
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F511EA3AF77111F0A2BF2041476F56BC.roa
File: F511EA3AF77111F0A2BF2041476F56BC.roa (raw, json)
Hash identifier: uR7fYAXQRsFD2U+mrY5OGnPCx1HMNJiN5gQf+6a0W9A=
Subject key identifier: 3E:8E:FF:05:9C:E2:F6:C5:2E:B3:5E:33:C8:17:6A:7B:5A:8E:7B:F9
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0859
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F511EA3AF77111F0A2BF2041476F56BC.roa
Signing time: Sun 01 Mar 2026 21:15:56 +0000
ROA not before: Thu 22 Jan 2026 09:08:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 153501
IP address blocks: 161.248.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jan 22 09:08:46 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac8c-2d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:c9:f0:4e:9c:a5:da:55:d6:ac:0d:3c:54:
bd:43:83:6f:fd:92:43:74:b1:68:c5:6f:84:d4:87:
23:69:d4:b2:f5:b0:5f:56:fb:19:14:78:fb:3b:75:
60:ea:40:cc:78:01:61:0d:71:c2:12:77:d5:79:c7:
0d:18:99:2f:16:6f:70:b5:4e:a8:12:8f:e9:b5:21:
48:53:1f:17:37:a2:35:13:b9:91:fe:63:d1:72:9c:
33:86:57:b6:76:1b:7a:ba:4d:b4:1f:23:2f:2c:ae:
12:26:ba:b4:b4:03:19:67:24:01:d1:86:f5:e3:9c:
95:ac:e2:a1:c4:0b:c5:ec:77:07:e3:be:67:dc:51:
14:7e:22:00:9a:0f:b7:12:ab:65:57:83:92:ad:db:
e0:aa:da:2f:8f:ef:cd:fc:44:9e:71:e4:22:e1:01:
96:21:14:27:fb:73:b9:8c:14:b9:57:d9:f4:0c:1f:
64:e9:99:fa:e7:fa:d9:46:72:ac:47:6b:54:75:36:
fb:29:6b:b5:85:b0:44:ab:91:87:df:41:bc:14:74:
54:0e:f0:24:ff:e0:40:80:7d:47:2a:5a:85:8d:8a:
97:b0:c6:ff:77:25:b2:51:a3:e3:e0:e1:1c:e1:0b:
0d:30:89:4d:67:93:a8:5c:1a:14:f5:a1:94:b8:8b:
55:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:FF:05:9C:E2:F6:C5:2E:B3:5E:33:C8:17:6A:7B:5A:8E:7B:F9
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F511EA3AF77111F0A2BF2041476F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.80.0/23
Signature Algorithm: sha256WithRSAEncryption
00:a9:bc:00:a8:9c:4f:3b:b1:4b:b5:ac:16:b9:79:9b:bd:a9:
51:69:41:f4:6f:2d:64:e9:9f:43:93:ce:c7:50:aa:c2:f2:f3:
26:82:ac:0c:d1:df:4f:b6:35:dd:4b:0d:56:39:08:7c:3e:7d:
15:af:18:53:1c:6b:ca:0d:1a:5e:c6:96:d1:2f:34:e7:ea:f5:
fe:d4:47:ad:2d:2d:c9:96:0f:20:f5:2f:d2:bf:ca:8d:f0:23:
8b:d5:1c:f5:37:d6:c4:a4:7b:1d:19:94:2f:59:3e:22:45:44:
f8:c5:d6:51:2b:98:ba:99:d5:3b:06:c1:1a:76:6d:59:0d:e9:
5a:c0:23:c5:19:7f:84:4b:b6:9f:4a:ef:6d:34:62:71:69:6c:
81:92:1c:27:79:af:3a:92:75:f7:a7:01:1f:42:a5:35:ad:08:
ae:85:1a:bf:f1:f0:2d:bd:70:94:e5:47:25:e9:83:86:1d:5f:
19:3f:e6:a9:c9:b9:fb:0f:df:0b:d1:a3:7c:e6:8c:27:17:17:
bf:f4:ab:45:23:6e:0d:1c:24:0c:20:cf:ae:e9:12:75:64:8f:
73:c7:33:09:0f:e9:f3:9a:0b:04:bb:8b:5e:07:ad:59:a6:1d:
c2:cd:98:ab:73:2d:3e:77:a6:6b:3a:9e:c6:2e:e3:46:4f:7e:
fb:36:2d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:34 2026 by rpki-client