
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
File: AB34787C867A11F1A5C6553363A30FBC.roa (raw, json)
Hash identifier: FTDO24Heqe50M9VRGEUAmnTjUd0WoMvbRi/zQMVucu8=
Subject key identifier: 4D:43:A7:92:02:AA:02:4D:E9:FE:98:DB:F8:67:BD:D0:13:2F:C5:E7
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6DE7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
Signing time: Fri 02 Oct 2026 15:25:41 +0000
ROA not before: Fri 02 Oct 2026 15:25:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 135999
IP address blocks: 45.120.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28135 (0x6de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Oct 2 15:25:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfccf5-91e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:b7:7f:52:bf:11:93:a2:71:a3:16:0a:1f:
4f:e8:4b:a0:78:21:3a:9d:f8:26:2c:31:ee:03:37:
9d:2c:09:6d:1b:17:90:ec:31:e6:bd:f8:9a:30:23:
98:54:8d:6a:85:4f:4d:d7:5a:ed:c7:3a:f3:68:7f:
bf:0c:ff:f1:61:54:aa:75:51:0f:cb:ef:84:7b:e1:
89:65:8c:57:7a:9c:8e:d5:1d:c0:60:f7:38:c4:57:
4d:97:5e:a2:69:3b:e9:f6:89:c4:a0:26:93:72:63:
8a:77:e5:ac:4d:ad:78:2e:b8:cd:57:7d:1d:de:08:
7a:a3:e9:44:4e:ec:a3:69:5b:a5:da:ca:ef:9b:11:
6a:8e:8c:db:0d:c3:e0:9b:f3:fb:14:ef:05:4c:16:
9c:c8:09:58:a3:47:9a:dc:23:25:f2:dd:fb:41:b6:
9a:f8:fb:a4:b5:46:eb:f0:fe:3c:3f:34:4f:76:46:
87:6f:a1:46:ea:a2:e4:cb:d2:e2:f3:14:3e:bf:20:
93:07:af:bc:81:03:14:97:37:48:5d:1a:25:b7:95:
9f:2c:e1:0a:53:27:7c:cf:92:a2:97:36:cb:b7:45:
7a:e7:0f:e2:e9:f6:95:10:45:48:8a:22:7a:fb:2a:
af:72:f1:64:45:e6:94:7e:43:b0:bf:73:9a:7c:17:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:A7:92:02:AA:02:4D:E9:FE:98:DB:F8:67:BD:D0:13:2F:C5:E7
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:94:2e:26:04:0a:0f:3b:db:45:57:ae:8c:0d:74:e3:a8:d8:
94:81:2e:1e:d5:15:f6:69:26:0a:99:7f:ed:5e:8e:51:3a:9d:
e3:2c:1a:7e:58:a8:1f:dd:e3:3a:7f:b8:63:81:88:c6:5c:85:
b7:52:17:b8:79:ba:9b:7e:2f:97:c4:18:7e:44:6e:8f:4e:c0:
84:60:41:7b:0c:66:b3:24:3d:32:00:eb:00:3f:f2:e4:51:27:
cb:43:83:6e:8c:a8:db:39:7d:60:a2:4c:84:ec:4a:c5:3f:83:
65:74:bb:93:f9:3c:82:0a:8a:9a:41:b2:ef:5d:e2:e7:22:8e:
4c:2f:59:81:8a:8f:f7:94:a1:6d:45:8a:31:76:69:eb:47:bb:
4d:c1:9a:e3:e5:e9:e6:82:b7:c3:a4:58:4e:24:67:e4:58:2b:
80:de:30:5d:da:36:d8:5d:e5:b4:e7:ff:11:8d:d8:df:e5:02:
c2:f3:11:fd:9e:16:61:69:bd:a7:c5:d9:cf:b7:91:9c:0a:75:
b7:5f:5d:a0:5e:85:cd:e9:1b:bd:1d:e7:2b:98:04:fe:f4:13:
a1:60:e4:04:ae:68:82:90:44:5d:f1:16:36:f2:f5:cc:c7:69:
26:7b:97:85:2d:09:65:44:ae:be:06:c6:d5:bc:fa:ed:c1:2b:
8e:bb:52:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:05:41 2026 by rpki-client