
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/4965F84CAFC011EF82BB1055C4F9AE02.roa
File: 4965F84CAFC011EF82BB1055C4F9AE02.roa (raw, json)
Hash identifier: 5akZ6mHQq1ksNbd/DS/b4qeyRo6TcvJuP9SLF4pNYTs=
Subject key identifier: 66:49:09:8D:C7:FE:9A:EE:70:D2:0F:2C:CB:97:04:3D:ED:72:A3:52
Certificate issuer: /CN=A91EE5E5/serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Certificate serial: F2
Authority key identifier: 69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/4965F84CAFC011EF82BB1055C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:14:42 +0000
ROA not before: Mon 15 Dec 2025 05:24:58 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153391
IP address blocks: 160.191.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE5E5, serialNumber=69236E5996300A2FD785EF85783C5C29C5B4E874
Validity
Not Before: Dec 15 05:24:58 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43bc2-e024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:63:12:c1:3d:2b:d1:9d:43:5e:41:fd:f9:
94:89:8d:1b:02:28:2d:6a:75:7d:aa:b8:83:ce:57:
21:12:3e:e8:0b:23:db:65:5b:66:c8:ee:fb:17:f5:
7f:ee:29:41:8b:08:ba:21:84:64:5d:87:1e:63:3e:
45:88:88:dc:5e:34:94:0a:6b:ea:f0:74:aa:89:32:
b7:bd:f9:34:7d:f4:69:cf:b2:ae:2e:4e:fa:40:e2:
2b:93:76:48:27:93:c4:ab:1b:a2:64:dc:fd:79:01:
b6:12:c0:1c:bd:e5:b3:95:d3:66:81:43:fe:6d:7c:
41:16:6c:26:50:5d:b1:06:6a:23:15:1e:93:f6:38:
ad:b1:82:3a:b5:a6:98:1c:15:ed:7c:fa:d3:14:07:
bd:8a:91:f4:91:41:49:a4:8c:72:43:bd:77:ea:ed:
cf:59:0e:da:32:7c:0c:2b:1e:3c:c4:88:01:d1:3b:
c2:80:dc:aa:b0:3b:dd:43:0f:29:f6:00:c4:bf:90:
45:8d:7f:f1:aa:79:0c:07:63:4b:67:8f:1c:00:36:
c8:3e:29:3f:04:12:a7:d3:ad:e4:50:75:48:49:44:
77:b4:04:8f:a1:90:e7:1b:20:49:10:a2:69:1d:9f:
f5:b2:26:56:54:8e:21:15:ae:0e:7b:dd:c0:b8:75:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:09:8D:C7:FE:9A:EE:70:D2:0F:2C:CB:97:04:3D:ED:72:A3:52
X509v3 Authority Key Identifier:
keyid:69:23:6E:59:96:30:0A:2F:D7:85:EF:85:78:3C:5C:29:C5:B4:E8:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aSNuWZYwCi_Xhe-FeDxcKcW06HQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE5E5/F0E76E12AFBF11EFA28A3654C4F9AE02/4965F84CAFC011EF82BB1055C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.156.0/23
Signature Algorithm: sha256WithRSAEncryption
51:af:f4:0d:cf:6e:63:5a:3c:a9:d6:5b:df:4b:71:c9:b3:13:
fe:de:9a:20:20:45:d9:b8:cc:42:61:23:09:70:b6:a6:ac:36:
85:37:06:05:63:7d:d9:20:e7:e8:7d:3d:71:96:8b:f6:ab:4c:
24:b1:1e:4c:f5:72:e2:37:06:6e:48:48:99:c6:e6:2c:a6:e0:
38:54:a7:5e:86:09:a3:df:b6:e0:75:32:90:a4:36:a4:12:67:
7f:bb:72:43:7b:4e:9f:46:63:65:a5:bd:2c:43:aa:58:d4:fd:
cd:82:b1:91:ff:a6:7c:5f:20:3e:b1:97:57:67:14:81:5f:69:
9a:ea:e1:ba:7d:04:db:2e:88:33:0a:17:76:94:5f:92:da:f4:
35:84:c4:45:cb:56:f2:be:1f:3c:e2:66:8e:e7:27:3e:7a:f4:
96:d1:ac:0e:6c:ea:47:8c:66:31:95:53:44:80:aa:60:1a:c9:
80:7b:5d:8f:4e:1f:a4:00:ed:dc:07:9b:b0:64:7f:42:72:72:
3d:b4:36:ec:ae:38:81:59:2a:79:34:78:12:67:41:a4:06:65:
e7:cf:f0:d6:35:ba:cf:04:91:41:23:83:22:10:93:bb:ef:36:
ac:fa:36:3a:8e:ed:1c:62:a0:44:c6:90:6b:3a:02:18:d7:94:
5e:95:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:12 2026 by rpki-client