
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa
File: EAF1E48478FA11EF9043060AC4F9AE02.roa (raw, json)
Hash identifier: 3r7oWvZZSCAzRuaEEZfRdRU+m7LuuIxoldkPQaUgKhQ=
Subject key identifier: 00:7C:30:B8:76:4F:B0:26:A7:91:70:9A:5D:EF:D9:65:1A:EC:1C:C0
Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Certificate serial: 011E
Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:03:34 +0000
ROA not before: Tue 25 Nov 2025 03:51:14 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150341
IP address blocks: 160.187.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Validity
Not Before: Nov 25 03:51:14 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a598b6-35f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:00:d3:33:71:91:60:c9:09:77:5f:72:2a:a6:
cb:c3:62:50:0d:a2:b5:62:2b:0e:89:f6:61:7e:a3:
ad:9e:e8:9a:2c:ee:3b:99:42:53:45:aa:fb:02:da:
51:b8:f3:1c:4f:7f:28:13:ab:99:36:3e:e0:48:b4:
34:1b:f4:37:e6:45:59:51:dc:92:c4:41:4e:08:9d:
b6:e5:e8:1a:f3:7f:85:90:b1:29:3d:65:b0:c8:e3:
bf:b9:df:49:af:ce:3e:d8:43:e1:fc:6e:6d:10:cf:
e9:f0:6e:d5:3d:da:fd:34:ad:ab:f0:55:1f:d8:7d:
f2:02:96:cd:b9:48:6f:cf:f8:27:c1:52:98:e0:37:
ec:c5:0a:87:1b:9a:bc:4c:5a:ee:40:d2:ed:4e:8e:
20:c8:9b:f1:7f:88:26:96:a4:5f:24:6d:5a:70:d0:
d1:c7:dc:22:58:57:e1:f6:74:21:9a:68:15:37:d3:
2b:69:b7:14:b3:fd:78:15:75:f4:9c:f5:74:8a:b2:
8f:bc:ec:6b:cb:bc:bb:1d:d8:69:bc:a7:9e:f3:7d:
5b:9e:8f:d2:ab:86:16:bc:fc:d5:3b:4a:95:d8:ad:
c6:8b:28:1e:0b:32:55:ab:7d:26:69:8e:b5:05:7d:
38:7d:ab:cf:d9:46:b5:4a:61:61:0d:c9:41:62:ce:
f1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7C:30:B8:76:4F:B0:26:A7:91:70:9A:5D:EF:D9:65:1A:EC:1C:C0
X509v3 Authority Key Identifier:
keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.187.34.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:32:ab:fb:02:4a:38:c2:bb:e1:b4:b2:43:b4:9d:e5:d0:46:
92:2e:47:5e:83:08:7e:99:5a:a1:5d:78:15:b3:1c:2e:65:7a:
b0:fd:0d:78:cd:df:36:13:9c:5b:89:06:76:1e:f7:ee:99:54:
23:01:7e:fc:bf:ce:e8:02:11:87:00:33:9a:b1:81:3e:29:d7:
e3:3c:8a:f2:0c:7b:17:e1:51:fc:2e:a9:ee:cc:0c:82:a1:0e:
18:cf:77:5c:2b:1c:ed:89:53:05:02:cc:f1:bb:4e:66:8e:be:
49:d9:5f:75:38:f6:78:d7:8b:57:5b:99:e0:08:b9:04:4b:ba:
e7:a5:84:57:06:3d:89:91:47:85:ab:fb:22:0c:7f:19:48:38:
3d:3c:d5:07:a7:e7:0c:86:68:d7:49:17:4e:dc:86:8a:f4:10:
de:90:0c:ea:7b:ef:a8:42:18:1e:7c:a1:6a:fe:2d:a9:83:7c:
36:a1:ec:8e:2e:3f:53:c9:e6:c4:a1:8d:0f:3d:06:5f:2b:3b:
14:4a:f3:df:1d:23:76:53:1e:19:42:21:81:b3:1e:af:75:a5:
bc:b1:16:0a:8e:0b:f6:2e:4e:bf:d6:d9:97:3c:ce:4c:dd:47:
71:fa:77:67:16:4d:44:f9:f0:72:ea:3e:cf:ed:1b:fc:f7:d5:
a4:bf:4d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:37:33 2026 by rpki-client