
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
File: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (raw, json)
Hash identifier: KOPGS6LMhund+vJdD6XHT18EgiJR1qKIzzUaEq9CH3Y=
Subject key identifier: B5:77:DA:6B:BB:71:84:15:0E:5C:5B:F6:7C:A8:B2:11:68:3E:15:AD
Certificate issuer: /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial: 012D
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:59:02 +0000
ROA not before: Sat 25 Oct 2025 09:49:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153358
IP address blocks: 160.187.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Validity
Not Before: Oct 25 09:49:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a597a6-527d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:70:58:97:4f:6c:91:0e:23:a8:d0:39:1b:ef:
41:e7:a9:21:49:a8:7b:d3:3f:d1:c0:79:b0:28:88:
12:00:68:58:ec:ca:c5:da:3b:72:f9:77:76:12:67:
94:1b:e3:70:c1:26:6c:2e:be:f5:cf:eb:97:eb:56:
ce:42:b1:19:b5:d7:49:a0:4d:b0:24:cb:3c:ea:a0:
09:cc:91:d7:84:fb:15:71:70:df:f5:25:92:64:96:
f8:54:d8:52:48:e6:65:60:01:8a:ee:d9:81:5c:80:
67:c1:1a:fe:01:6f:2c:67:30:ef:b2:e0:63:36:59:
eb:8a:9e:9b:16:e7:b4:03:9b:57:e5:34:ac:af:0d:
fe:21:ed:94:c1:99:a3:55:20:7e:74:bc:88:07:61:
49:f3:93:79:c2:69:2c:87:60:9e:ae:e4:05:e7:7f:
fc:fb:31:d8:a1:b7:42:54:aa:6a:68:72:16:46:69:
56:76:12:6b:8e:ad:ad:26:dc:da:42:79:13:0d:c8:
69:45:57:85:03:0b:c1:56:a4:69:71:19:03:ad:7e:
5c:6d:a9:96:d1:9f:b6:7d:6a:a7:0a:a1:75:3a:dc:
6c:96:59:03:f3:1b:6a:92:87:86:80:1e:fd:f9:73:
9f:5b:5e:74:e1:ab:d0:5d:cd:88:12:8f:dc:44:79:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:77:DA:6B:BB:71:84:15:0E:5C:5B:F6:7C:A8:B2:11:68:3E:15:AD
X509v3 Authority Key Identifier:
keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.175.0/24
Signature Algorithm: sha256WithRSAEncryption
83:cb:1d:28:1a:b2:33:16:f6:8b:b6:2d:da:4c:96:cb:a1:46:
d5:d1:1f:77:3b:13:0a:b0:f3:be:4e:b4:17:ec:d8:47:14:5e:
95:14:06:b3:ad:1e:95:a6:f0:3c:29:14:30:fa:00:1a:1e:e5:
d2:2e:69:11:24:5d:58:3c:1e:9d:8d:7e:b1:4a:cc:a4:c5:b7:
26:2b:3d:de:2a:28:1c:1f:81:08:96:b1:d5:59:4d:23:25:72:
4e:21:59:5b:ef:bd:f9:fa:c0:ca:d2:0e:0b:69:47:1c:c9:f8:
1a:cc:b9:fd:ba:b6:a6:af:b9:08:fe:74:88:7b:51:eb:3d:a6:
09:3d:88:fb:47:82:12:f9:29:2d:44:19:27:bd:2e:5d:8e:b2:
ce:ba:27:50:ed:d6:e1:47:16:fa:ea:69:95:45:c1:aa:4a:97:
06:2f:05:13:66:44:89:b7:37:32:2a:26:1a:5b:5e:43:ca:90:
ca:b0:c8:cb:e0:80:31:dc:1c:9e:5b:51:41:79:b7:1f:39:ca:
04:44:38:5b:c2:8b:02:f5:4b:89:4d:9c:99:55:4a:44:99:51:
f8:71:93:8a:61:9e:a9:e8:e0:41:5e:ab:21:4f:15:b3:7d:fd:
94:e1:0f:9e:bd:5a:57:a5:ed:83:47:8a:0c:09:44:c7:e6:79:
43:76:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:40:57 2026 by rpki-client