
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/31471C24E77311EFA0F80E53C4F9AE02.roa
File: 31471C24E77311EFA0F80E53C4F9AE02.roa (raw, json)
Hash identifier: LKxsPvdI66fM491deXamXf06E3v9XHAf+4BHgzVtuTE=
Subject key identifier: 24:7D:79:62:8D:48:7C:45:B4:35:D8:09:40:C6:B9:12:BE:01:52:86
Certificate issuer: /CN=A91A7273/serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Certificate serial: CB
Authority key identifier: 09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/31471C24E77311EFA0F80E53C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:51:43 +0000
ROA not before: Sat 13 Dec 2025 06:25:23 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132894
IP address blocks: 160.191.60.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7273, serialNumber=09067882CDC020349161E093BF34731B3F822BD7
Validity
Not Before: Dec 13 06:25:23 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a41a3f-1a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:f7:2d:75:3a:da:a1:c6:70:f5:ec:2e:2a:
f4:cb:c7:bf:5f:8b:bd:2b:0b:05:75:8b:37:45:19:
bb:ab:85:5e:93:cf:1a:b6:5e:e4:fb:a9:7a:c0:b4:
93:a7:69:cd:a9:50:ae:4f:3d:9d:68:6f:f6:29:33:
32:ff:14:f2:98:d3:bd:dc:e7:df:41:27:b9:41:98:
8c:72:d4:7a:7f:7f:fa:9c:12:89:99:60:94:91:d2:
27:3d:d0:60:97:ab:65:cc:a1:76:6b:7d:15:45:4c:
39:fa:f4:a1:fd:05:5d:16:7a:2a:b4:ce:4d:a2:11:
42:1a:48:c4:27:d1:eb:a0:14:14:48:aa:c6:6c:12:
d8:19:81:04:63:db:52:58:67:73:9d:13:f0:ef:09:
e3:cd:6c:08:16:47:61:c6:bb:c7:42:2b:fe:b7:53:
e3:ea:fe:62:a3:1e:20:d8:d2:5d:26:83:d6:2e:30:
ef:a9:d2:46:60:ad:fc:76:1d:c0:4c:b1:ae:01:f9:
87:6e:b5:0b:eb:41:47:b5:77:57:d8:3d:3e:54:8d:
36:79:c6:3a:dc:f4:f6:f1:ec:f2:fc:33:30:f9:96:
36:2c:d2:c5:05:03:a2:16:7f:f8:d7:dd:d7:69:6e:
9a:53:84:18:4f:1c:91:c7:87:34:81:78:2f:b9:6f:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:79:62:8D:48:7C:45:B4:35:D8:09:40:C6:B9:12:BE:01:52:86
X509v3 Authority Key Identifier:
keyid:09:06:78:82:CD:C0:20:34:91:61:E0:93:BF:34:73:1B:3F:82:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CQZ4gs3AIDSRYeCTvzRzGz-CK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7273/F3D22C2CE77111EF9DFBDD50C4F9AE02/31471C24E77311EFA0F80E53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.60.0/23
Signature Algorithm: sha256WithRSAEncryption
23:09:c5:95:7c:fa:e5:6e:b9:b6:e2:7d:1c:af:d4:ad:e2:b3:
5a:c2:9b:32:f8:6e:bf:66:96:a7:1a:fa:f0:95:af:6d:f7:5a:
f2:b5:c9:cf:b8:99:c2:19:25:5f:35:9a:a6:3f:94:62:b4:41:
b4:55:e9:ae:dc:3e:d7:ee:12:13:a5:71:e1:64:5d:2b:4d:97:
97:00:1d:20:af:c9:f4:4c:ef:c3:91:a0:5f:4d:05:71:aa:bd:
eb:65:47:1e:ba:75:71:f1:50:c4:a8:c6:6b:d5:bd:81:d0:94:
43:e6:7b:f8:07:03:c5:af:c4:18:9b:8f:46:62:2c:16:00:9e:
27:bf:43:67:70:69:4f:27:05:10:2b:b4:61:88:ed:3b:a6:3d:
b0:6e:99:f5:09:42:01:c0:ed:75:59:a6:e6:a7:01:a6:2c:e2:
6e:c6:65:cd:6a:08:a4:21:11:af:fb:80:e0:0f:0a:6d:d6:28:
be:cc:e5:d0:1b:24:25:06:f9:32:f7:4c:2c:7d:ff:de:76:94:
df:0e:77:92:f5:ae:2b:43:b9:a6:06:5e:2b:f2:32:de:f1:66:
2e:8e:3f:47:25:90:f2:2a:0f:ad:de:4c:7e:9e:02:d2:05:76:
87:55:1a:a0:d1:d8:a9:3c:c3:40:72:22:f6:d8:e4:4b:17:7c:
40:8e:d8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:39 2026 by rpki-client