
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
File: 2117AE6E37AF11EF844EC638C4F9AE02.roa (raw, json)
Hash identifier: OoFaMSSRiul6Qi62vK8HBSWETfbtSpuzZaFSM3QatEI=
Subject key identifier: 4E:2A:F3:71:F3:03:FC:51:79:86:3D:65:84:EC:8F:D3:12:21:9C:5C
Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial: 0199
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
Signing time: Fri 31 Jul 2026 05:53:45 +0000
ROA not before: Fri 31 Jul 2026 05:53:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153047
IP address blocks: 160.25.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Validity
Not Before: Jul 31 05:53:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6c3869-691d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:14:21:7b:e6:e8:bd:ed:bb:03:5f:16:3a:
37:48:f1:2d:2b:28:fa:17:9f:6f:a7:ac:25:eb:e7:
7d:00:d2:fa:f9:1a:0f:de:02:8c:c5:0b:16:d2:98:
b7:5e:89:58:65:db:c7:61:36:0e:73:d8:59:ee:c5:
5a:fc:d4:47:32:54:2e:5b:18:db:3f:f6:4b:62:b7:
13:2c:4f:c8:eb:a6:7a:87:b9:a7:c2:41:0f:21:92:
4f:8f:19:db:23:a4:53:d6:da:09:e6:bd:69:9d:56:
8e:17:8b:8a:66:59:80:e0:cd:0d:a6:ea:dd:68:bc:
87:22:0a:92:c9:76:42:e5:87:ac:7f:38:4c:ec:7d:
9e:7c:48:be:73:55:cc:0e:f6:99:f7:0d:11:94:a8:
e0:c2:a4:10:bb:ea:a0:47:bc:e6:68:53:fd:ef:a8:
99:29:3b:91:8d:a2:f0:2a:40:73:4f:0a:f3:71:7e:
16:f2:04:a5:2e:70:e2:c4:7b:7b:85:44:69:ce:c5:
9c:a0:d4:d0:3d:52:ad:ee:f4:31:cc:40:2d:c7:bd:
a1:28:31:1f:9a:ca:71:2e:b8:70:d3:ae:e8:ff:bf:
05:98:e6:43:c3:22:d1:22:f0:c5:2f:9d:92:d6:ad:
06:95:1f:8e:54:36:0d:19:d5:1e:c4:4b:fe:47:3c:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:F3:71:F3:03:FC:51:79:86:3D:65:84:EC:8F:D3:12:21:9C:5C
X509v3 Authority Key Identifier:
keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.43.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:4f:0d:71:18:d5:04:92:ed:42:be:b6:c7:ca:ec:64:d5:4f:
6a:57:ab:d2:97:83:44:57:4b:6c:af:71:8a:c8:65:bd:57:44:
47:a4:ae:33:7b:81:37:da:1e:39:a1:f0:08:fa:c2:4c:86:b7:
c1:25:b1:ad:f8:ec:ad:b4:14:c4:5d:01:c1:07:fd:00:b1:b8:
ef:25:f1:ba:f4:c8:0b:02:d8:dc:71:03:d6:1f:79:b1:d7:ae:
bb:fb:09:3f:0c:5f:c1:d2:cf:c2:d2:94:9f:bb:fb:fc:35:f4:
94:56:98:10:82:a6:1c:8d:70:75:de:d8:2c:96:53:a6:4a:b0:
d0:f7:69:b9:74:df:cd:20:d6:9a:60:de:ee:17:67:06:90:d5:
2c:0b:b6:74:a6:12:70:e0:69:f7:9f:12:a0:0a:5a:60:b8:2d:
fe:73:60:25:3f:15:68:0d:c7:3e:6e:72:0d:1c:2b:01:a0:b4:
24:ab:8f:4e:44:2e:d3:9e:85:e5:68:e4:4d:07:66:4f:fb:fe:
19:66:42:1e:87:c0:2a:c5:f9:0c:2b:75:34:7b:f4:ca:2c:9d:
07:32:74:77:09:1d:7e:61:06:81:1a:a2:74:c5:73:56:f0:04:
6a:49:b9:86:b2:b3:c2:f9:36:6e:f6:67:36:f4:31:3a:3d:25:
c8:d2:7a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:09:32 2026 by rpki-client