
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/A22E9E42CF3D11EFB2075D13C4F9AE02.roa
File: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (raw, json)
Hash identifier: x28Oj7X+ym9PTtSgpQ2J6HOcFV8oNcxzJtpKw77hGpU=
Subject key identifier: 02:18:63:E9:AF:63:AA:78:0B:37:25:48:68:24:52:A0:A4:2B:EE:01
Certificate issuer: /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial: FB
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/A22E9E42CF3D11EFB2075D13C4F9AE02.roa
Signing time: Fri 03 Apr 2026 06:40:21 +0000
ROA not before: Fri 03 Apr 2026 06:40:21 +0000
ROA not after: Sat 01 Aug 2026 00:00:00 +0000
asID: 153516
IP address blocks: 161.248.154.0/23 maxlen: 23
161.248.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Validity
Not Before: Apr 3 06:40:21 2026 GMT
Not After : Aug 1 00:00:00 2026 GMT
Subject: CN=69cf60d5-7c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2e:57:d4:8f:74:9b:c0:01:c9:e5:1e:0b:a2:
5d:39:71:4f:14:cc:36:7a:2f:98:67:a4:1e:67:41:
4a:11:14:64:19:f7:a8:aa:07:11:27:8f:6b:a9:91:
66:c8:5d:73:ba:f7:87:8a:cb:a3:74:ae:3b:02:7a:
32:1a:bf:61:d7:71:0b:d8:5b:a0:d6:75:48:2e:eb:
64:cf:84:37:4f:32:f4:6d:e0:90:3b:a1:c8:ed:e0:
32:42:8f:4b:94:cc:60:91:79:cd:aa:e3:03:a4:b0:
c0:a3:3a:95:08:be:7a:31:31:5f:3b:7b:3c:8c:19:
1d:c0:a3:e2:db:fb:17:1c:2e:ea:dd:46:64:30:58:
d4:45:f4:17:44:03:9a:06:f3:a9:f0:04:11:21:83:
4e:ef:d8:c7:1d:0a:39:2b:51:64:cc:87:b8:f0:1e:
b0:9d:39:c4:b5:d2:8b:ee:1e:a1:c8:25:e8:1d:d2:
67:eb:09:dc:a6:e8:23:05:b8:80:8e:55:23:a0:1c:
43:af:29:bd:b0:54:4e:3d:71:02:e2:d6:bf:6c:4b:
2e:d0:6a:b7:0e:3c:5f:8e:2b:cc:4c:45:7e:ee:47:
03:f6:14:e1:95:50:a6:1f:43:4b:2b:b2:cd:78:be:
19:06:2b:8d:18:9a:9e:25:4b:7d:d8:06:cc:04:05:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:18:63:E9:AF:63:AA:78:0B:37:25:48:68:24:52:A0:A4:2B:EE:01
X509v3 Authority Key Identifier:
keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/A22E9E42CF3D11EFB2075D13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:0f:0a:54:6c:1a:43:57:d9:b6:be:d6:63:2c:b8:19:5f:69:
82:76:b8:50:a6:03:d7:4d:1c:28:5a:4b:fa:6c:72:13:e9:83:
1c:85:ba:ec:f2:87:75:1b:f0:96:79:bb:69:d2:ea:09:75:e7:
7f:9c:9a:c3:d7:7f:fa:7a:11:02:19:72:94:74:64:d0:3f:bf:
8d:72:3d:bd:a9:b3:f1:0e:d9:a6:4d:86:46:a7:52:d8:9b:a7:
81:f3:9b:dd:b5:26:7e:2a:07:00:30:13:59:75:6c:3e:55:10:
d6:1d:fd:eb:8c:b7:7e:5f:8a:fe:af:58:aa:99:7b:ce:4c:1d:
12:8b:ed:05:bc:99:7e:53:6e:97:c0:30:bb:e7:3e:2e:70:2c:
69:c9:46:15:f6:68:8d:fe:58:4d:c0:2e:b3:6c:c1:3c:9a:e7:
ab:d2:07:c5:f1:62:3f:96:8e:47:32:30:31:4c:a6:d0:74:ce:
4f:d8:f6:37:c3:17:60:bd:14:b1:a3:59:3b:97:2c:5d:87:90:
61:b4:5c:c8:5f:b7:da:a7:58:e5:7f:d9:9a:5a:66:31:7f:d0:
38:cf:4a:f7:e4:d4:b2:1f:05:3f:48:25:fd:1f:9f:45:e0:a1:
fe:34:ea:b6:90:c1:a5:ff:7e:aa:41:19:30:29:69:33:2b:9f:
9e:98:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:23 2026 by rpki-client