
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/20A6C35C37AF11EF844EC638C4F9AE02.roa
File: 20A6C35C37AF11EF844EC638C4F9AE02.roa (raw, json)
Hash identifier: viM//8H5DSfhfHw8dOdgq6Dks9Sycd3bZEY4Fif7q2Q=
Subject key identifier: 02:09:D2:7C:C2:CF:21:A3:75:B0:12:3D:45:57:15:6D:50:7F:5D:B3
Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial: 0198
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/20A6C35C37AF11EF844EC638C4F9AE02.roa
Signing time: Fri 31 Jul 2026 05:53:42 +0000
ROA not before: Fri 31 Jul 2026 05:53:42 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137570
IP address blocks: 160.25.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Validity
Not Before: Jul 31 05:53:42 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6c3866-76ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:95:7d:32:e1:68:c0:08:24:f9:47:cc:08:
2e:9b:e2:81:08:8e:ea:ec:53:e1:be:d5:a2:8d:e0:
1f:c4:ee:8d:cc:58:31:09:f7:be:d8:e9:b5:15:d2:
65:65:37:5f:c7:16:e8:47:ac:5d:53:a1:c3:cd:92:
bd:ec:af:91:d6:84:bf:11:9f:92:a8:ee:1e:90:3b:
23:a8:30:5f:36:83:1d:b0:44:ca:92:d5:18:ab:d3:
dc:22:0f:c7:4a:6c:bf:6f:67:fe:b6:d3:6a:e2:2d:
5f:0c:0c:47:71:28:13:2d:50:e7:e4:19:1d:8d:39:
2b:17:59:e6:0a:61:7a:b7:ad:96:52:80:d0:78:35:
c7:58:a8:ca:04:42:05:ab:b9:cc:92:3e:f9:24:39:
ae:35:9c:18:db:59:b6:e8:fb:e7:39:19:20:e1:20:
87:ba:7d:9e:25:e4:97:65:0c:da:ec:3d:e3:78:7c:
86:7d:bd:62:00:01:60:d5:f0:39:58:4d:40:9f:0d:
4b:a3:da:f0:c0:93:c9:13:59:70:a9:5a:4b:8f:d4:
c2:3d:75:c1:a0:dc:cc:a8:12:6e:32:1e:a9:9a:b5:
82:7f:f9:72:5b:98:45:15:64:58:49:42:f1:d2:7b:
c8:71:d8:a1:a2:13:cd:4c:1a:d1:73:f8:c8:44:88:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:09:D2:7C:C2:CF:21:A3:75:B0:12:3D:45:57:15:6D:50:7F:5D:B3
X509v3 Authority Key Identifier:
keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/20A6C35C37AF11EF844EC638C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.42.0/24
Signature Algorithm: sha256WithRSAEncryption
91:35:05:6f:96:6d:7c:23:77:eb:ff:b8:5f:4e:cb:ac:82:ca:
01:3e:71:23:5a:5b:8a:00:5d:6e:49:e7:e0:65:5e:dd:f2:79:
21:9b:84:ce:a9:e9:9e:87:2f:15:12:b1:40:62:8f:73:bc:f0:
e1:77:c2:a0:29:9d:aa:6b:b5:1f:d8:77:1d:9e:6c:5e:36:f3:
83:44:51:85:07:aa:05:42:f4:a4:c1:fa:a7:b4:26:b2:d3:1e:
5a:24:c2:1b:5d:32:ba:e5:17:d1:9b:e2:2d:f5:b4:91:c1:62:
14:0a:e2:de:d9:04:f0:33:a7:01:19:52:77:55:12:c6:ee:db:
3a:ab:4f:50:02:61:71:9b:f0:7d:ad:49:85:1a:5c:16:02:74:
51:7d:ef:e0:74:d4:63:0a:ac:09:da:12:0f:77:de:2c:fc:61:
4c:cb:1a:f4:c2:18:7d:94:33:77:5e:fc:80:57:bb:c1:8a:8d:
6c:27:02:b2:76:07:19:0a:c2:f1:8e:a6:74:ac:fa:41:b0:21:
c2:36:fa:2e:19:45:92:4a:74:20:e2:a5:cf:3f:ac:fd:d6:8c:
19:c4:2c:0a:ac:1c:65:b9:b5:b9:3f:61:93:13:01:b3:23:a4:
21:58:9b:1d:0a:f8:55:d0:2a:e0:41:74:fc:c1:ca:cf:c8:f3:
93:a0:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 06:45:39 2026 by rpki-client