
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/8580DC705AE311EF86351430C4F9AE02.roa
File: 8580DC705AE311EF86351430C4F9AE02.roa (raw, json)
Hash identifier: Z763OA2aGYPDmj4qlpDVEyptMjmrPDNUtAJf94UbdWg=
Subject key identifier: DE:13:06:17:93:17:BC:91:3C:5F:DD:20:0A:B5:91:02:08:1D:46:9E
Certificate issuer: /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial: 0187
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/8580DC705AE311EF86351430C4F9AE02.roa
Signing time: Thu 27 Aug 2026 04:56:20 +0000
ROA not before: Thu 27 Aug 2026 04:56:20 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151663
IP address blocks: 160.30.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Validity
Not Before: Aug 27 04:56:20 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8fc373-0569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:95:ef:95:3c:ba:68:ee:b5:e4:ec:14:05:
4a:8c:29:88:86:4e:ed:8b:df:17:7e:49:30:e6:1b:
c4:c7:19:ad:7a:90:cd:a4:cb:e4:50:19:4c:73:c7:
cf:91:8c:4c:06:b4:bc:20:5a:80:13:4b:18:33:9d:
1f:87:97:6b:be:b9:79:63:d2:4e:ad:aa:25:3f:a8:
0c:c8:09:94:b3:cf:36:16:c7:58:62:8f:f8:47:d5:
f0:21:4f:3a:5a:25:96:70:cb:2b:b2:65:ba:fd:43:
c9:f1:53:14:36:bf:6c:3d:82:1d:0f:5a:b5:37:fb:
e5:2a:d2:4a:fe:cb:e6:70:af:fa:6b:3f:db:08:f4:
3e:b0:63:6b:d7:71:1e:19:3c:8e:96:7b:9d:b7:0e:
b5:7b:87:69:c8:94:7b:5d:04:0f:aa:72:59:51:47:
f3:6c:ad:34:f5:bd:c4:7e:ed:6a:03:25:e0:14:18:
be:ca:c9:d6:a9:19:54:cd:00:7b:a4:a3:6d:5e:c5:
da:54:92:91:83:1d:ec:a3:a7:45:35:2b:a1:11:ef:
c4:c3:dd:05:f7:ea:78:ea:95:38:b7:f1:0b:80:48:
cf:27:ec:8d:12:64:3b:72:bd:f9:3f:bb:88:25:51:
5c:0e:48:ca:4c:df:5e:38:4a:d9:6c:f5:35:70:85:
81:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:13:06:17:93:17:BC:91:3C:5F:DD:20:0A:B5:91:02:08:1D:46:9E
X509v3 Authority Key Identifier:
keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/8580DC705AE311EF86351430C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.132.0/24
Signature Algorithm: sha256WithRSAEncryption
58:3d:5d:c0:dc:52:e6:77:ed:55:14:2a:b8:89:39:0b:2c:32:
38:a5:9e:6f:33:43:60:fd:eb:2f:fe:66:ed:eb:a9:49:32:b5:
a0:57:9a:25:bd:55:69:4c:68:80:6a:4c:5d:a9:25:dd:56:67:
4e:3a:84:b6:f3:13:7f:57:af:2b:15:2d:58:39:bd:62:ff:3b:
f7:9a:19:60:bd:0a:6a:70:e2:f4:24:c6:eb:50:27:ce:aa:22:
1b:3d:e4:8d:fe:be:59:48:57:ac:d6:ce:31:1e:06:1f:ca:c2:
89:16:2d:c6:24:30:e6:a7:5e:5d:ac:86:e5:cf:b0:b1:6c:da:
15:cf:61:d0:dc:6d:b1:33:db:d0:21:be:57:7d:7f:51:e5:8d:
c9:52:52:0f:76:7d:36:6d:c4:08:f0:5c:3c:de:cb:aa:bc:b3:
da:17:25:27:38:bc:e8:3e:2b:e0:a7:e6:a1:72:8b:a7:62:f5:
04:a5:be:13:50:61:4b:8d:0d:13:08:ae:f4:0a:26:c6:43:68:
bb:44:7b:cd:d3:e3:2a:82:0c:04:72:c1:d8:2a:1d:ee:5e:e7:
e2:94:41:7c:71:a2:26:3d:17:04:e3:a7:5c:9e:c2:0d:46:ab:
e2:c1:7e:ca:dd:1f:7b:c9:6f:dc:dd:e1:91:3f:95:2f:38:45:
df:81:f2:30
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ1OTYxMTAvBgNVBAUTKEJGNzFGNUJGMTE2OEE3ODQwNTc2RTAwMDZGM0JCQzY1
RkM0ODM0MEIwHhcNMjYwODI3MDQ1NjIwWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThmYzM3My0wNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyQyV75U8umjuteTsFAVKjCmIhk7ti98Xfkkw5hvExxmtepDNpMvkUBlMc8fP
kYxMBrS8IFqAE0sYM50fh5drvrl5Y9JOraolP6gMyAmUs882FsdYYo/4R9XwIU86
WiWWcMsrsmW6/UPJ8VMUNr9sPYIdD1q1N/vlKtJK/svmcK/6az/bCPQ+sGNr13Ee
GTyOlnudtw61e4dpyJR7XQQPqnJZUUfzbK009b3Efu1qAyXgFBi+ysnWqRlUzQB7
pKNtXsXaVJKRgx3so6dFNSuhEe/Ew90F9+p46pU4t/ELgEjPJ+yNEmQ7cr35P7uI
JVFcDkjKTN9eOErZbPU1cIWB1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN4TBheT
F7yRPF/dIAq1kQIIHUaeMB8GA1UdIwQYMBaAFL9x9b8RaKeEBXbgAG87vGX8SDQL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wNTcyREQ4QTVB
RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi92M0gxdnhGb3A0UUZkdUFBYnp1OFpmeElO
QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3YzSDF2eEZvcDRRRmR1QUFienU4WmZ4SU5Bcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUQ1OTYvMDU3MkREOEE1QUUzMTFFRjkzMkMyMzJGQzRGOUFFMDIvODU4MERDNzA1
QUUzMTFFRjg2MzUxNDMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoB6EMA0GCSqGSIb3DQEBCwUAA4IBAQBYPV3A3FLmd+1VFCq4iTkL
LDI4pZ5vM0Ng/esv/mbt66lJMrWgV5olvVVpTGiAakxdqSXdVmdOOoS28xN/V68r
FS1YOb1i/zv3mhlgvQpqcOL0JMbrUCfOqiIbPeSN/r5ZSFes1s4xHgYfysKJFi3G
JDDmp15drIblz7CxbNoVz2HQ3G2xM9vQIb5XfX9R5Y3JUlIPdn02bcQI8Fw83suq
vLPaFyUnOLzoPivgp+ahcounYvUEpb4TUGFLjQ0TCK70CibGQ2i7RHvN0+MqggwE
csHYKh3uXufilEF8caImPRcE46dcnsINRqviwX7K3R97yW/c3eGRP5UvOEXfgfIw
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:24:58 2026 by rpki-client