
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/4647BCD66E7F11EF9223EA62C4F9AE02.roa
File: 4647BCD66E7F11EF9223EA62C4F9AE02.roa (raw, json)
Hash identifier: JPVeqFS8xR3Uu2AP5zfr6KQvfduwIv7keU6B2F9zLVI=
Subject key identifier: 51:A3:C9:E9:97:29:1B:E0:44:DF:4A:68:30:5A:1B:A9:CC:59:5E:BF
Certificate issuer: /CN=A91E57A9/serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Certificate serial: 0183
Authority key identifier: 4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/4647BCD66E7F11EF9223EA62C4F9AE02.roa
Signing time: Sun 07 Jun 2026 04:36:03 +0000
ROA not before: Sun 07 Jun 2026 04:36:03 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 63801
IP address blocks: 160.22.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 387 (0x183)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E57A9, serialNumber=4E259BA87A40B66D842AC8CE0AEA784E4BD7382E
Validity
Not Before: Jun 7 04:36:03 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a24f533-ac76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4a:b7:6e:fd:32:56:74:60:cf:4c:23:70:c6:
fb:fb:55:95:55:cd:1d:9f:66:e7:72:28:dc:23:19:
cb:48:19:b9:1e:e7:cb:2a:82:a7:d8:79:63:74:ba:
49:df:b4:d0:b6:30:20:7d:d9:10:51:fd:f3:bb:b2:
e7:e7:da:11:ba:be:a0:1e:a6:f7:64:ef:37:39:fc:
b5:39:fd:3e:f9:a0:53:a1:97:dc:8d:5f:fd:d5:f4:
9c:97:5a:77:78:7b:df:38:7f:30:c1:cb:a4:9b:79:
74:79:55:9d:48:fc:2e:b3:45:9e:76:c1:0c:fc:19:
ea:15:4d:ee:1a:1f:b6:0e:ca:2d:82:be:30:36:de:
03:0e:67:d7:d2:49:0f:cb:b5:ca:1e:01:97:ac:3e:
b4:3e:8c:36:12:99:0b:d9:f8:72:00:b6:b8:e3:fe:
dd:9a:36:49:23:43:39:39:ca:9b:9e:cc:b7:6f:f9:
fb:11:e2:dc:42:81:a6:11:b1:b0:6c:18:6d:04:27:
af:cd:b3:e7:99:5b:d1:02:c3:9f:bb:b8:1f:52:24:
3f:d0:d0:f4:1f:a4:48:41:21:18:eb:6f:18:d0:de:
98:c8:a3:98:42:04:62:d1:b0:5f:46:62:49:8b:8f:
dc:07:b4:f4:15:7f:b7:19:2f:47:f8:67:e0:9f:e0:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A3:C9:E9:97:29:1B:E0:44:DF:4A:68:30:5A:1B:A9:CC:59:5E:BF
X509v3 Authority Key Identifier:
keyid:4E:25:9B:A8:7A:40:B6:6D:84:2A:C8:CE:0A:EA:78:4E:4B:D7:38:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/TiWbqHpAtm2EKsjOCup4TkvXOC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TiWbqHpAtm2EKsjOCup4TkvXOC4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/7BBD11AC1FF311EFA3FB2C81C4F9AE02/4647BCD66E7F11EF9223EA62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.40.0/23
Signature Algorithm: sha256WithRSAEncryption
86:61:4d:08:8a:32:03:a8:0d:9f:9f:c8:37:a4:de:bd:f3:85:
3b:7c:a0:ae:4a:87:c7:b1:07:b8:6d:4e:67:90:0a:2d:c2:db:
ec:18:0e:82:ee:67:84:27:d6:e2:16:0b:dd:53:13:bb:25:4e:
15:4a:f1:a0:91:ac:5d:74:60:3b:a9:27:5e:1f:bf:e6:53:9c:
81:eb:15:89:29:04:b9:d9:9e:18:33:55:e3:3e:d3:e1:a1:ee:
ec:1a:e8:5d:f2:18:90:d0:a8:e9:06:f4:c7:0a:5a:6d:58:91:
71:17:b1:61:43:94:94:f7:62:a1:a2:83:15:ee:64:ec:63:18:
c9:d8:19:58:66:d2:2d:ff:b8:56:f0:9e:6c:b8:5e:35:ea:0b:
57:86:26:f2:98:7b:c8:5a:cc:a4:7a:f8:f9:22:c5:c0:c8:1b:
0a:47:9b:b8:fa:25:9f:aa:46:47:02:1a:82:2d:fa:e1:f5:c8:
0a:8d:41:6e:70:e2:a2:89:fe:a8:af:ca:7b:80:0c:c2:e1:61:
2d:b7:f5:b7:ec:19:27:7f:0b:b5:fd:60:ce:b5:0c:e2:99:0e:
41:1f:35:5a:66:22:90:da:c8:53:70:fb:e9:21:40:eb:0d:0c:
7c:66:15:e8:07:f1:c1:d2:fc:39:8a:ff:68:92:f2:d6:14:6e:
08:7b:a5:d0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTU3QTkxMTAvBgNVBAUTKDRFMjU5QkE4N0E0MEI2NkQ4NDJBQzhDRTBBRUE3ODRF
NEJENzM4MkUwHhcNMjYwNjA3MDQzNjAzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTI0ZjUzMy1hYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnUq3bv0yVnRgz0wjcMb7+1WVVc0dn2bncijcIxnLSBm5HufLKoKn2HljdLpJ
37TQtjAgfdkQUf3zu7Ln59oRur6gHqb3ZO83Ofy1Of0++aBToZfcjV/91fScl1p3
eHvfOH8wwcukm3l0eVWdSPwus0WedsEM/BnqFU3uGh+2Dsotgr4wNt4DDmfX0kkP
y7XKHgGXrD60Pow2EpkL2fhyALa44/7dmjZJI0M5Ocqbnsy3b/n7EeLcQoGmEbGw
bBhtBCevzbPnmVvRAsOfu7gfUiQ/0ND0H6RIQSEY628Y0N6YyKOYQgRi0bBfRmJJ
i4/cB7T0FX+3GS9H+Gfgn+BjjQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFGjyemX
KRvgRN9KaDBaG6nMWV6/MB8GA1UdIwQYMBaAFE4lm6h6QLZthCrIzgrqeE5L1zgu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS83QkJEMTFBQzFG
RjMxMUVGQTNGQjJDODFDNEY5QUUwMi9UaVdicUhwQXRtMkVLc2pPQ3VwNFRrdlhP
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RpV2JxSHBBdG0yRUtzak9DdXA0VGt2WE9DNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTU3QTkvN0JCRDExQUMxRkYzMTFFRkEzRkIyQzgxQzRGOUFFMDIvNDY0N0JDRDY2
RTdGMTFFRjkyMjNFQTYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBYoMA0GCSqGSIb3DQEBCwUAA4IBAQCGYU0IijIDqA2fn8g3pN69
84U7fKCuSofHsQe4bU5nkAotwtvsGA6C7meEJ9biFgvdUxO7JU4VSvGgkaxddGA7
qSdeH7/mU5yB6xWJKQS52Z4YM1XjPtPhoe7sGuhd8hiQ0KjpBvTHClptWJFxF7Fh
Q5SU92KhooMV7mTsYxjJ2BlYZtIt/7hW8J5suF416gtXhibymHvIWsykevj5IsXA
yBsKR5u4+iWfqkZHAhqCLfrh9cgKjUFucOKiif6or8p7gAzC4WEtt/W37Bknfwu1
/WDOtQzimQ5BHzVaZiKQ2shTcPvpIUDrDQx8ZhXoB/HB0vw5iv9okvLWFG4Ie6XQ
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:09 2026 by rpki-client