
$ rpki-client -vvf rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/029673283B9E11F0AA109D6CC4F9AE02.roa
File: 029673283B9E11F0AA109D6CC4F9AE02.roa (raw, json)
Hash identifier: mkJn5HcxZSix0xQ2l2GY2Rnt28cmXJs8LaMjzdF8Bqk=
Subject key identifier: E5:A1:C7:78:FE:DD:39:04:36:E1:DC:7D:11:FC:80:7C:A4:20:C9:30
Certificate issuer: /CN=A91651CF/serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Certificate serial: 0118
Authority key identifier: AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/029673283B9E11F0AA109D6CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:30:27 +0000
ROA not before: Fri 21 Nov 2025 03:51:25 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 399861
IP address blocks: 160.187.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280 (0x118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91651CF, serialNumber=AED8010DE4D23FF4D0F9005BAC925BDB7F3DF30A
Validity
Not Before: Nov 21 03:51:25 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a590f3-c11c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:c2:f0:7b:42:a5:0f:3c:81:2b:37:cf:8f:
03:5e:38:f4:e4:d3:d8:01:82:64:dd:be:9a:ac:1f:
bc:58:db:57:ba:2b:0b:17:48:38:87:be:0a:d0:1b:
c8:d6:ff:e8:2a:d7:5d:2b:ad:69:05:65:d1:7c:ff:
49:7c:ae:f2:a5:14:0e:f6:84:82:27:6a:5b:d9:1a:
58:1f:5e:cb:53:f1:f0:d5:e6:b4:c2:83:65:f4:3c:
59:df:32:2f:27:37:b7:10:a4:1f:df:44:65:a8:d2:
10:e3:aa:9c:fe:1f:dc:89:70:10:33:fd:59:e2:b1:
2c:00:a8:e9:fc:60:33:ee:11:30:5f:90:7f:fc:db:
ae:18:ae:14:b0:c9:a5:19:78:e5:2b:f4:30:c1:f3:
73:ff:4b:05:27:cf:35:5a:29:34:3a:5a:aa:74:8d:
fc:2b:a9:28:91:e0:c7:d6:d9:02:24:93:43:6b:c5:
9e:ff:99:3d:3c:c1:fb:d2:6c:ee:d0:00:a6:18:db:
17:bb:3c:c8:a6:07:7c:24:d9:9b:64:17:22:0c:5c:
e2:d1:af:de:ff:dd:ac:c7:96:c1:57:3b:2b:56:c7:
00:80:95:6d:b1:4c:a8:5a:2f:b9:4e:a6:f1:ee:03:
a6:7e:96:fb:19:6b:f9:17:34:a2:e3:59:53:72:fc:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A1:C7:78:FE:DD:39:04:36:E1:DC:7D:11:FC:80:7C:A4:20:C9:30
X509v3 Authority Key Identifier:
keyid:AE:D8:01:0D:E4:D2:3F:F4:D0:F9:00:5B:AC:92:5B:DB:7F:3D:F3:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/rtgBDeTSP_TQ-QBbrJJb23898wo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rtgBDeTSP_TQ-QBbrJJb23898wo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91651CF/2749C7BE86D711EF854DD47BC4F9AE02/029673283B9E11F0AA109D6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.114.0/23
Signature Algorithm: sha256WithRSAEncryption
49:07:85:23:62:e9:0d:55:26:10:ad:41:4a:b3:8b:95:d1:35:
22:b0:78:dd:23:65:1c:7b:56:07:24:f9:14:f8:d1:59:00:54:
f7:cf:78:4c:e0:6c:11:39:ec:87:7b:1d:67:76:c9:dd:64:4d:
ee:be:d0:41:bd:67:fc:c4:9f:72:33:58:d8:2d:ff:26:6d:a7:
40:f0:68:6c:d1:ca:6d:98:2d:f4:49:77:6d:e3:87:33:3c:11:
6d:d4:27:04:be:8e:f5:17:72:eb:a2:1c:2f:39:e3:af:09:0b:
31:39:7f:73:71:e7:ea:24:9a:aa:93:5d:b1:64:d1:13:c9:7f:
9a:03:da:e8:7e:11:f7:1f:48:30:d9:8d:f8:61:0f:f0:17:3b:
94:79:3b:20:8f:02:8f:4f:1c:43:15:df:48:95:63:7d:1e:44:
ae:26:04:a7:5c:be:13:aa:0f:9a:34:46:95:9b:f2:ed:2d:4f:
3e:9e:ce:14:20:c3:88:a5:e7:e8:ce:ee:e1:18:bd:eb:03:e1:
04:a0:09:73:c1:7b:70:df:dd:34:35:c3:ef:bb:0e:27:c4:f2:
c9:13:c0:30:a7:80:d9:90:73:85:44:22:ca:d7:fb:57:eb:e2:
fc:92:d0:81:b8:a0:6c:a5:76:fc:96:00:c3:86:47:b0:89:c6:
db:ea:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:42 2026 by rpki-client