
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/F96399A2890811F1B9FCBC754C11F970.roa
File: F96399A2890811F1B9FCBC754C11F970.roa (raw, json)
Hash identifier: p/HyZOExWpAExKinNeG+Ud+HfKM8Y6EPhK7+0I/TK/o=
Subject key identifier: 06:8B:05:4D:DB:C7:BC:F5:D5:E4:18:D5:C3:A4:AF:97:0E:3A:A3:58
Certificate issuer: /CN=A91D2B4A/serialNumber=1CFFC483A54A1BB0E66AFC73AC871923C6CC6582
Certificate serial: 05
Authority key identifier: 1C:FF:C4:83:A5:4A:1B:B0:E6:6A:FC:73:AC:87:19:23:C6:CC:65:82
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HP_Eg6VKG7DmavxzrIcZI8bMZYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/F96399A2890811F1B9FCBC754C11F970.roa
Signing time: Sun 26 Jul 2026 15:45:07 +0000
ROA not before: Sun 26 Jul 2026 15:45:07 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153038
IP address blocks: 160.236.134.0/23 maxlen: 23
160.236.134.0/24 maxlen: 24
160.236.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.crl
rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HP_Eg6VKG7DmavxzrIcZI8bMZYI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B4A, serialNumber=1CFFC483A54A1BB0E66AFC73AC871923C6CC6582
Validity
Not Before: Jul 26 15:45:07 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a662b82-562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:95:f1:9e:f3:0a:f1:76:b9:e3:12:10:c0:
eb:11:1b:97:8b:e8:35:46:52:24:9b:a0:ae:c8:02:
4b:7e:3e:f9:a6:7d:95:a6:2d:3b:c6:38:52:e8:e7:
a9:a3:08:e0:41:c2:12:ac:b5:d4:cf:e6:dd:c6:b9:
5d:e7:74:74:4a:ee:57:71:84:4f:de:dd:87:80:fb:
65:ba:5a:6c:22:f8:c6:bd:bb:87:37:0d:d8:cd:5a:
b6:48:c1:09:00:3c:ad:88:d5:97:0f:ff:79:fa:3c:
12:c3:c2:77:98:6a:ce:be:59:c7:71:dd:39:9c:e3:
92:e6:0a:ff:e5:95:c6:16:b6:01:01:73:46:20:b3:
15:a4:77:74:fd:a7:c5:2f:b0:bd:3a:4e:1e:3a:0a:
4c:af:df:90:7c:34:c7:fc:42:81:a7:f2:93:73:aa:
1f:f9:41:c0:f7:35:02:9d:13:b9:2a:7f:88:67:05:
2d:7b:6b:4f:50:c6:68:22:ee:8f:4d:3f:b0:3b:9e:
fa:cd:f6:52:b8:67:6e:a0:e9:df:02:fc:43:52:a9:
8e:31:79:6d:01:ac:05:cf:86:76:05:8d:e8:8e:29:
c1:b0:dc:96:94:ad:e8:0b:be:28:56:23:78:d6:eb:
7e:77:ee:42:38:ba:62:5d:b3:eb:df:77:11:fe:cc:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8B:05:4D:DB:C7:BC:F5:D5:E4:18:D5:C3:A4:AF:97:0E:3A:A3:58
X509v3 Authority Key Identifier:
keyid:1C:FF:C4:83:A5:4A:1B:B0:E6:6A:FC:73:AC:87:19:23:C6:CC:65:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/HP_Eg6VKG7DmavxzrIcZI8bMZYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HP_Eg6VKG7DmavxzrIcZI8bMZYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B4A/57598D54868011F19D1E7A5F66A30FBC/F96399A2890811F1B9FCBC754C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.134.0/23
Signature Algorithm: sha256WithRSAEncryption
08:64:08:14:4b:7f:37:5f:55:44:cc:97:bf:10:bc:8b:fd:f9:
3f:04:3b:56:2c:7b:80:71:cc:7e:7c:1c:42:96:d8:24:65:46:
50:16:76:a7:54:b9:03:70:3b:d4:46:81:30:1f:88:ab:34:31:
05:5e:6b:82:20:a0:f2:eb:c6:30:60:e1:d4:78:26:53:6a:90:
13:66:ff:da:9e:eb:b2:cb:71:25:94:72:fa:71:f1:11:e8:82:
bd:1f:25:38:bc:0f:96:ec:32:23:84:3c:2f:08:2b:99:72:c1:
c9:95:ab:8f:89:6a:ad:93:74:84:f6:19:93:d7:c7:4a:2f:e6:
69:42:89:ca:97:20:32:00:04:a5:4f:10:24:93:e5:3c:95:77:
96:9c:4e:06:54:40:27:79:87:db:80:6d:60:41:c7:0b:11:46:
4f:59:2a:4e:61:84:ef:26:17:d4:47:3b:4c:11:c4:14:07:83:
98:ea:69:a1:23:3d:60:6c:f9:6c:2a:f4:de:47:fd:73:d0:7e:
26:f1:d5:a9:d2:bb:a1:32:e8:96:5e:ae:17:3b:7f:9d:35:fb:
2e:dd:98:c8:5f:c4:97:73:a3:7f:28:f3:73:55:68:78:99:90:
a0:76:d5:82:31:34:1a:eb:aa:bc:b6:73:7a:a0:f8:d6:f9:43:
3c:04:26:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:54 2026 by rpki-client