
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
File: A55B56FC812311F1A313CCFA74A30FBC.roa (raw, json)
Hash identifier: CgCaAsuhKr/vo6vaRhDPC36Dwd42AzMK9hLer8QqUaQ=
Subject key identifier: AD:9C:86:26:28:42:DF:0D:BB:61:F3:B2:15:0C:96:91:95:78:0A:BE
Certificate issuer: /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C
Certificate serial: 28
Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
Signing time: Fri 21 Aug 2026 17:00:19 +0000
ROA not before: Fri 21 Aug 2026 17:00:19 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154755
IP address blocks: 160.236.86.0/23 maxlen: 23
160.236.86.0/24 maxlen: 24
160.236.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl
rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 10:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C
Validity
Not Before: Aug 21 17:00:19 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a888423-1f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:09:cc:79:06:bf:0a:ec:d2:06:d9:08:b9:
1d:cb:9d:9a:70:eb:d4:5b:4c:66:16:a6:62:45:4e:
30:b5:84:ce:ae:14:be:4b:b0:d0:44:66:90:96:62:
4e:24:33:b2:f7:a6:e0:6c:e9:20:73:e6:3b:92:6c:
06:e2:79:cf:ea:55:72:6a:32:ef:1a:04:bb:09:47:
fc:32:ae:20:21:02:d2:29:a4:97:57:a5:c7:f2:62:
b8:3e:ee:92:ff:20:5e:d0:63:9d:6a:ef:5c:13:5b:
e3:1d:79:c7:9c:3b:28:b9:dc:98:f2:e2:84:c6:6a:
9a:9b:a2:b1:27:9b:47:36:bc:85:85:84:bf:c3:3b:
a4:a7:45:af:4a:3c:dd:49:fe:52:cc:73:ca:a3:25:
9c:9c:59:79:04:bf:71:8f:47:89:28:54:8f:0e:fb:
e7:79:c6:4e:eb:0b:66:8b:c3:ba:5f:27:63:bd:76:
15:26:ce:ce:ee:1f:2e:f2:18:75:ef:0e:cd:c3:be:
19:88:00:5e:79:59:91:7d:88:b4:ef:d8:28:45:4a:
47:e2:85:04:98:ec:2e:da:ff:93:7c:0b:74:2d:46:
70:cb:7c:db:d7:06:77:e2:ce:32:f2:f0:67:ec:55:
a0:b1:49:86:ad:cc:f2:74:7a:6b:7b:11:ff:2a:d0:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9C:86:26:28:42:DF:0D:BB:61:F3:B2:15:0C:96:91:95:78:0A:BE
X509v3 Authority Key Identifier:
keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.86.0/23
Signature Algorithm: sha256WithRSAEncryption
20:5f:53:b5:da:a3:67:a2:b8:a0:a0:e5:23:1c:24:f7:34:27:
12:2a:62:0a:02:c4:b9:f5:4c:14:9a:5e:98:1b:05:17:c2:3d:
55:bf:f5:69:03:36:e8:fa:2c:d3:90:79:16:8f:65:0e:80:46:
1f:b7:30:7b:4f:bf:b7:8f:09:6d:2a:e9:49:43:db:87:45:c1:
aa:21:f6:30:07:8b:2e:c8:98:52:b4:ee:82:01:66:8a:f9:cd:
3e:9e:42:97:06:a2:cd:3c:18:7e:d3:5e:5b:13:1c:f1:a7:da:
13:63:9b:07:cb:d6:6b:65:52:8a:65:5e:20:36:1e:55:2d:04:
ff:bb:ae:5d:d5:f4:6f:a4:f0:4b:a8:d3:89:cc:d4:ab:46:16:
33:18:84:38:16:e2:65:4c:4d:e6:ef:dd:5e:ad:84:67:fd:4b:
94:a9:da:bd:2b:1a:4c:73:7f:c8:dd:7b:a6:ff:d9:67:be:80:
0a:14:b2:f6:7d:65:bc:7d:c5:24:4d:31:93:f9:25:7c:67:d4:
33:26:58:d5:30:a8:3a:02:4d:79:8b:b3:96:c4:24:15:9a:55:
4e:2d:44:e6:fe:5c:f2:50:df:55:cf:19:f6:d1:5e:62:2d:d8:
4d:9b:b5:e5:fa:9f:a7:a5:69:43:66:2a:87:36:e1:b5:ed:c0:
f9:47:b2:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:49 2026 by rpki-client