
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/6DD5B8F4859111F1BBABB99591A30FBC.roa
File: 6DD5B8F4859111F1BBABB99591A30FBC.roa (raw, json)
Hash identifier: kkeNjRMXMW36689rl/JQ+ns23IBHi+og6rmo5ed0reo=
Subject key identifier: 59:B2:7A:2C:85:80:98:E0:46:1C:DA:B7:23:A2:72:32:AB:9D:1A:0C
Certificate issuer: /CN=A91EBA90/serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Certificate serial: 02
Authority key identifier: E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/6DD5B8F4859111F1BBABB99591A30FBC.roa
Signing time: Wed 22 Jul 2026 05:51:49 +0000
ROA not before: Wed 22 Jul 2026 05:51:48 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 132571
IP address blocks: 160.236.136.0/24 maxlen: 24
160.236.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBA90, serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Validity
Not Before: Jul 22 05:51:48 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a605a74-188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:4f:22:ac:09:53:2f:87:c9:39:19:52:6e:
f1:57:cb:05:4a:0a:29:88:3b:91:11:b8:26:89:d0:
87:49:7e:37:ed:f3:b6:6d:4b:9b:2c:4a:ad:ee:0a:
53:8a:48:1b:76:3a:69:56:ed:a2:60:e6:eb:77:bd:
74:92:6c:ff:ae:34:26:5e:cd:89:dc:29:27:cc:61:
7a:be:ca:1f:65:01:80:76:87:c8:25:7e:c5:fb:7e:
52:58:9c:6a:b7:37:5c:35:ef:71:a7:0a:3a:ac:d7:
48:d1:dc:52:41:0f:b1:07:e7:5f:e6:71:14:de:1f:
e1:ba:a3:70:25:3c:bd:cc:17:cc:a4:7f:6b:8f:e6:
ab:d6:5f:75:71:7e:c1:7a:f7:ce:04:ad:e6:fa:e9:
ab:52:12:23:da:82:b4:ea:f7:a0:8f:a9:45:91:02:
32:b9:f7:25:04:51:4f:a9:0a:32:59:66:bb:89:b3:
b5:fc:05:27:79:ca:c3:7f:16:7c:e3:10:31:4b:ad:
3d:cb:89:95:de:eb:5b:b4:56:a4:3d:27:07:c7:8c:
f2:56:7b:51:f6:19:57:a0:f7:c4:67:30:6c:fd:23:
66:7d:25:4d:96:b0:e4:03:14:b8:ec:4d:01:75:24:
0d:77:cb:9d:e8:a8:50:b0:a8:7f:a3:37:52:98:3e:
4a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:7A:2C:85:80:98:E0:46:1C:DA:B7:23:A2:72:32:AB:9D:1A:0C
X509v3 Authority Key Identifier:
keyid:E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/6DD5B8F4859111F1BBABB99591A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.236.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:7e:f4:03:6e:92:ea:cc:d7:85:1c:ea:a0:e7:5e:bd:9b:1e:
90:e0:d6:01:60:b4:97:4e:b3:30:33:d9:9d:b6:0c:84:b7:96:
7f:c4:e9:b3:5c:02:b6:1c:61:c5:9d:52:f0:8f:ef:04:69:2a:
51:22:ad:b0:39:3a:41:58:bb:22:56:00:a1:f4:eb:bc:3f:11:
b0:71:40:7e:37:d9:df:94:0a:02:65:4d:79:90:37:ee:d9:38:
7d:f2:15:d1:8b:8f:bf:46:79:d8:92:2c:af:ae:40:93:42:6a:
bd:d6:2f:53:f0:24:d2:e7:09:05:19:30:f8:76:86:cc:41:3a:
09:7f:a3:5d:cb:67:6f:c0:a0:c1:33:7e:e8:6d:9f:1f:0b:cc:
f2:7e:11:a8:a9:59:aa:9b:82:17:53:2d:ed:e4:79:17:e3:95:
b9:f9:41:0e:04:58:4e:75:d3:c1:e7:2f:fb:d7:ad:1c:81:51:
95:de:b2:d7:52:d5:f8:3d:83:26:ae:eb:6c:85:42:58:e2:26:
bc:0a:9c:e4:e8:a9:d6:8f:10:30:e6:0c:e7:29:cd:18:d5:8e:
e7:8a:cf:4a:39:14:70:e4:f2:36:e8:8a:5e:89:59:69:22:88:
dc:3e:c5:d5:25:d3:8f:05:6d:5f:6b:3c:f4:68:71:52:44:51:
7c:96:63:c4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QkE5MDExMC8GA1UEBRMoRTQ4QkY1MkZCQzJGNTNERDMwNzhCQzk0QTNCQkFEMEEz
MTI2RjNDNTAeFw0yNjA3MjIwNTUxNDhaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjA1YTc0LTE4OGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCSE08irAlTL4fJORlSbvFXywVKCimIO5ERuCaJ0IdJfjft87ZtS5ssSq3uClOK
SBt2OmlW7aJg5ut3vXSSbP+uNCZezYncKSfMYXq+yh9lAYB2h8glfsX7flJYnGq3
N1w173GnCjqs10jR3FJBD7EH51/mcRTeH+G6o3AlPL3MF8ykf2uP5qvWX3VxfsF6
984Ereb66atSEiPagrTq96CPqUWRAjK59yUEUU+pCjJZZruJs7X8BSd5ysN/Fnzj
EDFLrT3LiZXe61u0VqQ9JwfHjPJWe1H2GVeg98RnMGz9I2Z9JU2WsOQDFLjsTQF1
JA13y53oqFCwqH+jN1KYPkr9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUWbJ6LIWA
mOBGHNq3I6JyMqudGgwwHwYDVR0jBBgwFoAU5Iv1L7wvU90weLyUo7utCjEm88Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTkwL0EyMjg2M0RDODU5
MDExRjFBQjZDQTE5MjkxQTMwRkJDLzVJdjFMN3d2VTkwd2VMeVVvN3V0Q2pFbTg4
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNUl2MUw3d3ZVOTB3ZUx5VW83dXRDakVtODhVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE5MC9BMjI4NjNEQzg1OTAxMUYxQUI2Q0ExOTI5MUEzMEZCQy82REQ1QjhGNDg1
OTExMUYxQkJBQkI5OTU5MUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGg7IgwDQYJKoZIhvcNAQELBQADggEBAGt+9ANukurM14Uc6qDnXr2b
HpDg1gFgtJdOszAz2Z22DIS3ln/E6bNcArYcYcWdUvCP7wRpKlEirbA5OkFYuyJW
AKH067w/EbBxQH432d+UCgJlTXmQN+7ZOH3yFdGLj79GediSLK+uQJNCar3WL1Pw
JNLnCQUZMPh2hsxBOgl/o13LZ2/AoMEzfuhtnx8LzPJ+EaipWaqbghdTLe3keRfj
lbn5QQ4EWE5108HnL/vXrRyBUZXestdS1fg9gyau62yFQljiJrwKnOToqdaPEDDm
DOcpzRjVjueKz0o5FHDk8jboil6JWWkiiNw+xdUl048FbV9rPPRocVJEUXyWY8Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:47 2026 by rpki-client