
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa
File: 097951DC271E11EFA1884C2EC4F9AE02.roa (raw, json)
Hash identifier: wfWPCJF64COMQ4+GFRDWNSHHIcvg9J+oSNDdFL1r5Eg=
Subject key identifier: B9:ED:54:DC:33:5A:AB:03:A5:AD:C7:64:70:2E:BC:00:2F:CD:74:8A
Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial: 0150
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:18:58 +0000
ROA not before: Wed 25 Jun 2025 05:39:28 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152906
IP address blocks: 160.22.104.0/23 maxlen: 23
160.22.104.0/24 maxlen: 24
160.22.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 04:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Validity
Not Before: Jun 25 05:39:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a58e42-9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:2c:20:3b:c1:6d:02:0b:ac:09:66:41:9e:
f3:bc:c0:1d:a7:21:07:7e:b0:c8:5c:82:67:b8:ea:
47:87:9e:81:21:b9:5d:d2:bb:0e:0f:0a:08:e0:ad:
92:ae:8b:01:a5:99:1b:b4:1a:85:f3:11:0e:8d:6d:
bd:89:58:b1:c7:e7:37:ef:b6:6b:6d:df:39:2b:b3:
13:9b:e2:b7:4a:cc:17:30:3a:c4:e2:8d:87:04:98:
fc:b9:3f:46:33:67:55:f5:85:4c:5c:6b:28:8f:83:
08:dc:0f:21:a2:a2:00:5d:80:d7:2a:9e:64:e8:19:
0d:02:35:a7:93:70:3c:14:b7:97:e6:06:63:61:f5:
27:b8:43:16:a1:e5:3d:50:d1:9a:18:67:fc:ca:d3:
26:96:21:80:37:35:d8:fd:cc:56:51:2c:74:14:f1:
bd:85:b2:62:c3:82:2e:74:3e:95:b8:22:94:72:e0:
8a:04:fe:11:55:79:f6:9a:3a:13:a7:ab:ff:87:39:
7c:02:40:d0:50:fd:53:8d:f8:22:c2:0a:b0:63:36:
e0:55:bc:22:cf:cd:3c:e4:ee:2c:6b:11:fb:2b:63:
4a:30:78:ac:ba:8b:18:e9:61:bf:38:5c:61:58:80:
fe:8a:c0:48:b3:c1:f6:c5:07:6c:41:fe:d5:0c:0b:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:ED:54:DC:33:5A:AB:03:A5:AD:C7:64:70:2E:BC:00:2F:CD:74:8A
X509v3 Authority Key Identifier:
keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.22.104.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b0:e9:3b:81:6a:bf:e2:90:7d:5a:c2:11:7a:1e:53:23:21:
7a:71:d6:51:e7:38:1c:99:99:77:1d:ff:ad:17:bd:fa:51:94:
63:49:b6:0e:6a:03:73:43:86:06:fb:cd:86:11:d0:ce:3a:ba:
46:bc:af:ca:26:6e:93:58:4b:2a:33:3c:0f:c9:09:d7:3a:dc:
86:4d:2f:88:0f:70:1b:cb:d6:fe:5f:18:46:4f:8d:58:e6:ab:
81:ab:a3:c1:f8:38:08:7a:e8:7c:f8:64:79:03:a5:1c:9e:94:
87:00:c8:02:75:bd:14:79:7a:6e:be:94:77:7e:8c:db:f2:e7:
f7:c8:1a:80:bf:a8:ea:17:09:13:e2:80:a3:c8:1d:47:83:22:
93:9f:ae:4e:64:81:7f:79:1b:46:79:0b:89:6d:40:3e:86:9f:
d3:ba:26:ae:0c:4f:b4:f8:e2:9c:55:da:b7:ce:a8:76:3d:37:
87:c9:6d:07:75:b4:02:2b:f1:be:02:5c:f6:6f:64:87:21:d1:
32:d2:98:59:a9:c4:e8:8c:f9:8a:b5:68:4c:0a:d6:ae:22:3e:
da:36:63:26:c4:8f:fa:4e:a0:42:69:2f:6b:d8:80:9a:38:a5:
f1:92:98:61:4d:51:18:90:ae:19:fd:d5:76:62:9b:32:e0:d2:
2a:cc:89:d9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG
OTQ2OEQ5NUEwHhcNMjUwNjI1MDUzOTI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGU0Mi05ODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLEsIDvBbQILrAlmQZ7zvMAdpyEHfrDIXIJnuOpHh56BIbld0rsODwoI4K2S
rosBpZkbtBqF8xEOjW29iVixx+c377Zrbd85K7MTm+K3SswXMDrE4o2HBJj8uT9G
M2dV9YVMXGsoj4MI3A8hoqIAXYDXKp5k6BkNAjWnk3A8FLeX5gZjYfUnuEMWoeU9
UNGaGGf8ytMmliGANzXY/cxWUSx0FPG9hbJiw4IudD6VuCKUcuCKBP4RVXn2mjoT
p6v/hzl8AkDQUP1TjfgiwgqwYzbgVbwiz8085O4saxH7K2NKMHisuosY6WG/OFxh
WID+isBIs8H2xQdsQf7VDAseCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLntVNwz
WqsDpa3HZHAuvAAvzXSKMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2
RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjgzREMvOTlDNzQ4ODgyNkVEMTFFRkI0QzlCQTI4QzRGOUFFMDIvMDk3OTUxREMy
NzFFMTFFRkExODg0QzJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBZoMA0GCSqGSIb3DQEBCwUAA4IBAQAZsOk7gWq/4pB9WsIReh5T
IyF6cdZR5zgcmZl3Hf+tF736UZRjSbYOagNzQ4YG+82GEdDOOrpGvK/KJm6TWEsq
MzwPyQnXOtyGTS+ID3Aby9b+XxhGT41Y5quBq6PB+DgIeuh8+GR5A6UcnpSHAMgC
db0UeXpuvpR3fozb8uf3yBqAv6jqFwkT4oCjyB1HgyKTn65OZIF/eRtGeQuJbUA+
hp/TuiauDE+0+OKcVdq3zqh2PTeHyW0HdbQCK/G+Alz2b2SHIdEy0phZqcTojPmK
tWhMCtauIj7aNmMmxI/6TqBCaS9r2ICaOKXxkphhTVEYkK4Z/dV2Ypsy4NIqzInZ
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:15 2026 by rpki-client