
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa
File: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (raw, json)
Hash identifier: hBcnC5PFlnMmxlDxFJ5KaA+un9OP3sAitrTcxqtGxZY=
Subject key identifier: 21:A4:37:BC:FC:23:04:CA:E5:E1:4A:DE:FB:5F:A8:AA:49:5D:CB:20
Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial: C9
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:16:33 +0000
ROA not before: Wed 21 Jan 2026 05:25:16 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7575
IP address blocks: 160.250.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Validity
Not Before: Jan 21 05:25:16 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a42011-bd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:8a:71:69:11:b2:26:cf:8c:ea:9b:25:9c:
83:84:94:75:22:9d:05:15:42:74:6e:d5:cd:9a:f5:
fd:e9:c4:f5:ef:93:6d:28:33:76:fe:75:d8:a2:c3:
16:a9:40:be:a3:58:a6:a4:a3:8d:de:09:cb:d2:ec:
dd:2a:15:42:2c:98:36:0b:b6:c0:ff:b5:cc:e8:3a:
d1:9a:57:d0:4f:3e:20:d2:00:b6:c1:0f:e6:84:5f:
3e:10:bc:18:37:cf:9e:3c:dd:7e:85:06:c1:c3:8c:
6c:c1:55:d1:d7:2a:0c:d5:9f:a6:ec:0a:3e:e4:83:
aa:bb:71:26:d9:ce:94:77:6e:88:69:2f:05:58:61:
95:65:97:50:92:b6:f5:c5:c6:0a:e0:a1:8b:37:75:
43:d1:93:68:ab:18:b3:7a:ca:0b:df:ce:f0:6b:06:
23:da:03:1f:db:ae:22:7a:15:4a:9e:9b:b1:b3:2d:
15:8f:e4:da:be:f0:75:f2:88:0d:e6:47:60:19:c5:
ba:ff:30:61:6a:0a:9d:a4:6e:00:ce:2a:98:29:ab:
b3:7f:e9:bb:4f:80:af:ef:0f:eb:35:f3:67:ca:df:
a7:2e:d7:bc:50:89:d1:12:e8:7b:0d:27:c9:b1:63:
ce:cf:f5:8a:2a:f6:a0:95:54:52:69:00:bf:e4:0d:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A4:37:BC:FC:23:04:CA:E5:E1:4A:DE:FB:5F:A8:AA:49:5D:CB:20
X509v3 Authority Key Identifier:
keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.232.0/23
Signature Algorithm: sha256WithRSAEncryption
37:94:d4:3e:73:d0:53:13:a7:c3:d7:9d:06:59:94:4e:25:33:
57:db:b2:94:36:3e:78:c8:aa:32:df:9f:58:5a:dc:6b:62:f3:
7e:0a:64:27:9b:31:99:5d:04:be:f0:9b:e4:85:d7:04:f7:e6:
28:1f:08:14:8a:0f:86:f3:20:8c:7d:37:fd:cc:f5:6f:94:da:
57:9b:57:ef:5f:cf:c4:5e:1a:20:48:23:4e:8b:c1:eb:8b:81:
3e:d9:70:7c:38:95:c8:06:d9:93:b9:d8:af:f7:74:e7:b1:31:
03:5d:69:54:76:0c:7b:d5:d6:85:3f:c0:1c:c0:20:55:75:5a:
3f:32:42:1c:73:68:e9:1d:35:5e:1c:09:97:f6:ec:cc:2c:a7:
8f:f5:29:7a:b1:9b:36:5c:52:1b:fa:47:2d:06:a3:c0:9a:65:
2a:c4:e8:39:c8:a0:60:c8:29:0c:e4:72:74:64:ac:7c:e4:55:
9d:91:2e:02:2e:22:39:92:71:4e:f4:f8:08:03:56:04:6f:e1:
50:c3:7d:a2:e6:5a:84:e0:cf:62:bd:39:f2:9e:af:f9:ba:6c:
5e:53:d9:65:29:36:4e:e5:62:97:ba:53:8d:4c:bd:65:e8:f7:
f7:62:18:4c:6c:09:7b:45:40:9e:7a:f3:6c:78:87:8e:0e:ff:
4e:19:11:2a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQ0IxMTAvBgNVBAUTKDU2NTIwRkExRDc2RTk1RjA4MTlCNkRERDQ5NjdCNDU1
MDQ2OTg2OUQwHhcNMjYwMTIxMDUyNTE2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjAxMS1iZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArW+KcWkRsibPjOqbJZyDhJR1Ip0FFUJ0btXNmvX96cT175NtKDN2/nXYosMW
qUC+o1impKON3gnL0uzdKhVCLJg2C7bA/7XM6DrRmlfQTz4g0gC2wQ/mhF8+ELwY
N8+ePN1+hQbBw4xswVXR1yoM1Z+m7Ao+5IOqu3Em2c6Ud26IaS8FWGGVZZdQkrb1
xcYK4KGLN3VD0ZNoqxizesoL387wawYj2gMf264iehVKnpuxsy0Vj+TavvB18ogN
5kdgGcW6/zBhagqdpG4AziqYKauzf+m7T4Cv7w/rNfNnyt+nLte8UInREuh7DSfJ
sWPOz/WKKvaglVRSaQC/5A2GDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCGkN7z8
IwTK5eFK3vtfqKpJXcsgMB8GA1UdIwQYMBaAFFZSD6HXbpXwgZtt3UlntFUEaYad
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi81QjZGQTM2MEVB
NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxmQ0JtMjNkU1dlMFZRUnBo
cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTkxQ0IvNUI2RkEzNjBFQTVBMTFFRkI4NEFFNDY4QzRGOUFFMDIvRUU4Q0Q4OEVF
QTVBMTFFRjkyMkIyNzZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoProMA0GCSqGSIb3DQEBCwUAA4IBAQA3lNQ+c9BTE6fD150GWZRO
JTNX27KUNj54yKoy359YWtxrYvN+CmQnmzGZXQS+8JvkhdcE9+YoHwgUig+G8yCM
fTf9zPVvlNpXm1fvX8/EXhogSCNOi8Hri4E+2XB8OJXIBtmTudiv93TnsTEDXWlU
dgx71daFP8AcwCBVdVo/MkIcc2jpHTVeHAmX9uzMLKeP9Sl6sZs2XFIb+kctBqPA
mmUqxOg5yKBgyCkM5HJ0ZKx85FWdkS4CLiI5knFO9PgIA1YEb+FQw32i5lqE4M9i
vTnynq/5umxeU9llKTZO5WKXulONTL1l6Pf3YhhMbAl7RUCeevNseIeODv9OGREq
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:32 2026 by rpki-client