
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
File: C163B1881A4711EDA547FE24C4F9AE02.roa (raw, json)
Hash identifier: FKa006I1OQB4VPFjbnDF1HU7oaEYICpfvh1YRrAV7BQ=
Subject key identifier: F8:00:79:4F:DB:39:B8:92:D3:60:06:3E:22:25:46:9D:B7:D5:39:B8
Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial: 15B0
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
Signing time: Tue 28 Jul 2026 16:22:22 +0000
ROA not before: Tue 28 Jul 2026 16:22:22 +0000
ROA not after: Sat 28 Nov 2026 00:00:00 +0000
asID: 9988
IP address blocks: 136.228.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 15:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5552 (0x15b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Validity
Not Before: Jul 28 16:22:22 2026 GMT
Not After : Nov 28 00:00:00 2026 GMT
Subject: CN=6a68d73e-6a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a1:04:f5:29:41:9b:35:34:83:02:0b:e2:d2:
a7:c6:27:67:a3:21:ad:d2:a3:af:38:05:b4:05:e5:
54:85:63:9e:da:78:68:12:ab:ab:53:0c:2c:7e:cc:
95:15:e5:16:f9:a5:f5:69:77:b5:2c:e5:45:d5:44:
1e:dc:e2:e3:0e:f3:15:41:2d:90:74:ac:c5:9b:38:
c2:90:2c:0b:45:34:95:52:ef:cb:63:c3:4f:f7:4a:
32:d5:a7:df:33:92:bd:21:61:07:fc:41:d3:7e:3a:
e7:cb:5c:7b:4b:71:63:9c:fe:66:d6:95:66:28:fb:
30:10:1d:e4:a5:d6:f7:57:32:76:03:4c:9b:49:8d:
4b:b1:5c:8c:30:65:3c:8f:cd:5e:3a:76:3f:a7:64:
ec:1b:e5:05:ed:11:bf:87:06:87:fa:8d:91:7f:d7:
9e:50:e1:46:dd:0a:2e:fa:24:52:4c:a4:1d:0b:8f:
f8:a3:a5:b9:27:e8:3a:dd:fe:1d:c7:36:be:da:88:
5a:63:20:16:ea:6a:11:4c:28:7d:b7:79:eb:17:7c:
79:c2:ae:55:58:18:42:01:20:81:53:b9:2d:43:55:
32:07:8e:1b:8f:57:2e:62:bf:17:d5:66:06:df:e7:
7d:b1:53:e6:d4:dc:9d:e9:4c:fd:84:bc:63:4a:be:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:00:79:4F:DB:39:B8:92:D3:60:06:3E:22:25:46:9D:B7:D5:39:B8
X509v3 Authority Key Identifier:
keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
136.228.160.0/20
Signature Algorithm: sha256WithRSAEncryption
08:d0:60:97:05:bf:e0:e8:74:c8:f2:87:02:92:af:bd:c5:5c:
f3:49:58:bb:5f:94:d2:68:12:0c:6d:b4:0a:ce:fd:27:99:3c:
75:78:20:f5:25:48:be:38:d2:95:23:f9:10:a4:e1:5d:d1:a7:
5f:20:84:64:ed:36:26:f6:fa:6e:90:57:a7:6c:43:d4:a5:a3:
18:27:d4:6c:7b:be:cd:81:d8:63:f5:56:de:48:15:fc:82:d3:
b3:ff:81:52:e3:50:c9:20:cd:22:b7:7a:2f:33:de:10:32:18:
8c:db:16:36:10:64:aa:1c:bb:6c:2a:b2:5a:cd:eb:2a:57:ea:
1f:a5:b0:22:a5:3b:a8:47:8f:18:c9:e6:2a:cf:4d:24:61:b1:
84:3d:9c:61:c3:08:d4:d6:27:80:b8:ab:98:0b:db:99:c6:0b:
56:1a:6c:f5:ca:0c:d9:4c:93:39:b1:09:9b:ca:e1:9c:73:f4:
48:73:99:16:ee:7b:e7:cf:28:38:43:3b:d6:56:78:fa:70:91:
1a:7a:c3:b8:fc:33:45:ec:f0:25:58:cf:06:8a:d6:64:f0:48:
21:3f:36:1b:38:b3:36:98:45:da:08:e6:84:cb:7e:06:00:7a:
4f:ab:92:f4:d6:09:38:93:72:bb:13:0d:9d:b9:58:eb:4a:d3:
da:e7:8c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:47:15 2026 by rpki-client