
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa
File: C491ED725A7A11F083B3F885C4F9AE02.roa (raw, json)
Hash identifier: 7WBAHsig/Kovz/pUrk3p+Cxc7oQA5m4kNqg7vSnWYU8=
Subject key identifier: 95:FC:13:4B:73:32:3D:4A:86:8D:56:24:30:4C:2F:8C:FC:D2:C0:40
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: F3
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:27:06 +0000
ROA not before: Tue 23 Dec 2025 05:26:04 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 135374
IP address blocks: 160.250.196.0/23 maxlen: 23
160.250.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Dec 23 05:26:04 2025 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43eaa-d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f4:d7:ec:a6:62:98:d8:67:c0:9e:fc:4d:8d:
ed:38:bf:24:ae:08:ae:55:87:ab:75:f4:77:cd:3c:
2f:b0:07:8d:c0:e3:4f:2f:63:81:19:d2:29:fa:62:
0e:89:6a:92:a3:a9:c2:4d:03:06:e3:41:dc:00:ec:
6f:c7:16:84:e8:12:ca:03:95:7c:c8:ac:97:a8:67:
b4:db:19:09:11:5c:aa:ab:6a:d3:00:c1:db:b5:10:
e3:a2:12:9d:e9:b0:95:a0:b5:d4:5c:88:b9:c0:6d:
6c:5e:10:f9:c3:95:f3:e5:3b:8d:0a:62:f3:4f:2c:
8b:bb:c2:0f:e4:33:fe:b4:48:9e:be:33:f7:c2:47:
ac:52:e8:d3:04:f9:5d:b0:e5:f3:db:53:b8:9c:14:
16:03:42:cf:f4:b0:e9:7c:4f:90:66:2b:43:2b:90:
f8:90:90:f3:99:26:96:c3:28:91:3e:d3:28:1d:aa:
76:d0:29:7e:bd:52:7a:cc:cc:30:0a:bf:57:14:4d:
d3:6f:e6:d3:fd:a3:0d:27:61:e1:c4:dc:51:2a:ad:
8e:93:6f:44:a5:9d:0c:0c:20:a0:15:bb:bc:e8:25:
77:24:ca:91:cd:f4:5e:5f:21:d1:56:aa:df:6a:5f:
65:c8:3a:58:a1:d8:e7:19:47:41:17:2e:3d:81:7a:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:13:4B:73:32:3D:4A:86:8D:56:24:30:4C:2F:8C:FC:D2:C0:40
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.250.196.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:60:7f:a6:25:49:a0:b1:6c:32:ff:1a:56:40:08:23:ff:8a:
c1:c8:fb:1d:35:cb:89:6a:a1:2c:3c:27:21:66:37:9a:81:df:
3e:fe:37:5c:2b:9f:4d:81:29:06:0c:9c:66:b4:72:6e:26:28:
76:04:e2:c0:c5:13:95:90:31:df:8b:c6:27:f8:e1:0c:2f:fc:
8a:a6:3c:97:96:5b:37:03:fa:79:eb:a8:70:79:97:43:c2:96:
f6:28:cd:2e:4d:ff:14:98:2b:6e:75:79:ee:19:d5:44:ef:02:
c3:e6:67:30:c2:1a:bc:e8:0b:db:6b:ec:a1:ed:a8:47:6a:3b:
10:29:eb:17:d7:39:12:1f:7d:18:bd:e6:50:45:9d:74:28:ed:
69:92:8e:7b:43:ad:f5:13:e0:cf:76:eb:59:df:41:a4:61:f8:
6a:5b:6e:2e:28:fb:73:f0:30:f5:18:b9:d9:5c:ec:5e:36:d5:
dc:12:e5:dc:55:da:4d:06:5a:a4:b7:da:42:d5:0b:ef:5c:f1:
d0:b4:26:19:ee:51:12:d8:a4:d5:63:e7:1b:a4:cb:d3:38:0f:
93:26:69:56:c1:a9:4d:d4:79:c6:e3:47:67:06:e2:f7:0e:48:
f0:02:e9:b9:70:80:be:8f:54:07:df:69:35:0e:6a:ba:be:3d:
52:dd:67:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:31:52 2026 by rpki-client