
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D88830EA03DE11F099DD3450C4F9AE02.roa
File: D88830EA03DE11F099DD3450C4F9AE02.roa (raw, json)
Hash identifier: FxTxD9u9xRzNbmCGMwFRw2pJ+8J+XlHGf01kcGXefVg=
Subject key identifier: DA:F3:94:F1:1A:DB:43:D6:49:8A:00:45:82:02:C8:3A:81:D2:46:C0
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0839
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D88830EA03DE11F099DD3450C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:28 +0000
ROA not before: Thu 28 Aug 2025 14:51:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153499
IP address blocks: 161.248.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2105 (0x839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac70-cfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:26:96:67:5d:a5:ad:3b:72:39:3f:93:fa:
3b:de:63:71:9a:a6:cd:b9:2a:b8:86:24:24:87:cf:
16:42:ea:16:32:64:b5:fa:8a:92:76:2e:d4:03:11:
2e:98:60:ec:eb:a2:60:5c:33:19:4d:e3:7f:75:c9:
58:1c:7a:e6:32:da:d9:a0:d1:e3:36:63:59:b7:84:
3b:ad:1e:a8:bf:e8:66:70:03:ef:5c:bd:5c:18:0c:
b1:67:cc:c0:69:34:73:98:a9:34:f0:f3:d9:6a:e8:
37:0a:df:00:32:96:a9:66:3c:dd:f9:9f:2a:b0:59:
e1:06:2d:5a:c6:e2:05:41:e2:82:61:fb:5a:bb:02:
c7:2d:33:3f:8e:ec:71:04:1f:9e:1e:12:86:91:34:
57:2e:03:7c:7e:8f:0c:1e:71:d4:7d:b6:70:fc:1a:
b4:8a:76:d1:78:ea:a1:9e:c8:1c:bb:60:4f:0d:93:
9b:fa:9d:fb:e3:4c:b8:a2:a1:84:20:44:d6:4a:bf:
24:88:e2:fe:5b:b2:1e:80:80:3c:15:8d:03:cd:8b:
10:78:55:14:63:3d:b0:a5:32:63:cf:eb:6e:e8:e3:
00:ff:c4:07:15:23:0e:92:ef:66:7a:dc:5f:7c:78:
76:c4:5f:fd:1b:dc:e5:da:c1:af:b6:e6:d8:d1:aa:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F3:94:F1:1A:DB:43:D6:49:8A:00:45:82:02:C8:3A:81:D2:46:C0
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D88830EA03DE11F099DD3450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.60.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:7b:d6:e9:45:e5:f9:ac:c2:25:c2:f5:90:fc:ed:82:a7:8d:
36:c3:4e:f2:cf:ae:fc:64:45:89:95:8b:e4:3a:a4:da:30:4e:
f1:c6:ae:4d:28:04:11:fc:b1:6a:2a:f5:8a:b3:90:cf:5d:30:
23:57:45:08:90:67:30:aa:3a:89:1c:05:2d:88:e9:d3:b5:4c:
9e:84:eb:52:6f:e6:45:8c:b1:85:d3:6d:b8:42:a0:fc:12:9f:
36:9e:4d:c4:03:9a:a1:ff:ba:d8:17:d4:9b:e7:ff:02:d3:45:
b6:78:7e:f7:5d:09:5f:ac:a4:75:d0:f2:2f:ba:ae:5c:ce:b4:
a6:93:9a:b9:37:4f:16:4b:e0:99:17:ae:1b:49:79:e7:24:0f:
85:7c:ea:78:d9:aa:01:e8:49:2f:57:e6:8e:d0:d9:a3:c1:5c:
85:d5:b7:35:37:77:1e:ae:54:12:2f:04:6e:bb:d8:dd:4d:66:
b5:9e:6f:de:67:d2:da:20:59:0a:97:68:43:53:b3:af:d4:5f:
83:1d:54:68:f8:e2:66:b0:0b:2f:14:d5:c6:27:86:78:63:9b:
c1:25:a9:3d:18:55:26:5d:52:e7:0b:51:db:b8:6f:f1:c6:a2:
6a:16:a8:8d:0b:05:f5:5c:a6:55:a7:01:b1:35:80:2d:44:99:
b1:30:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:52:14 2026 by rpki-client