
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/95CA439CDAE211ECA14A8254C4F9AE02.roa
File: 95CA439CDAE211ECA14A8254C4F9AE02.roa (raw, json)
Hash identifier: MXOW6q55eZKyv8hf3L3veKqAyv+lJXJJZ7u7OMt1z00=
Subject key identifier: C1:28:19:9E:FC:4E:11:E2:EE:4C:A7:81:91:9F:50:B0:26:7A:38:9A
Certificate issuer: /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial: 038B
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/95CA439CDAE211ECA14A8254C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:59:30 +0000
ROA not before: Mon 03 Mar 2025 03:25:44 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 396982
IP address blocks: 45.250.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Validity
Not Before: Mar 3 03:25:44 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3fff2-b672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:3b:1d:e0:f5:f2:99:31:6d:85:65:c4:bd:
0c:f0:5a:66:a0:b5:dd:96:89:49:7f:40:bf:27:e7:
bd:cd:fa:3a:d4:40:65:bd:1d:43:09:6c:d8:b1:98:
19:32:8c:a1:67:0d:45:f7:b4:24:cc:03:b5:ec:0a:
bc:49:89:8c:a7:bd:8c:30:c3:d5:6c:ce:44:e4:68:
a1:c4:7d:46:fc:07:a0:c1:78:b4:0e:63:fd:d6:12:
52:d3:d6:01:a2:64:f5:a6:4c:77:59:05:83:8f:f8:
ed:1c:03:28:ef:73:60:de:0d:54:8f:87:ff:f1:a3:
cc:74:eb:39:7a:46:d7:14:42:65:70:9f:e9:8c:c4:
66:61:94:9b:b9:73:d3:e6:7e:d4:0e:9c:86:7b:69:
b5:69:61:9a:46:f7:08:34:36:11:57:4c:d8:8e:bb:
9e:a2:61:b7:a5:48:55:3e:f2:b4:a2:74:98:d2:c6:
f9:b9:63:48:b7:9b:5c:5c:ef:78:5b:eb:13:5a:df:
ed:51:d2:ec:9f:00:35:e2:3c:a0:40:72:75:1a:97:
94:42:cb:e0:e4:39:a6:6d:d1:32:4d:3c:88:26:9a:
69:3d:48:dd:a0:29:ba:5c:05:fa:6b:ea:92:30:99:
74:df:d5:dd:f4:15:fc:e3:df:7e:a9:30:17:9b:28:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:28:19:9E:FC:4E:11:E2:EE:4C:A7:81:91:9F:50:B0:26:7A:38:9A
X509v3 Authority Key Identifier:
keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/95CA439CDAE211ECA14A8254C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.160.0/24
Signature Algorithm: sha256WithRSAEncryption
06:10:78:e8:92:2b:0f:5e:91:13:20:01:ec:59:ea:13:15:c6:
a0:2d:3b:9a:37:c6:4a:3a:df:34:70:3c:cf:87:cc:d1:2e:72:
54:1e:a0:6e:b4:61:1a:a7:69:bf:dd:21:92:ff:34:6b:b2:33:
fd:77:2a:24:6a:d9:ac:b2:be:f4:68:94:4e:03:7f:61:8c:8a:
22:1d:66:ae:44:77:06:7d:56:4b:96:90:a0:64:b0:09:cf:58:
74:3c:be:26:a6:10:4a:a3:6d:97:c1:79:18:3d:29:5f:63:7b:
66:24:80:84:68:e2:09:32:c3:73:d2:aa:aa:71:82:14:fd:11:
55:a5:b4:c7:b3:d4:86:4a:70:1d:1c:d0:7b:e8:62:3f:63:f7:
9e:42:8d:7d:e1:d8:46:25:ec:b1:09:41:6a:75:27:fd:d3:df:
4a:05:19:fa:fe:90:1a:ad:18:09:2c:ef:a2:94:29:44:dc:a4:
e6:63:ae:ec:da:5b:3c:28:89:ff:72:9c:60:1e:29:82:a9:f1:
ea:e5:f0:5e:77:27:44:40:dc:a6:ba:5d:2f:0d:d0:ea:b6:db:
a4:fd:2f:0a:b2:4d:01:3b:db:50:73:6c:52:05:38:b4:23:ab:
ee:34:ff:d8:e6:37:c5:31:b0:54:46:80:ee:f2:33:91:dc:d4:
18:20:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:13 2026 by rpki-client