
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/B5E94296025C11F0BDF41912C4F9AE02.roa
File: B5E94296025C11F0BDF41912C4F9AE02.roa (raw, json)
Hash identifier: b/gx6jE3ztiTlC5Eac5TsfJ6NWxaMyjyfxR8HfsCYbM=
Subject key identifier: 20:B2:0B:D4:91:96:AB:EE:ED:70:8C:8E:F0:39:A0:A4:BE:AD:15:78
Certificate issuer: /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial: BA
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/B5E94296025C11F0BDF41912C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:17:47 +0000
ROA not before: Thu 15 Jan 2026 06:24:51 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133464
IP address blocks: 160.250.248.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Validity
Not Before: Jan 15 06:24:51 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4205b-b08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:bd:33:2c:5a:ba:56:2b:5c:fb:6c:c4:1e:
35:ce:1d:d3:86:af:8b:91:25:bc:5b:d7:52:47:11:
85:d0:a2:35:06:dd:9f:e5:9e:67:50:84:37:16:c2:
88:6b:b0:2a:cc:b3:84:a1:fc:cd:1a:1e:c7:6c:0e:
a0:97:7d:4c:4a:53:da:93:e4:b6:cf:cb:15:24:c4:
a2:35:9a:b4:79:f8:f3:dd:f6:42:b2:2d:70:b7:36:
5d:c9:82:b8:3c:16:c3:38:86:38:16:ef:76:a6:68:
c2:db:bf:39:28:12:b5:3d:dc:7b:f8:95:6f:45:fa:
a8:b9:5d:ae:8a:d3:1a:aa:52:b7:c1:a2:51:cd:57:
ee:0e:d1:e8:39:af:92:7e:75:0f:e8:94:89:47:26:
64:1c:07:ae:2f:42:5e:90:64:99:72:2e:c1:8f:8f:
84:cc:81:4b:29:67:92:ae:f0:51:cc:18:68:c5:92:
e7:05:6b:cb:10:a0:30:ce:80:bc:dd:74:ef:3f:9a:
aa:2f:5a:d9:60:3f:bf:16:67:3e:3a:92:9c:d9:92:
d2:04:93:89:4d:a8:0c:37:6f:31:56:0a:55:ba:4b:
ad:e7:b0:45:62:c4:f9:11:77:68:7b:26:8d:88:72:
d9:7b:1c:d5:12:ef:30:db:36:2c:49:7c:16:a9:42:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:0B:D4:91:96:AB:EE:ED:70:8C:8E:F0:39:A0:A4:BE:AD:15:78
X509v3 Authority Key Identifier:
keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/B5E94296025C11F0BDF41912C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.248.0/23
Signature Algorithm: sha256WithRSAEncryption
01:3e:0b:cc:f2:c8:fe:6f:ee:f7:77:83:3c:1e:13:c5:f7:d6:
84:68:69:8c:2d:98:b3:ea:fe:03:4e:a9:ce:b5:0a:2a:aa:f6:
d9:5f:6b:57:a1:f9:c1:d3:36:29:8c:a4:1d:43:44:6d:af:cb:
88:63:1b:4a:f4:34:ca:d0:b8:29:6b:0a:28:01:72:bb:2a:4d:
a7:fa:29:83:7c:a1:c8:e6:0b:61:7b:d6:77:39:69:47:30:c0:
84:b7:96:5a:14:0b:f5:ae:83:f1:ed:c9:25:00:a0:27:2d:dd:
ce:c5:f4:fc:e4:06:74:37:e9:fd:bf:c8:42:04:21:93:34:fd:
4d:83:36:a9:0b:96:20:67:cc:48:28:1b:2b:c6:1b:ad:a4:9e:
94:ea:35:0a:91:ff:cb:eb:4b:ac:27:52:a7:ae:87:aa:7c:8e:
c2:17:6f:79:c6:c2:c6:61:16:18:c9:3d:24:b3:fc:1c:f6:2c:
4b:b4:65:0b:06:41:8e:30:ea:f5:86:d7:a3:86:99:3d:d9:a5:
d3:b3:0e:ca:85:b9:19:c2:3e:b7:81:24:10:54:32:d7:ba:4a:
10:3d:ae:29:e0:5d:6a:da:55:6b:b2:87:46:c8:24:a9:96:e6:
c7:48:a4:1c:50:cd:93:f5:71:aa:69:20:51:04:21:78:f1:97:
14:5e:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:01 2026 by rpki-client