
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa
File: 3117605AFF2E11F099836B6D89EE528E.roa (raw, json)
Hash identifier: 9SU96IyHt+q6dfn55IH1qHwjcN6QmVNgdXOAMwSq/nc=
Subject key identifier: 48:2C:EC:48:23:C6:F3:D2:AF:89:4B:D7:62:1E:DE:42:16:23:5F:D5
Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial: 015E
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa
Signing time: Mon 03 Aug 2026 06:55:56 +0000
ROA not before: Mon 03 Aug 2026 06:55:56 +0000
ROA not after: Wed 02 Dec 2026 00:00:00 +0000
asID: 153394
IP address blocks: 160.191.190.0/23 maxlen: 23
160.191.190.0/24 maxlen: 24
160.191.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Validity
Not Before: Aug 3 06:55:56 2026 GMT
Not After : Dec 2 00:00:00 2026 GMT
Subject: CN=6a703b7c-680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:95:f9:6a:36:7f:8f:8c:55:4b:91:43:55:9f:
91:aa:aa:81:af:d1:a5:79:d9:18:58:1b:6f:1a:42:
a3:0a:5c:f2:b7:f3:ff:53:0f:db:a0:db:65:0e:5b:
6e:cb:93:dd:64:04:04:4e:eb:87:0c:ab:0c:e7:87:
c5:3d:ff:a8:90:4c:83:cd:b0:50:eb:be:c7:c9:58:
98:4b:94:68:32:e0:6f:38:01:11:2c:c1:a9:23:5c:
f0:66:99:80:c0:88:77:8a:c3:da:08:c5:ae:91:b1:
da:88:72:0c:04:46:b4:6f:d3:41:db:79:63:7b:85:
12:83:41:b7:d8:14:8c:f3:53:97:e0:30:d6:7a:c3:
33:a8:8f:36:e3:2d:4d:18:80:4d:4f:82:fc:5f:a0:
af:2e:91:ba:26:6d:c8:44:34:67:0d:6a:39:80:08:
af:96:6c:d8:a1:3d:fa:1a:3f:30:fa:b2:30:53:08:
b1:e5:4f:03:09:b2:f1:cb:78:92:02:ef:bc:40:17:
82:6e:ea:ba:84:8c:25:97:a2:4e:de:14:09:11:a9:
3a:3a:34:7e:12:04:ab:8d:c2:d3:2a:90:1e:ee:52:
83:2e:b7:3d:c8:22:5c:2b:7b:c6:f9:61:87:e6:b2:
1b:a7:01:1f:0e:57:4c:f3:fa:69:ae:6f:b4:6c:34:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2C:EC:48:23:C6:F3:D2:AF:89:4B:D7:62:1E:DE:42:16:23:5F:D5
X509v3 Authority Key Identifier:
keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:e0:89:04:66:fe:ac:74:e5:53:14:71:b5:0b:80:70:08:2b:
8b:72:8c:81:5a:1e:d0:af:ab:99:9c:be:25:56:d6:e7:4b:bc:
9d:bf:c8:e9:7e:4e:d0:31:0c:ab:19:8e:91:b0:97:45:9b:8e:
fd:52:da:79:b3:01:1a:f8:63:c8:59:b6:11:de:50:57:71:1a:
89:1a:c5:02:86:28:0d:65:1d:99:cd:7e:be:c8:c9:0a:5c:b4:
03:0c:b3:6a:76:f2:5b:8e:c8:13:5a:bd:42:6f:8c:af:4b:a1:
71:df:87:19:a7:d0:07:32:30:b2:17:de:de:0e:cf:4e:30:ed:
e9:87:86:96:a8:e6:29:d7:89:fc:09:de:76:2e:12:c4:bc:1b:
f5:45:07:10:d6:5a:87:f2:97:a5:12:6c:7e:16:e1:05:05:95:
00:26:8d:05:6b:44:b5:ca:09:32:04:8b:de:17:11:cb:13:88:
90:c3:4c:5e:7c:ce:79:0e:74:d8:ad:72:67:fc:43:ea:e2:2f:
91:c4:c6:e4:d5:16:fb:fe:c8:7b:92:87:ce:79:ed:0e:3d:a1:
89:e0:f1:e0:1c:18:41:43:50:a6:43:6a:e1:ea:f4:d5:0c:4c:
35:a4:4a:da:8d:3b:8a:d1:8c:15:cf:ae:28:60:b3:4f:cc:8f:
c1:4f:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:31:17 2026 by rpki-client