKcnWL1HDVoL2rsoX5zaIPSKzrIFlgMpHwUbj
x/KWxjLG5R8d90wEKNw4UtAYxXjYyGTPkKOFyrRVTWF39FxvhP1tT7Jwc8+YIotN
RUAYPjiLtIpU507Eg9DijflJ+pLa+Pq8BTekmZSkLK7oHculzzDRm/DQQ88jPj+E
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:27 2026 by rpki-client