
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/CBB83D902F1E11F09BFFB056C4F9AE02.roa
File: CBB83D902F1E11F09BFFB056C4F9AE02.roa (raw, json)
Hash identifier: e1prpIYuDZ5J7mrkW/azLYwyJt2qyvzcK3j1tu4Uieg=
Subject key identifier: F2:08:35:DE:94:64:4A:DF:EB:61:10:42:3A:CD:50:AC:D8:22:D6:F1
Certificate issuer: /CN=A91D0B6B/serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Certificate serial: BE
Authority key identifier: C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/CBB83D902F1E11F09BFFB056C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:17:37 +0000
ROA not before: Fri 23 Jan 2026 05:25:46 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153518
IP address blocks: 161.248.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B6B, serialNumber=C1EE69AA6AA1ACBA32E16764DA81BF7A4168A60D
Validity
Not Before: Jan 23 05:25:46 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a42051-1ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3e:d1:21:f2:80:a0:64:2a:2b:e0:f2:7d:b6:
76:ee:24:2a:53:1c:5a:68:95:68:44:9c:7a:c0:09:
62:1e:74:88:90:f4:a8:e0:da:03:2b:4e:25:44:22:
84:dc:0a:e7:7c:cf:60:80:30:49:3c:b5:56:48:84:
8c:5c:9c:42:ff:fb:84:ff:e3:74:f7:33:f7:eb:2f:
b5:58:2a:55:a9:84:b4:12:e0:94:5d:bd:6d:d7:fb:
86:2e:2f:49:66:af:58:0b:20:55:5e:0a:b4:23:83:
f5:ff:fc:58:fa:b1:90:91:b5:f9:e9:17:65:22:6b:
68:80:3a:19:63:9d:fa:a5:c2:62:47:2e:36:4c:ab:
3e:94:d4:32:0c:1a:d9:74:01:64:91:f0:21:60:64:
5f:a8:ea:00:0e:8b:44:dc:a3:13:35:40:5b:f5:93:
54:2e:62:88:e0:dc:15:7d:05:4c:8a:10:d6:b7:14:
2b:8f:a0:6d:7c:37:45:b5:55:14:34:ce:c0:a2:7a:
6b:6f:3f:89:9f:43:2e:d3:54:72:ad:a3:40:31:e0:
a1:0c:b0:e5:c0:67:e8:3b:94:b5:78:00:f9:f7:69:
e9:1e:a4:4d:7a:10:09:c1:38:b2:24:f5:3b:c8:91:
df:e2:ab:c9:b2:c0:b5:ff:17:63:f3:7e:60:42:fd:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:35:DE:94:64:4A:DF:EB:61:10:42:3A:CD:50:AC:D8:22:D6:F1
X509v3 Authority Key Identifier:
keyid:C1:EE:69:AA:6A:A1:AC:BA:32:E1:67:64:DA:81:BF:7A:41:68:A6:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/we5pqmqhrLoy4Wdk2oG_ekFopg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/we5pqmqhrLoy4Wdk2oG_ekFopg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/75A92230FE3F11EF8FA27752C4F9AE02/CBB83D902F1E11F09BFFB056C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:7c:e3:19:d1:ae:13:18:88:26:43:d3:63:33:0d:9a:14:43:
6c:0e:4c:80:c0:b4:41:ef:09:3f:6a:59:3f:d2:fe:a2:f3:49:
f0:66:bc:1d:69:f2:fa:7a:b0:21:34:5f:f7:36:ec:af:b1:9d:
1f:60:31:a6:fe:d0:25:ee:32:80:54:33:59:5e:ea:89:e8:31:
f5:d0:1a:24:c6:2e:79:be:a4:cf:53:40:8d:56:71:2b:ea:07:
e6:e3:32:b7:9f:72:63:5a:8d:57:88:70:dc:31:e8:bd:22:27:
25:98:9d:21:6d:3e:28:0c:68:8e:76:24:78:1f:49:f6:ef:38:
f9:98:c1:6e:78:88:b3:ba:b1:f2:b2:be:b8:30:4a:19:f8:d9:
d1:a6:56:91:cc:57:11:b3:79:58:71:53:0d:5a:85:a3:07:24:
65:84:ff:4b:45:fd:0b:a7:ee:bf:b8:b2:77:1c:78:c2:91:81:
50:69:7a:77:b5:55:f0:d6:12:74:01:96:4a:2c:8e:e5:4f:75:
f2:63:a4:d4:51:67:d5:ed:a4:a6:ac:54:e9:9b:56:ee:43:ed:
1e:9a:70:ca:67:ee:da:89:01:35:4a:59:8a:4d:9a:fd:15:ae:
03:8f:f8:36:f7:52:1e:bf:49:0a:f8:34:9b:5e:f0:ec:23:6f:
38:d3:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:51:58 2026 by rpki-client