
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/F9AAE6F8994011F097180C40C4F9AE02.roa
File: F9AAE6F8994011F097180C40C4F9AE02.roa (raw, json)
Hash identifier: +BAp+39366AUiOK5SmP/mdRqu6NWeoWLjWnOKT+SW/E=
Subject key identifier: 52:DC:F5:C1:05:1F:0F:78:40:3A:09:FB:F2:86:4C:25:09:7A:20:07
Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Certificate serial: 013F
Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/F9AAE6F8994011F097180C40C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:38:02 +0000
ROA not before: Wed 24 Sep 2025 12:21:19 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 147040
IP address blocks: 160.25.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:28:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 319 (0x13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Validity
Not Before: Sep 24 12:21:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a592ba-adfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:63:e7:83:49:8f:1a:79:91:82:6d:7a:20:
5c:e8:40:2a:5d:fc:3f:b1:58:6c:ca:70:cc:f3:c5:
04:f8:98:c6:d9:bf:c9:16:25:74:e9:36:63:b9:17:
42:ba:0b:3e:89:9f:9e:6f:1b:27:6b:26:87:75:8d:
ac:08:33:56:ff:ff:09:8d:08:56:73:a2:28:6c:50:
49:1c:ae:89:3a:6f:b0:1d:a6:34:49:cb:b1:6e:f5:
af:37:69:c5:aa:cd:9a:c2:3a:10:60:1e:2e:1f:08:
7b:5c:bc:22:06:e0:0a:3d:27:16:3f:1b:de:94:a6:
ad:65:e6:8f:b0:0c:1a:ea:17:c3:00:06:67:aa:99:
74:2f:59:a6:59:64:fb:6b:30:1b:61:07:e9:83:1f:
f9:0b:52:d9:67:99:72:b6:85:ed:2e:92:1b:05:64:
be:95:15:b0:89:54:a0:c3:13:1a:79:2b:25:00:77:
3d:99:12:48:76:21:30:dc:83:de:5f:e1:f0:10:3d:
1e:d4:9d:1b:0a:d9:2b:df:7f:48:6d:14:3a:f5:59:
49:7d:fd:e5:97:d1:fc:b1:c7:4d:1f:f3:5e:61:54:
47:4d:a1:f6:b2:25:5c:cd:6f:e9:c2:54:0e:ae:fc:
90:45:ce:d5:99:79:56:cf:d3:9a:fb:01:1a:8e:c5:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DC:F5:C1:05:1F:0F:78:40:3A:09:FB:F2:86:4C:25:09:7A:20:07
X509v3 Authority Key Identifier:
keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/F9AAE6F8994011F097180C40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.70.0/23
Signature Algorithm: sha256WithRSAEncryption
22:a9:08:56:db:b3:9a:90:4a:03:67:35:7c:a4:fe:b0:5b:cb:
c7:d3:be:d6:a7:ed:c6:7c:98:00:7f:9c:8a:8d:24:fb:40:a5:
e1:44:23:01:80:9f:d3:e8:ea:99:7d:40:c2:cc:48:ad:35:c5:
90:4f:37:7b:5d:e5:51:de:bf:2f:2b:2c:3e:21:10:6a:bc:58:
45:8c:e3:81:9b:c9:c9:cf:b5:c4:94:d7:bf:c4:fa:46:0b:58:
50:96:15:c2:33:31:a4:5f:2b:b2:1f:1a:67:1c:e6:b1:da:f9:
99:f3:d1:74:7f:af:f8:cd:41:ca:57:bb:63:ae:fa:c2:84:71:
86:74:77:bb:e1:42:44:da:75:b4:a6:af:38:4c:9c:31:26:f2:
c7:f1:7e:70:77:72:f8:10:d9:d7:db:89:dc:3f:34:42:79:83:
6f:d0:05:20:64:7f:a2:64:64:cc:82:f7:87:8a:9a:1e:8b:84:
2d:2c:29:50:b8:ce:45:d1:aa:35:f6:19:df:c1:99:a7:55:07:
a9:dd:a7:d8:30:b0:54:71:15:d0:fc:41:53:c1:52:7a:22:f2:
a2:7a:a2:7c:68:d2:53:e2:42:c9:e6:34:a2:96:fa:2d:e9:de:
a7:d7:eb:0e:92:40:ee:61:39:55:b8:98:da:9a:6d:13:8c:ff:
4b:52:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:29 2026 by rpki-client