
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
File: CB31DFEA7BE411EFB6955155C4F9AE02.roa (raw, json)
Hash identifier: mfW/Qkg0MzRAXyBHrSlkZ0QHKIFcW/HURnHy5WY1eYo=
Subject key identifier: 09:0C:20:FF:94:72:8F:88:3B:3D:2A:41:76:45:7B:3B:CB:8F:3F:42
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: 0110
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:37:33 +0000
ROA not before: Mon 29 Sep 2025 06:36:20 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153345
IP address blocks: 160.30.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Validity
Not Before: Sep 29 06:36:20 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5929d-0572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:a0:b8:bb:17:7b:24:46:f3:55:b7:46:71:
60:81:2d:c5:77:fa:8b:51:67:8f:19:f3:a5:f4:7e:
d7:af:4d:6b:42:39:ac:19:c6:2a:ce:66:1b:41:73:
b7:e0:0d:7f:11:fb:0b:9b:4f:3b:72:6a:3b:88:01:
f8:bd:b7:54:54:48:41:db:e6:d5:70:5c:43:33:ca:
20:e0:93:53:b1:ce:17:27:86:60:38:16:a1:60:bc:
84:c0:60:53:4e:d9:56:ee:2b:bf:f3:48:83:62:7c:
d7:8b:bb:38:4c:5a:e6:8b:92:58:b1:db:83:48:88:
a0:b5:a0:cd:82:b3:85:a4:fa:2a:30:d3:f7:fc:4e:
08:0e:80:39:3c:c1:e4:3a:67:74:4d:db:11:90:80:
81:42:e5:e6:86:70:f5:70:ab:8a:87:b9:45:ab:e5:
e9:88:75:ca:1f:1f:ff:41:00:f4:6c:f5:e0:25:6a:
68:8e:49:0d:58:ba:04:67:38:93:07:a7:29:50:ae:
b8:27:2a:65:1c:a1:8a:a5:7f:6d:2c:55:7d:14:2b:
c7:92:d5:7d:e0:53:2f:64:d6:f9:ac:97:49:c6:d9:
95:92:3c:f0:55:bd:9d:c3:7c:88:7f:5d:09:eb:d8:
6f:c8:66:79:bd:e0:b8:7b:a0:64:66:1e:20:44:c9:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:20:FF:94:72:8F:88:3B:3D:2A:41:76:45:7B:3B:CB:8F:3F:42
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.47.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:62:d3:bc:98:48:ce:35:84:76:7f:9b:67:45:9a:76:85:7a:
b9:a9:8b:3d:6d:3f:75:e5:b4:03:93:f7:9d:29:80:17:a2:14:
6c:14:86:2a:e6:64:98:95:ce:61:0e:af:d7:d7:b3:07:4b:b1:
ee:00:53:dc:c9:bf:4c:d7:be:71:24:72:d0:6b:4d:36:aa:ac:
39:d0:a4:0e:cf:d8:34:ac:b7:4b:df:d3:6b:96:1b:55:6b:ba:
53:38:c8:21:15:3c:b7:e5:fd:1a:87:24:fa:48:f1:43:f9:2a:
8d:07:f0:5c:2a:98:4b:b4:99:5c:d5:cb:ea:8f:10:de:64:31:
b7:99:54:fb:2c:ee:c4:aa:2c:72:d1:1d:d2:f1:89:30:09:c8:
be:c0:ba:b8:00:bd:aa:89:16:da:13:ba:e1:df:06:06:b6:2f:
01:1a:96:a8:e8:cb:84:f7:a6:d6:2f:77:de:9d:c0:3c:ed:d0:
cd:8e:58:a6:8c:56:f7:29:20:dd:73:5f:36:92:6a:59:84:df:
3b:92:1a:60:02:9a:48:a6:7a:b9:64:4d:8f:ab:45:19:0b:43:
94:0f:6d:af:67:fd:7f:35:f1:f6:8a:e9:11:a4:55:91:49:3a:
7c:5c:e7:10:77:00:4a:aa:7b:cc:8e:fa:e2:77:40:ce:1c:c7:
d1:e0:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:31 2026 by rpki-client