
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa
File: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (raw, json)
Hash identifier: 8JBrZfdegKFa7/0SMOAwj103bMgFOupg0mERlE8UCMM=
Subject key identifier: 6A:32:25:5E:28:33:60:F6:DC:96:0C:30:21:36:AA:A9:88:F5:C4:7A
Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Certificate serial: DF
Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:14:57 +0000
ROA not before: Thu 29 Jan 2026 05:29:17 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153493
IP address blocks: 161.248.122.0/23 maxlen: 23
161.248.122.0/24 maxlen: 24
161.248.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6
Validity
Not Before: Jan 29 05:29:17 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41fb0-ecf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:dc:10:0b:7d:ea:6b:7d:5f:05:05:4f:1a:
3a:9b:9f:56:7c:4f:f7:c9:fe:40:93:d6:13:40:57:
ca:eb:64:74:3c:29:2e:d5:42:b4:2d:40:af:86:2b:
ec:63:64:d8:22:df:ff:c1:70:5b:dc:fc:ba:b8:1c:
f2:48:55:e7:e7:7e:58:cd:a9:42:da:3f:e5:3a:62:
bd:76:b7:6f:40:4f:09:62:63:9c:c8:6f:19:55:81:
8c:a7:ed:ce:ec:87:84:76:88:93:16:81:70:30:47:
88:59:f3:c2:13:ab:c3:1e:11:5e:d5:9f:13:bd:f5:
d4:01:4a:3a:b0:9e:a9:c7:7d:ff:c8:d2:f6:1e:17:
1a:5e:64:5f:03:9e:79:a6:e3:ac:63:55:ed:b2:eb:
9b:af:c7:ed:26:93:f0:b2:09:8a:38:f0:96:58:e2:
c6:12:f2:11:6f:38:b5:6e:8b:6e:80:01:55:d4:83:
37:de:a3:c2:18:ca:64:ae:c0:38:6a:0a:b8:5c:9f:
07:18:59:45:25:1c:9e:ec:ce:77:14:1c:08:12:67:
33:0c:6d:a2:ac:31:f8:8a:9c:18:a5:19:12:e6:fa:
9c:7b:b4:06:82:0c:5d:be:6b:1f:5c:31:98:fe:ec:
bd:e5:82:1c:23:cb:b6:5c:cf:2c:80:6d:f2:fc:b3:
68:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:25:5E:28:33:60:F6:DC:96:0C:30:21:36:AA:A9:88:F5:C4:7A
X509v3 Authority Key Identifier:
keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/5FEB0DA8E90611EFA74B611DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.122.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:92:7f:b2:0d:43:f6:ca:e4:61:3e:a8:94:f6:d2:2e:f2:01:
2f:59:26:5f:15:7f:c4:a1:3e:ba:21:94:54:e0:20:4e:fe:47:
6c:7a:a3:9e:61:86:70:da:29:a8:c9:47:98:fe:04:f0:dd:da:
00:a1:62:b9:23:27:2c:13:94:93:c9:a5:7d:42:15:11:2a:e2:
bd:a6:0d:b5:e7:89:6f:77:e7:f9:f3:a3:14:e2:14:8d:b8:29:
df:e8:f9:d0:a5:ba:c5:84:0c:1d:75:66:70:27:60:79:ad:5c:
ca:2e:5b:f0:1b:a2:e8:05:cd:37:ce:b3:d7:be:14:8e:2b:a6:
88:fd:51:e4:70:ef:5f:fc:ee:b5:8a:8a:f4:1f:91:87:be:f1:
b8:25:f7:7c:04:b8:3d:5e:7d:23:0f:0d:c3:a4:49:66:1c:1b:
bf:b8:2d:56:e2:2e:21:5b:91:07:06:32:b1:8e:17:fd:a7:28:
91:2b:fb:e7:fd:c5:a3:31:b3:36:ca:0a:ab:55:8c:83:61:e1:
74:a8:29:dc:3a:61:a5:33:89:af:1c:ce:9f:22:42:e0:3f:75:
35:58:a1:66:77:b9:a6:47:e6:5b:b0:d6:4f:c6:50:17:5f:0b:
26:14:fe:fd:12:6e:5b:e1:16:03:0d:89:8a:07:ce:bd:76:5b:
39:e0:e0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:23 2026 by rpki-client