
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
File: AB34787C867A11F1A5C6553363A30FBC.roa (raw, json)
Hash identifier: d5/kWUy87mkaTeF5YTSwbd9xp4LxN4FIxDcjSxAFokw=
Subject key identifier: 4B:F6:E3:D8:5A:99:DE:F2:14:0E:77:83:81:75:83:FC:F7:A2:BD:48
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 6CFF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
Signing time: Thu 23 Jul 2026 09:41:24 +0000
ROA not before: Thu 23 Jul 2026 09:41:24 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135999
IP address blocks: 45.120.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27903 (0x6cff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Jul 23 09:41:24 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a61e1c4-a553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:49:36:5e:6d:31:72:31:46:82:d6:b3:fc:
39:ea:46:c9:78:7f:97:b8:8d:bd:f7:78:f0:da:77:
6a:d6:ad:ec:c3:1a:63:ff:ff:7a:2f:04:b6:0e:d4:
f5:d3:e1:c9:16:56:eb:10:61:c3:7d:76:96:cf:37:
77:8a:79:9e:aa:7b:36:e0:a3:af:ec:c7:d7:01:cc:
35:3a:cb:98:7b:c9:2f:6c:81:37:df:71:27:55:09:
ab:e0:25:58:e2:9b:d5:45:ef:70:a4:63:2b:17:1d:
eb:0a:20:83:f2:9f:7b:fa:62:40:b7:6d:4e:1a:ee:
84:a2:14:0e:58:f2:0c:44:c9:9c:08:34:5e:69:95:
0f:c2:28:1c:fd:b8:b5:bd:12:c4:11:e0:fa:80:95:
20:65:78:81:a1:f1:37:35:9b:f7:30:f3:76:7d:50:
41:6f:06:9c:1b:e1:64:e8:04:60:fe:fa:e3:72:98:
38:d1:96:4c:3e:09:21:be:8b:74:e6:52:3e:d0:58:
08:bb:11:f0:46:df:9c:c5:8e:bf:d3:33:df:d7:83:
27:92:da:e4:28:a4:ea:a8:1d:bc:44:1c:2f:cc:0b:
d2:bf:fb:1e:f8:72:ed:db:5a:0d:5c:cf:02:09:4e:
a5:0d:30:f0:58:70:5a:48:a8:9a:d5:fd:bf:e0:68:
f1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F6:E3:D8:5A:99:DE:F2:14:0E:77:83:81:75:83:FC:F7:A2:BD:48
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AB34787C867A11F1A5C6553363A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
45.120.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:73:cb:f4:af:8d:39:d6:cf:4f:8f:43:b9:29:d4:e3:da:29:
9c:c3:69:2f:4a:06:e5:b4:4d:85:ea:17:3d:11:6e:21:a4:c4:
28:88:56:d0:ff:4c:44:cc:8a:0d:dc:8a:39:ff:fc:84:63:a7:
73:80:e9:1e:1e:04:75:a3:43:39:5a:b7:22:a6:43:22:5d:cc:
7b:78:08:26:27:2a:37:d8:31:16:52:e6:41:cf:bb:4c:43:a5:
ae:d2:0c:da:23:63:60:cf:d5:53:77:a8:e0:8b:7d:62:75:49:
43:02:f5:98:fd:38:e0:15:be:5b:ac:62:f9:6b:95:c6:39:a4:
b8:7b:c7:b5:c2:1e:dc:13:a3:e6:be:b6:af:e4:16:52:8a:72:
06:a6:ae:35:f9:85:78:5f:d5:b7:64:14:07:16:dc:04:15:7b:
27:b1:6e:3d:ab:59:bc:89:b6:43:12:67:46:26:e6:dd:66:6f:
9a:b3:94:cc:54:4a:55:0c:99:d4:dc:ed:b8:36:23:66:82:e0:
08:2c:0b:74:b7:fa:c1:b7:da:46:f2:00:ac:9d:9a:c1:4c:b2:
86:14:88:4d:47:57:33:0f:f8:11:1d:4e:38:a7:98:8d:ae:30:
bb:3f:ff:3e:dc:a9:fe:5d:70:a4:b8:b2:ff:65:4b:d5:10:a1:
69:3f:f9:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICbP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYwNzIzMDk0MTI0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYxZTFjNC1hNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+VJNl5tMXIxRoLWs/w56kbJeH+XuI2993jw2ndq1q3swxpj//96LwS2DtT1
0+HJFlbrEGHDfXaWzzd3inmeqns24KOv7MfXAcw1OsuYe8kvbIE333EnVQmr4CVY
4pvVRe9wpGMrFx3rCiCD8p97+mJAt21OGu6EohQOWPIMRMmcCDReaZUPwigc/bi1
vRLEEeD6gJUgZXiBofE3NZv3MPN2fVBBbwacG+Fk6ARg/vrjcpg40ZZMPgkhvot0
5lI+0FgIuxHwRt+cxY6/0zPf14MnktrkKKTqqB28RBwvzAvSv/se+HLt21oNXM8C
CU6lDTDwWHBaSKia1f2/4GjxPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEv249ha
md7yFA53g4F1g/z3or1IMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUIzNDc4N0M4
NjdBMTFGMUE1QzY1NTMzNjNBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQALXjhMA0GCSqGSIb3DQEBCwUAA4IBAQAtc8v0r4051s9Pj0O5KdTj
2imcw2kvSgbltE2F6hc9EW4hpMQoiFbQ/0xEzIoN3Io5//yEY6dzgOkeHgR1o0M5
WrcipkMiXcx7eAgmJyo32DEWUuZBz7tMQ6Wu0gzaI2Ngz9VTd6jgi31idUlDAvWY
/TjgFb5brGL5a5XGOaS4e8e1wh7cE6Pmvrav5BZSinIGpq41+YV4X9W3ZBQHFtwE
FXsnsW49q1m8ibZDEmdGJubdZm+as5TMVEpVDJnU3O24NiNmguAILAt0t/rBt9pG
8gCsnZrBTLKGFIhNR1czD/gRHU44p5iNrjC7P/8+3Kn+XXCkuLL/ZUvVEKFpP/mh
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:37 2026 by rpki-client