
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D88830EA03DE11F099DD3450C4F9AE02.roa
File: D88830EA03DE11F099DD3450C4F9AE02.roa (raw, json)
Hash identifier: F8lEU3ese7MmK8nTewIkcP1Wv4rCqxsy9oEdlAfDli4=
Subject key identifier: CB:C6:35:89:27:55:0E:47:FE:36:C7:13:1F:52:A0:72:CD:C5:AA:B5
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23D8
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D88830EA03DE11F099DD3450C4F9AE02.roa
Signing time: Fri 02 Oct 2026 15:20:13 +0000
ROA not before: Fri 02 Oct 2026 15:20:13 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153499
IP address blocks: 161.248.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 14:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9176 (0x23d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:20:13 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcbad-d510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:02:db:e9:80:62:da:d2:e5:7f:1a:f3:f5:
f6:23:bb:a0:6d:a4:b4:04:06:d4:68:81:54:c0:d4:
de:30:00:e2:a8:ff:f0:d0:3a:fc:22:c6:08:6d:3f:
19:e2:82:78:91:cd:59:96:73:5d:b4:ff:42:4e:11:
f8:7b:6c:9c:12:5d:13:e2:21:ff:fc:55:f6:28:9a:
5f:f1:9c:1e:4a:0b:63:98:38:07:2f:53:13:be:a8:
91:6d:7c:62:bf:5b:4c:40:6d:fa:08:50:e0:85:37:
d5:5a:3c:d8:f8:75:61:c1:2d:0d:58:d7:23:ad:65:
48:77:96:cb:45:4c:62:0d:a7:f9:cb:cf:bf:14:ac:
10:8f:db:87:f1:66:83:ca:9d:93:6d:69:a0:43:95:
56:ab:04:0c:94:62:21:e7:71:8d:68:6f:ad:ff:19:
be:89:7d:98:68:e8:cc:8b:29:91:fa:3e:09:92:5a:
25:9c:d6:49:53:48:94:a8:9c:2c:d9:4c:ce:f6:a6:
c3:49:04:11:a9:a0:c6:9a:f0:0f:30:ab:c7:ca:31:
83:1f:6a:6e:0a:c9:14:85:22:55:30:d1:c5:85:bf:
cb:72:c5:67:d5:a8:8f:83:9b:b8:45:e8:9d:fc:8f:
4c:53:c9:15:1d:20:dc:06:2f:28:f1:b0:f0:6e:99:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C6:35:89:27:55:0E:47:FE:36:C7:13:1F:52:A0:72:CD:C5:AA:B5
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D88830EA03DE11F099DD3450C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.60.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:ae:91:bb:3f:9d:ff:27:2b:0b:d9:66:df:51:aa:4b:9c:a0:
d4:ba:0b:ce:6e:3a:e1:3a:b8:f2:2d:ad:59:09:fb:f5:84:4f:
d3:c5:90:87:55:2c:8d:9f:aa:3e:6e:56:70:f6:71:c0:3e:95:
43:42:72:cd:b9:37:4c:9e:06:75:96:25:2a:e4:ef:8c:03:f9:
be:c6:5f:51:a8:50:cf:ce:71:ee:ea:39:c8:ca:86:87:45:ad:
60:7b:2a:18:2d:95:1e:bc:90:68:d0:cb:8e:3a:4e:49:7b:98:
0a:18:0a:45:a3:39:70:8b:16:13:60:a3:ec:bf:18:2f:3f:c9:
9f:58:04:29:b2:64:44:61:84:9d:32:25:47:6b:67:0e:ab:9e:
f8:ef:57:11:db:a4:ef:e9:1e:07:b1:98:a9:d4:f1:44:ba:ad:
c0:c1:6b:93:d8:5e:b3:95:92:6e:d7:df:37:96:38:0f:85:06:
92:5f:16:8c:08:fb:90:d7:5f:5a:a4:d5:6c:b8:08:b4:20:c2:
ba:8d:5d:03:fa:5c:6e:24:8e:a8:46:96:0f:89:90:4d:f1:3d:
19:4e:f5:19:0c:1f:ea:66:7a:e6:38:a7:56:9a:25:3f:f0:fa:
f7:a2:98:5a:a2:ba:6f:d4:ab:c5:c7:88:71:93:05:c8:a8:54:
fb:43:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:10:50 2026 by rpki-client