
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa
File: D24D5B8A3DD011EF883E3225C4F9AE02.roa (raw, json)
Hash identifier: vgglXWZzOBEjSpNaUwP292/Z1B+6kKEr0+9we9w/wZ4=
Subject key identifier: 93:3A:F2:BE:5A:D1:18:6D:41:57:AE:86:2D:AE:05:43:E8:9F:04:1E
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23AD
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:18:44 +0000
ROA not before: Fri 02 Oct 2026 15:18:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 152940
IP address blocks: 160.25.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 15:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9133 (0x23ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:18:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcb53-8d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:f5:1d:45:a5:8c:2c:98:f6:40:15:2c:75:
62:65:0c:7f:17:1f:e8:c5:27:7f:d6:c4:71:e0:a5:
3f:8f:f7:72:26:52:0c:c6:d3:03:7e:ea:c7:dc:22:
26:d3:3a:49:34:4c:9c:78:c6:31:90:91:38:51:26:
67:a3:4c:96:4e:51:98:d7:59:08:32:59:36:05:1b:
aa:7d:95:28:6f:d5:b4:ed:ff:ba:fc:25:37:c4:57:
27:92:fa:ef:1b:45:e8:fa:28:ad:7e:bb:b7:0a:2a:
26:16:87:65:45:9e:f8:8a:9b:c2:82:6e:4c:40:f6:
b3:72:af:a3:21:0c:4c:f2:ad:31:21:8e:c6:d0:37:
ef:a6:70:8b:b9:ac:ba:1e:66:20:be:68:ef:05:e9:
08:b7:15:59:18:f0:41:8e:17:c4:dc:9f:e2:ff:b6:
42:ea:28:16:e5:20:4f:ca:3b:e0:8b:f1:37:a5:56:
23:52:fb:0b:a6:d2:a0:d3:85:cb:e9:a6:fe:38:f0:
a4:ee:06:9e:98:4f:e4:68:51:d5:66:8e:7c:78:4c:
2a:8b:28:0a:16:2a:24:22:32:c1:93:e6:76:f5:4a:
c7:b3:9f:e8:f2:ae:2d:d9:15:10:8d:b1:b0:55:85:
ba:15:30:31:e1:13:fb:44:f4:f9:ce:23:5f:14:96:
83:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:F2:BE:5A:D1:18:6D:41:57:AE:86:2D:AE:05:43:E8:9F:04:1E
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.78.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:7e:4a:1f:6b:22:4e:b4:e6:cf:e8:ea:c1:47:c9:f3:ae:d9:
72:5e:94:4c:ad:ff:57:eb:df:a1:b2:4b:87:55:83:37:b0:5c:
90:bd:61:26:01:df:cd:04:99:da:0f:a2:01:0e:a8:91:bd:c1:
b0:47:8c:e4:a7:15:ce:34:fa:ca:e1:5f:16:91:5c:17:fb:27:
87:a2:95:25:f5:4b:cd:ec:1e:61:10:ac:4d:e9:45:9f:3c:99:
4f:c1:25:5f:cf:8a:5b:5e:60:21:51:0a:a7:cc:4d:32:72:45:
8e:97:6f:63:88:75:74:5e:76:5c:21:2d:5a:42:5f:2d:51:9e:
d7:af:0c:a0:ca:71:7f:78:59:56:95:2c:4c:f5:a0:36:af:17:
fe:06:08:87:c2:67:9d:67:9a:cf:26:55:61:eb:54:c5:de:d1:
7b:32:ea:c6:ec:c1:29:59:b4:b3:08:cd:59:86:27:0e:0f:99:
08:0e:7e:20:ae:d3:69:89:59:36:16:eb:1e:4f:28:49:10:be:
f2:c8:35:fb:23:80:36:2f:fe:52:19:69:f8:58:b4:58:1a:15:
e7:7a:a2:30:87:14:7f:59:88:c1:a0:9e:d6:d7:52:39:0c:c7:
b3:76:b1:a7:b0:cb:f1:d1:76:68:41:c3:91:11:d3:42:23:41:
d5:6c:99:c3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUxODQ0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2I1My04ZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+D1HUWljCyY9kAVLHViZQx/Fx/oxSd/1sRx4KU/j/dyJlIMxtMDfurH3CIm
0zpJNEyceMYxkJE4USZno0yWTlGY11kIMlk2BRuqfZUob9W07f+6/CU3xFcnkvrv
G0Xo+iitfru3CiomFodlRZ74ipvCgm5MQPazcq+jIQxM8q0xIY7G0DfvpnCLuay6
HmYgvmjvBekItxVZGPBBjhfE3J/i/7ZC6igW5SBPyjvgi/E3pVYjUvsLptKg04XL
6ab+OPCk7gaemE/kaFHVZo58eEwqiygKFiokIjLBk+Z29UrHs5/o8q4t2RUQjbGw
VYW6FTAx4RP7RPT5ziNfFJaDYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJM68r5a
0RhtQVeuhi2uBUPonwQeMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRDI0RDVCOEEz
REQwMTFFRjg4M0UzMjI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBlOMA0GCSqGSIb3DQEBCwUAA4IBAQB/fkofayJOtObP6OrBR8nz
rtlyXpRMrf9X69+hskuHVYM3sFyQvWEmAd/NBJnaD6IBDqiRvcGwR4zkpxXONPrK
4V8WkVwX+yeHopUl9UvN7B5hEKxN6UWfPJlPwSVfz4pbXmAhUQqnzE0yckWOl29j
iHV0XnZcIS1aQl8tUZ7XrwygynF/eFlWlSxM9aA2rxf+BgiHwmedZ5rPJlVh61TF
3tF7MurG7MEpWbSzCM1ZhicOD5kIDn4grtNpiVk2FuseTyhJEL7yyDX7I4A2L/5S
GWn4WLRYGhXneqIwhxR/WYjBoJ7W11I5DMezdrGnsMvx0XZoQcOREdNCI0HVbJnD
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:53:59 2026 by rpki-client