
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa
File: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (raw, json)
Hash identifier: 9L09hQIBaOVE5f616sgiqulORBkTSjHL+znxkwZEmL4=
Subject key identifier: BC:16:FA:82:EB:50:96:42:08:AC:3C:1B:57:C7:7E:5A:4D:4C:36:0F
Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Certificate serial: 018F
Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa
Signing time: Wed 01 Jul 2026 06:32:13 +0000
ROA not before: Wed 01 Jul 2026 06:32:13 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136030
IP address blocks: 160.22.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98
Validity
Not Before: Jul 1 06:32:13 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a44b46c-5ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:eb:65:0b:7a:2b:e7:df:cd:95:eb:f9:7a:
9b:10:e9:86:3e:19:30:26:37:b1:c2:e1:5f:79:6f:
0c:59:6a:aa:67:73:bd:ee:c4:f2:cf:eb:00:7a:78:
54:66:26:35:41:e5:09:c8:43:7f:2a:22:de:89:4c:
dd:41:e1:24:86:8f:02:4c:a6:5e:d3:4b:e7:9b:a9:
7c:e3:a4:a4:6e:11:7a:5e:81:2d:75:de:8c:91:b9:
82:40:79:2f:cc:78:fb:85:4e:b3:a2:7d:0b:d1:ed:
2b:a9:6a:96:09:ae:98:6f:52:25:c0:f7:09:06:6a:
22:72:13:c1:44:38:68:83:da:c6:04:7f:88:aa:7c:
0c:c6:ef:a4:ab:37:46:bb:9c:48:e5:53:1b:f9:3b:
ff:d3:97:45:ae:04:da:ba:40:9b:9e:7b:cd:a6:d3:
61:68:dd:82:34:5b:00:da:ba:62:ca:0d:d5:c6:30:
26:73:64:52:c2:dd:2c:94:af:bf:15:a0:d1:e1:ac:
5b:cb:a2:94:63:b4:dd:ee:d0:cd:21:46:b6:eb:53:
69:f0:e9:a9:23:0a:61:92:43:e3:55:ab:8a:df:a9:
54:52:3b:44:06:3c:91:6b:e1:36:f2:81:8a:9e:a4:
5e:1b:41:ca:eb:a0:3a:77:55:24:49:3f:89:5d:08:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:16:FA:82:EB:50:96:42:08:AC:3C:1B:57:C7:7E:5A:4D:4C:36:0F
X509v3 Authority Key Identifier:
keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.140.0/24
Signature Algorithm: sha256WithRSAEncryption
14:51:99:e6:09:41:f3:f4:70:93:c0:cd:6f:8d:52:63:0d:4c:
90:dc:a6:00:40:d2:b2:61:ca:27:4f:48:e6:7c:b7:78:41:49:
44:3f:50:a8:10:35:76:09:36:0e:1c:70:9c:31:f6:a4:92:bf:
55:66:00:f3:4b:0e:78:6c:f5:d5:29:94:39:bf:de:90:91:33:
02:40:14:ec:8e:63:e2:11:8e:f7:c6:a4:9e:d8:42:ad:39:1a:
4b:c9:2f:30:4a:f3:27:49:71:bc:76:33:4b:cf:0f:dc:46:c4:
e0:1a:bf:cc:a3:27:14:b7:be:5b:88:3b:34:bd:e2:05:82:49:
88:e5:14:63:2a:d1:20:6b:ef:06:23:8d:72:7d:c0:2e:93:76:
9b:2d:48:9e:f0:6f:29:55:2e:fb:e7:bf:31:d8:61:d9:5e:fd:
ef:4c:12:dc:03:38:7b:90:32:e3:40:aa:3b:da:e7:cc:77:bd:
db:bf:83:9e:a5:69:29:f6:4c:09:20:8b:08:82:36:4e:69:6f:
ba:fb:ff:e2:90:24:c0:8a:ae:75:82:51:06:a8:fa:53:e4:74:
74:fe:00:f3:44:4b:5d:1b:5f:ce:be:88:b0:38:10:5a:12:e3:
5e:67:cd:3e:5f:91:05:61:a8:38:9b:67:37:ac:b5:79:75:4e:
28:c3:85:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:57 2026 by rpki-client