
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa
File: F88154843B9D11F091B39D67C4F9AE02.roa (raw, json)
Hash identifier: wMwLSmFRfR346APII8vghU3TqvB3B1WbFWhhmiBY1Cg=
Subject key identifier: 95:48:07:FD:7D:8B:BB:45:F9:E8:8C:1E:30:B7:AF:AF:2B:03:5D:88
Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial: 87
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa
Signing time: Thu 05 Feb 2026 16:26:28 +0000
ROA not before: Thu 05 Feb 2026 16:26:28 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 399861
IP address blocks: 161.248.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135 (0x87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Validity
Not Before: Feb 5 16:26:28 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6984c4b4-713b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:a8:b8:88:91:92:15:97:da:14:a2:47:e3:
f9:cd:ac:25:85:3f:53:34:83:4b:16:b2:18:f5:32:
ca:be:56:fb:5c:9e:4b:d3:9d:75:fa:6d:df:24:be:
cf:1d:1b:30:66:6c:5a:aa:20:b9:73:f1:f8:0b:f1:
29:73:21:8a:29:74:34:95:1b:f3:bf:02:9b:fd:09:
74:c3:ea:fd:cd:d6:4b:b2:f4:28:b4:51:c2:72:ce:
d7:2a:a2:e4:6e:a9:cf:62:a3:19:13:1c:40:68:ae:
45:ef:fa:be:d5:b4:81:57:9b:2c:9c:12:f6:b8:d0:
08:73:46:1f:9e:fe:af:57:38:2c:89:9a:05:14:7f:
fd:7c:0c:81:6c:72:ef:dd:8c:09:7b:9f:a5:b0:0e:
00:03:b9:28:2d:a7:b8:aa:de:78:48:29:6e:fe:9a:
22:d6:8c:01:21:63:fa:0c:5f:b9:1f:94:53:0f:16:
4f:96:84:a0:57:3d:6e:2b:04:10:a7:fe:41:e4:c1:
60:52:e9:b6:10:b5:5e:06:d3:b1:15:87:d2:dc:4e:
cb:76:09:3f:15:d8:5c:36:ae:6d:e7:4f:32:6c:44:
ce:73:49:39:cd:aa:0f:43:5c:ab:52:12:1d:c0:b8:
a7:6c:1c:19:13:cb:a1:07:29:b9:26:30:ae:a7:dc:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:48:07:FD:7D:8B:BB:45:F9:E8:8C:1E:30:B7:AF:AF:2B:03:5D:88
X509v3 Authority Key Identifier:
keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.88.0/23
Signature Algorithm: sha256WithRSAEncryption
27:e3:7f:f5:46:c0:fb:da:ad:21:4b:79:10:02:f4:97:3e:06:
51:d2:30:0c:16:3a:f7:e9:79:31:96:dc:dd:38:ee:1d:25:21:
55:7b:3a:8a:dc:c0:05:b7:29:e0:0f:18:5e:42:83:6c:69:d2:
84:9f:75:3e:f0:0e:0b:a0:61:f4:91:2b:7e:38:8f:36:79:67:
9f:45:a6:d5:d9:c5:d0:0b:9c:3d:bc:32:61:e9:cc:a3:d6:09:
02:a6:e9:55:54:bf:f6:ef:ea:4f:1e:b1:81:37:97:f3:d9:ce:
d2:eb:4d:b0:0f:07:69:66:4d:5a:cc:17:c2:2c:78:18:cb:82:
d0:54:68:9e:45:c8:ed:66:3b:ab:ce:5e:f9:10:f1:19:5a:0b:
82:86:13:87:68:d4:92:cc:81:2a:60:a8:5c:eb:11:e6:55:9e:
d2:8b:af:62:91:72:be:6b:3a:61:24:a5:ca:52:ec:1a:1e:4e:
04:41:35:21:31:af:13:5a:97:89:53:d6:e7:c9:e1:09:b7:67:
53:a3:37:85:49:1d:68:c6:4b:c0:01:ea:c9:79:a0:92:3c:35:
eb:e4:9e:81:51:0e:24:21:5a:98:97:a7:b3:27:34:65:a6:d1:
01:a4:ba:2c:33:37:f3:74:a6:e4:ed:e1:00:92:7e:f8:d3:d1:
29:ad:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:22 2026 by rpki-client