
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa
File: E7695EC6A53411EFB98AFE51C4F9AE02.roa (raw, json)
Hash identifier: P5+kdRcpYE+yFLD64Qimw3RoARkVgaUfcrwZcF1uiC8=
Subject key identifier: 15:2C:BE:C8:38:52:FB:2B:7D:EA:E8:E3:65:EB:DA:5F:E6:4A:27:34
Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Certificate serial: F9
Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa
Signing time: Mon 02 Mar 2026 11:29:12 +0000
ROA not before: Tue 23 Dec 2025 05:25:45 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132238
IP address blocks: 160.191.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDEFE, serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0
Validity
Not Before: Dec 23 05:25:45 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a57487-f19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2a:e7:3e:cf:b2:95:3f:3b:84:17:54:c5:b2:
fc:ae:5f:6e:2c:c0:3b:c7:13:10:09:2e:59:c2:c9:
96:8e:69:6b:9d:d8:41:9a:7b:f2:1f:96:e7:e2:93:
54:66:f0:20:f0:a6:db:a0:0e:cc:6e:4f:35:87:4a:
56:cd:cc:40:8c:88:3a:67:1a:0a:ba:8a:db:58:36:
cf:04:4f:7b:77:bf:0c:38:ec:21:21:d6:49:64:28:
99:10:40:fd:24:9f:9a:3c:b6:22:6f:30:a4:50:5f:
a7:dc:3f:89:e5:0a:9b:d9:11:2e:76:79:82:ac:4a:
4b:49:26:97:b3:0f:8c:c6:6d:e9:78:d6:fd:ee:f8:
4c:0d:1d:46:d9:01:d4:02:7c:70:0a:f8:c7:7e:df:
37:2d:11:4f:62:15:78:05:05:4c:99:0f:66:c1:cd:
b3:4f:f4:9a:d1:d4:d2:c9:9a:d9:1b:29:17:99:b2:
5a:5c:96:1a:87:fb:ae:5f:dc:4f:27:d7:8c:d6:b2:
52:52:c3:50:5e:91:af:5a:95:16:7b:b1:c6:31:fb:
fd:72:ab:ac:6d:91:42:3f:96:94:9d:b3:d0:e2:5c:
e8:7e:3e:8e:c7:bf:46:47:77:e1:d9:75:ad:5e:3f:
70:d7:20:36:5a:76:29:cc:dc:1c:d9:e2:36:a6:d7:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2C:BE:C8:38:52:FB:2B:7D:EA:E8:E3:65:EB:DA:5F:E6:4A:27:34
X509v3 Authority Key Identifier:
keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.247.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f5:e9:07:1b:e7:54:0f:5c:40:e2:ca:f0:16:99:22:61:eb:
3e:12:6f:97:b7:04:ed:65:cf:13:d7:d6:ef:b1:ab:ac:21:fc:
8e:70:bf:67:6c:4c:e6:3c:12:24:ff:d6:fa:60:e4:82:a7:03:
f2:c7:3d:2b:01:aa:e9:33:c9:bb:6b:71:bd:5c:35:ef:30:b9:
d3:23:8e:7e:8d:08:63:29:3e:61:7d:64:af:97:d6:19:a8:19:
a4:6c:9b:ce:b6:53:b4:eb:9f:6e:95:1e:32:a8:50:7a:3d:ce:
6c:f8:6b:8f:28:df:13:68:d9:04:5f:e4:36:01:fb:1b:13:c8:
43:7f:e0:88:5a:b0:9c:35:d9:7b:8c:d2:88:67:c4:1a:76:bf:
45:7e:17:cc:e3:7a:d3:3b:e1:23:de:40:72:48:09:91:d5:c6:
30:50:f1:37:15:9b:a1:0a:4f:d8:ba:d5:00:ac:1e:e3:1f:82:
3e:8e:85:12:f0:8b:7a:77:ff:d4:e7:05:bf:86:a1:eb:e3:3c:
01:3f:15:71:90:e0:c2:45:e5:7a:1a:88:07:e4:31:cc:b1:99:
7d:54:89:b5:a6:ec:ef:f5:a1:bc:fe:26:3f:8b:ce:e1:06:4b:
21:0b:a9:b8:c9:72:d6:41:ed:93:ae:8c:13:23:62:fa:6f:96:
f6:3d:cd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:55 2026 by rpki-client