
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/997A1D8EB1BE11F19E212CE03A11F970.roa
File: 997A1D8EB1BE11F19E212CE03A11F970.roa (raw, json)
Hash identifier: RnKZWz2L71dQW3gVAIGIiUqPKGYnPENAxXVz7DSVHSo=
Subject key identifier: E6:99:62:C7:49:DD:AC:B3:21:FF:F3:D5:60:C0:02:43:DD:0F:3D:CF
Certificate issuer: /CN=A91CDA42/serialNumber=F600ADA4EA68B46D4C0FEA670BFE4F7FED95FC77
Certificate serial: 02
Authority key identifier: F6:00:AD:A4:EA:68:B4:6D:4C:0F:EA:67:0B:FE:4F:7F:ED:95:FC:77
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/997A1D8EB1BE11F19E212CE03A11F970.roa
Signing time: Wed 16 Sep 2026 11:06:00 +0000
ROA not before: Wed 16 Sep 2026 11:06:00 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 57511
IP address blocks: 160.236.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl
rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDA42, serialNumber=F600ADA4EA68B46D4C0FEA670BFE4F7FED95FC77
Validity
Not Before: Sep 16 11:06:00 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aaa7818-ca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:0c:40:15:ef:a4:bb:17:dc:4e:8d:d5:f8:
50:2d:8c:f2:8b:2e:cb:4f:63:bf:9b:45:59:c2:33:
49:80:64:04:92:34:f4:d5:68:21:30:f9:84:a3:f7:
6b:1e:4c:eb:cc:14:b1:05:86:c8:d1:95:2b:4a:d0:
9c:96:e5:5c:33:4a:0e:25:50:e8:17:fb:37:3c:d2:
d2:6c:22:7a:2b:8e:cf:7e:66:5a:58:a2:86:d0:27:
b1:56:34:00:aa:4a:a6:28:3e:e9:bc:79:6d:ee:1f:
f9:94:79:3e:9a:a3:ce:58:16:d9:a9:44:dc:b9:45:
b3:3b:ef:ff:7f:c5:18:23:12:b0:1c:c7:b4:d4:e4:
98:46:e4:1a:b1:8a:cb:12:88:cd:1f:2d:de:68:c9:
eb:03:d4:64:be:40:6f:44:40:a8:10:14:90:1c:85:
2b:d3:f1:27:79:6d:79:c3:a7:06:e4:b6:a0:e3:78:
05:a1:09:5e:2a:40:87:dc:a1:b0:d3:bd:4a:7c:4f:
68:a2:cc:8c:44:73:f4:6a:7f:89:d6:0b:e8:47:de:
84:ec:8f:1e:c2:53:ae:20:f0:ad:fb:af:5a:33:68:
05:aa:9d:ab:a0:78:db:ac:66:bc:c5:d4:54:1a:50:
08:1d:d3:51:d9:9e:84:d4:93:57:0d:dc:54:a9:05:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:62:C7:49:DD:AC:B3:21:FF:F3:D5:60:C0:02:43:DD:0F:3D:CF
X509v3 Authority Key Identifier:
keyid:F6:00:AD:A4:EA:68:B4:6D:4C:0F:EA:67:0B:FE:4F:7F:ED:95:FC:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9gCtpOpotG1MD-pnC_5Pf-2V_Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDA42/C279EDD0B1BA11F1A69E71483911F970/997A1D8EB1BE11F19E212CE03A11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.243.0/24
Signature Algorithm: sha256WithRSAEncryption
64:7f:b4:7c:e3:10:72:b1:40:6e:0a:62:16:47:36:01:96:53:
60:f0:a8:28:78:47:e1:ef:eb:0f:8d:4a:d9:1e:2b:7a:e2:1c:
52:7f:01:13:71:c5:36:94:9c:1d:2b:43:93:b3:5c:b8:53:09:
1c:7b:82:fa:9b:93:f2:9b:a5:8a:0d:33:0c:80:bb:00:75:7f:
80:0a:4a:e9:af:c0:54:f6:b6:c7:30:f5:2b:5d:4b:90:96:86:
e9:83:d5:09:ab:97:65:8c:78:0b:c1:c9:5e:db:7f:5d:0a:db:
d3:48:09:ff:8b:82:c7:3a:b1:40:02:51:4b:f7:0e:47:f6:17:
d8:14:45:47:e9:c8:e5:82:e7:a6:46:58:cc:1c:01:2e:f4:4e:
a5:0b:c9:90:9a:71:98:7b:90:b8:b8:af:34:c5:62:c6:b9:ab:
e9:0d:01:f7:a6:ac:77:5a:83:ab:5f:ae:dd:d3:b8:46:d7:e5:
88:7f:68:8d:21:e5:b2:d1:9b:ed:cf:6e:58:4f:e1:44:6a:ed:
ef:f1:4d:46:ad:f6:d1:80:a0:23:4b:b4:d9:14:d6:44:c8:9d:
e4:80:17:06:b6:bf:c8:d2:c2:de:98:85:2b:e4:a1:0b:bb:43:
56:3a:37:bb:63:ae:e3:a3:dc:d9:c8:6c:cc:5e:88:00:11:bd:
d7:96:e9:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:29 2026 by rpki-client