
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa
File: F840BBBECD1011EFA6223D25C4F9AE02.roa (raw, json)
Hash identifier: BrqKphqw9klNiiHqJoOrjRXT6gIbNwG3TlbY6lWDRaY=
Subject key identifier: E7:E0:8D:7C:46:90:34:52:28:04:B0:20:B9:F3:31:5F:61:9D:2C:FF
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 0847
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:15:40 +0000
ROA not before: Thu 28 Aug 2025 14:52:05 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 24088
IP address blocks: 160.250.76.0/23 maxlen: 24
165.99.200.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:52:05 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4ac7c-6c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:da:fd:73:4b:fa:7b:00:98:ef:57:90:7b:
3e:e2:1b:17:29:b2:b1:6f:7a:c7:fc:b8:60:04:e3:
63:bb:cb:ef:17:0b:b7:14:cc:00:b4:21:2e:74:c8:
fa:7f:43:a5:4f:3b:50:83:55:35:2c:2f:ae:d1:3a:
9e:3b:77:e3:4b:39:a2:86:64:67:53:80:08:86:1c:
46:f0:44:3b:4c:5d:0d:f7:62:a4:c6:f1:ee:ba:ee:
58:4c:b5:ab:2b:65:4a:e0:3a:79:64:0c:bc:55:d3:
0c:82:46:15:4f:79:05:ef:e4:fb:6a:66:1c:1e:22:
0d:09:c9:b7:b1:07:19:7b:50:3a:2a:a0:f0:70:62:
06:8e:ce:cd:34:95:17:1c:f2:bd:aa:a8:44:dc:4f:
39:d4:43:c1:66:74:b0:e2:34:d1:6a:fc:d7:fa:c1:
30:b2:b7:fb:6f:79:8b:a6:65:b0:af:24:7a:94:be:
23:84:88:f7:a2:a0:76:34:23:7f:e7:d3:e4:3f:2c:
57:d7:fc:fd:15:a5:cc:f4:b0:19:32:ed:9f:5b:85:
7c:5c:88:bb:ef:7a:a4:d2:1e:e0:60:7b:28:52:17:
87:43:88:7a:1e:06:73:26:d1:47:72:ef:ef:f0:4b:
fc:c9:77:b9:85:07:b7:c9:f3:b8:5c:5b:61:e5:2d:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:8D:7C:46:90:34:52:28:04:B0:20:B9:F3:31:5F:61:9D:2C:FF
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.76.0/23
165.99.200.0/23
Signature Algorithm: sha256WithRSAEncryption
98:96:1d:5e:63:ae:f3:13:67:42:98:48:d5:76:fa:05:fe:74:
6d:b5:a0:49:3f:c1:d8:3f:b5:a9:50:7b:ce:94:7d:17:2a:58:
c6:87:95:b1:65:fb:3d:27:15:73:74:e0:2e:a1:47:40:45:ac:
16:36:6f:f7:9a:88:8f:8e:c8:3c:21:8b:a5:d9:47:30:68:93:
0b:b4:0a:bb:08:aa:b3:54:d1:63:46:d5:21:04:87:55:4a:d8:
d7:d2:f9:ef:b8:1d:59:c6:e8:59:6c:cc:07:0d:2b:0b:1b:f0:
10:30:a5:c6:94:cd:a5:7e:40:84:6f:5b:b0:55:28:33:f3:9b:
8f:0e:17:47:c5:93:04:b4:d3:c6:68:4f:e0:23:b5:81:e5:e2:
34:a6:af:88:9f:a9:7d:6c:b7:c1:1f:02:7c:3e:dc:e3:e5:29:
5c:67:65:eb:64:8d:62:38:20:4a:4f:bf:34:76:17:d7:d9:66:
98:e9:e9:93:09:74:68:53:b0:c7:65:fa:3b:1e:3d:4d:ec:58:
bb:0a:17:6d:2f:b9:8a:32:c0:74:e0:b6:3c:c8:b5:95:06:86:
5c:59:21:0a:4c:c1:06:3d:e0:a2:2e:17:1e:d9:d5:22:09:c8:
83:1a:ff:67:21:57:84:bc:9b:b2:77:1a:d4:ea:a1:4c:d3:34:
bd:e9:74:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:52 2026 by rpki-client