
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/81E4D4A2053011F09C73001FC4F9AE02.roa
File: 81E4D4A2053011F09C73001FC4F9AE02.roa (raw, json)
Hash identifier: BG8Qcl3ND1x5a+MIHh/xpmjjxkGhO2Fu+dtsOmd2KRo=
Subject key identifier: 62:71:61:DE:01:A0:5B:ED:9F:8F:3E:24:D5:5C:01:8A:B6:CB:43:88
Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
Certificate serial: 9E
Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/81E4D4A2053011F09C73001FC4F9AE02.roa
Signing time: Tue 28 Oct 2025 14:30:04 +0000
ROA not before: Tue 28 Oct 2025 14:30:04 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38218
IP address blocks: 161.248.150.0/24 maxlen: 24
161.248.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl
rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923
Validity
Not Before: Oct 28 14:30:04 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6900d36c-737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9b:4b:8a:83:bf:9e:57:b7:32:2e:f9:11:18:
a7:ef:b7:86:3f:e6:84:cb:b3:ff:cb:f3:74:59:6f:
48:eb:e6:b3:c7:da:3f:30:39:36:2b:ac:1e:8e:2b:
25:71:25:b7:22:c9:7a:30:23:93:d7:26:a8:64:7d:
2a:be:72:f6:7f:3c:95:b6:14:8c:0e:e3:50:ed:a1:
f8:92:ab:1c:b9:c2:63:dd:47:70:ee:1f:e6:d2:31:
6e:e7:61:b2:ba:14:91:d2:86:9e:c6:2e:af:07:5e:
67:59:15:66:13:65:ff:5a:e5:d5:a2:76:a3:bc:93:
af:c2:50:3f:05:b4:2b:31:d3:08:87:d0:08:ae:80:
1b:14:41:c6:69:22:0c:ff:f9:f5:36:9a:9f:ba:59:
fa:20:96:0a:39:2b:9e:5b:c7:9f:73:d9:b4:57:f7:
d2:05:97:d7:f0:73:db:13:a0:50:d0:13:b3:b5:95:
21:e2:2c:eb:f9:9e:cd:4a:e5:3d:0c:ac:d1:7e:e5:
ca:f0:54:5a:4e:ab:a0:71:38:ff:6c:61:20:25:db:
6b:05:d3:08:f6:c2:46:63:6c:26:db:4b:df:3c:f8:
2f:7d:8b:d7:b7:6e:f9:5c:51:fd:c6:a5:62:97:15:
96:21:9f:94:62:13:86:1e:10:42:4e:a3:73:c5:99:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:71:61:DE:01:A0:5B:ED:9F:8F:3E:24:D5:5C:01:8A:B6:CB:43:88
X509v3 Authority Key Identifier:
keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/81E4D4A2053011F09C73001FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.150.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:0a:03:7b:89:33:1d:b1:b9:1f:46:21:8b:a0:cf:45:d9:29:
ba:a6:97:f2:5f:6b:a7:36:cf:df:a9:c7:48:0f:33:41:69:04:
0d:55:50:2f:f0:44:0f:a6:aa:bf:bc:e6:6a:c2:32:97:e5:02:
9c:ce:72:e8:df:c5:06:bf:1c:f5:6c:09:6c:8a:c0:f2:e2:64:
27:b3:2a:dc:dd:9c:06:b7:79:03:c9:ba:61:7e:70:26:05:4d:
52:17:f4:b2:43:8c:45:47:8c:95:7d:d8:09:64:8d:ae:27:87:
1d:72:16:5e:b7:f0:48:75:b6:b4:fc:d1:34:2a:b7:32:60:17:
a3:86:6f:d3:c4:d7:ad:e8:6c:4c:47:03:93:bf:7e:34:05:d7:
75:59:ef:ef:ac:d1:95:c5:73:89:ba:2c:a5:fa:ea:98:fd:35:
79:07:15:f5:86:ee:fb:90:c0:5e:b4:7f:bf:2c:49:b0:9e:70:
db:c5:1e:fc:3b:c2:f9:9b:69:69:ec:ac:05:c3:dc:4c:7f:f8:
33:ee:d2:ab:e0:55:b4:59:57:66:38:72:26:7b:52:30:58:bb:
75:00:5c:f2:57:70:6e:43:53:d1:6b:97:9d:d1:f2:62:18:7c:
c4:c0:55:b1:25:44:6e:68:fd:13:a5:a4:61:e0:7c:79:ba:61:
06:ef:3d:bf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD
MkExMEM5MjMwHhcNMjUxMDI4MTQzMDA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAwZDM2Yy03MzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6JtLioO/nle3Mi75ERin77eGP+aEy7P/y/N0WW9I6+azx9o/MDk2K6wejisl
cSW3Isl6MCOT1yaoZH0qvnL2fzyVthSMDuNQ7aH4kqscucJj3Udw7h/m0jFu52Gy
uhSR0oaexi6vB15nWRVmE2X/WuXVonajvJOvwlA/BbQrMdMIh9AIroAbFEHGaSIM
//n1Npqfuln6IJYKOSueW8efc9m0V/fSBZfX8HPbE6BQ0BOztZUh4izr+Z7NSuU9
DKzRfuXK8FRaTqugcTj/bGEgJdtrBdMI9sJGY2wm20vfPPgvfYvXt275XFH9xqVi
lxWWIZ+UYhOGHhBCTqNzxZlFTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGJxYd4B
oFvtn48+JNVcAYq2y0OIMB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG
MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzE2MjEvMzVFREE5MkVDRjBEMTFFRjkyRjFFQzM2QzRGOUFFMDIvODFFNEQ0QTIw
NTMwMTFGMDlDNzMwMDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGh+JYwDQYJKoZIhvcNAQELBQADggEBAJwKA3uJMx2xuR9G
IYugz0XZKbqml/Jfa6c2z9+px0gPM0FpBA1VUC/wRA+mqr+85mrCMpflApzOcujf
xQa/HPVsCWyKwPLiZCezKtzdnAa3eQPJumF+cCYFTVIX9LJDjEVHjJV92Alkja4n
hx1yFl638Eh1trT80TQqtzJgF6OGb9PE163obExHA5O/fjQF13VZ7++s0ZXFc4m6
LKX66pj9NXkHFfWG7vuQwF60f78sSbCecNvFHvw7wvmbaWnsrAXD3Ex/+DPu0qvg
VbRZV2Y4ciZ7UjBYu3UAXPJXcG5DU9Frl53R8mIYfMTAVbElRG5o/ROlpGHgfHm6
YQbvPb8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:11 2025 by rpki-client