
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
File: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (raw, json)
Hash identifier: YeM5Ob93+NlZS8Ef/mJRnsGe6iFv4NqaLaZpJ+XqgGE=
Subject key identifier: 4C:D9:E1:C1:4E:08:97:4F:9F:4F:6F:8F:1F:8F:66:47:41:EE:EC:99
Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Certificate serial: C0
Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
Signing time: Tue 29 Sep 2026 07:57:21 +0000
ROA not before: Tue 29 Sep 2026 07:57:21 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 133484
IP address blocks: 160.30.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 07:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE
Validity
Not Before: Sep 29 07:57:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abb6f61-ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:b9:1c:5d:0d:05:a7:22:91:0a:d8:fd:b6:
6b:b5:bf:c3:cc:11:2b:db:ca:8c:63:fd:4d:44:7d:
ea:3a:66:f7:eb:5a:12:ff:d5:32:d2:62:5f:c7:5c:
43:76:0b:50:81:4d:53:10:64:f9:75:36:86:ae:55:
91:1a:16:81:87:32:9d:53:df:eb:db:91:06:39:a7:
28:2b:ca:82:04:0c:57:4e:ce:ed:7f:6c:4b:f5:76:
7a:9a:81:d2:69:d9:bd:89:56:a2:38:10:97:43:85:
ee:cc:83:b3:7c:5e:94:9e:4a:23:49:8e:cf:37:e5:
e6:73:be:20:59:86:9d:94:22:fe:d3:cb:c4:a9:57:
6a:2d:34:43:26:48:3d:92:fd:83:53:77:32:15:86:
01:7b:1b:a1:23:12:f9:5d:99:8c:4f:0a:d1:92:b2:
20:54:58:db:c7:b1:e3:31:29:be:56:2c:d7:d9:bf:
4d:e6:41:7f:54:1c:a5:5f:57:49:4f:0d:95:ad:ee:
36:bc:2a:43:56:f1:09:8e:d9:84:78:e2:de:2b:4d:
d6:21:e5:50:83:78:96:4a:af:92:e2:f6:21:53:33:
6e:0a:80:6e:c2:f3:81:2a:05:7f:a5:75:7b:49:f6:
e1:ae:77:93:59:0a:58:d9:d5:47:a6:a2:72:3d:12:
e0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:E1:C1:4E:08:97:4F:9F:4F:6F:8F:1F:8F:66:47:41:EE:EC:99
X509v3 Authority Key Identifier:
keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/C2B54C4E9D2611F0A7B9140CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.96.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:83:77:15:04:65:0f:3b:5a:19:f6:51:1e:de:8f:bc:e2:66:
b0:2a:e0:04:5d:f6:3e:17:b7:eb:85:29:31:30:98:c2:8d:dd:
6d:29:0b:64:73:59:50:13:57:82:9b:28:7d:c4:27:16:3c:6e:
ff:00:a3:e0:23:0f:b6:c1:09:ad:89:92:f0:e3:2a:87:12:38:
b2:14:5b:52:8c:5c:70:dc:5e:35:18:0a:11:04:c7:14:6a:6e:
b3:23:3d:34:c4:1a:3a:be:7f:22:dd:8b:f0:11:5d:4d:6a:24:
57:c1:af:57:8e:60:eb:97:d5:e9:82:f2:d5:cc:c8:1e:8c:86:
c5:b4:6a:be:2b:15:96:15:e4:18:97:65:6b:b0:95:79:37:a8:
29:7f:b0:8a:55:4d:73:f4:87:53:90:54:e9:56:e3:6a:d2:db:
b4:3a:a5:5d:00:78:e6:3e:71:fa:d2:ea:96:6d:bd:31:69:66:
65:f7:6a:fc:01:f3:81:9c:86:f1:3d:52:59:f3:91:4b:f1:79:
4a:50:7e:cf:bc:97:8a:07:3e:2c:9a:89:12:95:3e:6a:dc:38:
51:9b:2f:5e:3e:11:61:f5:7a:eb:c5:62:6b:f2:de:c6:f7:75:
6c:dd:bd:60:14:c4:f1:c9:f6:3e:b2:f9:4b:1d:6a:65:33:82:
df:76:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:13:47 2026 by rpki-client