
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/DFAC1D02816911EFBC73980DC4F9AE02.roa
File: DFAC1D02816911EFBC73980DC4F9AE02.roa (raw, json)
Hash identifier: V/d4B+TAyK61k3RWgyTLNVmvz+WToaWYZNtG+tiyTlQ=
Subject key identifier: CB:82:96:71:60:37:17:AD:BC:37:40:3D:65:8D:D5:FE:5A:5D:89:AF
Certificate issuer: /CN=A91D0FCB/serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Certificate serial: 0146
Authority key identifier: 3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/DFAC1D02816911EFBC73980DC4F9AE02.roa
Signing time: Tue 09 Jun 2026 05:37:04 +0000
ROA not before: Tue 09 Jun 2026 05:37:04 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 152915
IP address blocks: 160.22.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 326 (0x146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0FCB, serialNumber=3CB4A900418BE9DCDC5E04A0BA62A84DA85FE6E0
Validity
Not Before: Jun 9 05:37:04 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a27a680-befa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:b6:0c:f5:96:11:56:f4:24:2a:c1:b7:e4:
1c:1b:ee:1d:ef:b2:10:4e:a1:f3:bc:52:02:4a:c0:
5c:44:78:a6:7c:34:f0:2d:08:b8:7c:38:da:d6:3f:
77:93:0c:af:26:ec:99:63:db:01:28:1b:99:3c:6f:
b6:3f:92:18:f2:43:40:38:8a:7e:02:c6:9b:bb:6a:
d7:ba:95:d6:49:ce:a6:8a:93:18:b2:51:18:f2:9a:
0f:bc:51:97:4f:f2:98:25:c1:a5:05:b7:2e:2a:5e:
eb:22:0c:ad:7f:53:1b:9b:38:d4:59:85:7f:94:4c:
27:63:60:56:90:63:05:f9:db:45:5a:9c:a8:10:70:
6b:ee:91:ac:6d:e8:1e:15:ae:fb:2a:6b:40:f6:f3:
90:f9:c9:3d:c0:5b:15:a6:18:28:01:a7:59:cf:fb:
92:1a:c5:35:57:0c:50:a9:d0:13:d3:d0:57:cd:e3:
3a:57:c8:aa:6c:da:fd:e1:32:fd:bb:b6:ea:4e:4a:
7d:bb:c5:63:7f:af:ed:85:8c:85:75:c0:ec:c8:9d:
69:9a:09:bf:ab:4d:24:ff:2e:c0:f8:15:34:47:e7:
81:1e:ef:45:9c:83:32:19:23:a7:a6:8b:d3:a3:8c:
4a:58:ed:e6:3b:c9:4f:a3:ad:40:5d:28:72:60:1e:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:82:96:71:60:37:17:AD:BC:37:40:3D:65:8D:D5:FE:5A:5D:89:AF
X509v3 Authority Key Identifier:
keyid:3C:B4:A9:00:41:8B:E9:DC:DC:5E:04:A0:BA:62:A8:4D:A8:5F:E6:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/PLSpAEGL6dzcXgSgumKoTahf5uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PLSpAEGL6dzcXgSgumKoTahf5uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0FCB/89C78F70816911EF8213FB0CC4F9AE02/DFAC1D02816911EFBC73980DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.178.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c8:71:ca:d3:9a:a0:03:51:85:ca:c5:f1:cd:5c:c8:89:15:
d2:bf:de:ea:a9:fe:88:85:b3:97:fe:99:af:0e:53:ac:da:3d:
af:be:ec:ee:99:dd:e8:e9:96:47:3c:5c:cc:54:1a:89:bc:e7:
87:86:39:d2:ef:43:79:93:3a:56:2e:3b:53:ba:b9:d1:cd:f9:
c9:b0:b3:60:9c:f3:9b:81:d6:56:bb:1c:c9:18:8f:41:24:22:
2f:3c:66:b1:97:0c:d7:f6:9d:a5:56:79:37:b5:04:cb:7c:7d:
6f:9f:09:e7:6d:65:fd:dc:44:ce:52:77:da:1f:4d:f3:d8:fb:
8f:de:d3:c0:00:5c:c4:15:3d:f7:97:62:16:3a:a6:9d:7f:38:
fa:10:48:9f:b1:42:49:65:13:91:41:f7:24:26:9c:6e:a7:62:
3c:a6:9b:9e:35:81:fa:5f:c5:d0:05:d6:26:cb:87:79:3d:c7:
5f:7c:6d:5d:29:08:41:56:f8:f4:b2:83:b5:9f:c6:99:71:4d:
0d:0c:06:2e:cb:6f:1d:35:05:38:ff:5d:a7:1c:77:d7:e1:51:
0d:02:44:ef:33:67:de:83:fa:79:d4:78:bd:76:e9:14:96:c2:
96:b7:b0:81:0d:ac:46:1f:2c:0c:10:09:2c:ec:44:26:4c:c5:
c1:21:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:20 2026 by rpki-client