
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/17782970808311EFBB9C2A46C4F9AE02.roa
File: 17782970808311EFBB9C2A46C4F9AE02.roa (raw, json)
Hash identifier: 7TZMrJ7cU5AnQKT56JZoo3GclFGMSMDdP1Hrz561DNM=
Subject key identifier: DA:9E:91:29:AA:55:C1:6E:A5:F1:0F:62:5C:30:1F:02:C0:70:44:E4
Certificate issuer: /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial: 0119
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/17782970808311EFBB9C2A46C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:02:21 +0000
ROA not before: Tue 15 Jul 2025 06:43:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153055
IP address blocks: 160.25.94.0/23 maxlen: 23
160.25.94.0/24 maxlen: 24
160.25.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Validity
Not Before: Jul 15 06:43:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58a5d-44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:e5:10:82:27:82:ee:a8:82:d1:30:ac:48:
d8:85:f8:14:3a:13:7c:45:4d:ba:0d:1b:8d:0b:50:
c7:5c:6e:8f:bd:0e:88:3c:bc:48:cd:09:ee:c3:cb:
28:19:b0:2b:81:28:32:ba:61:79:ed:b8:56:72:a9:
f3:bf:90:33:8b:35:ee:02:e9:cf:cf:84:ed:02:ad:
a4:c1:8e:95:0a:fc:3a:dc:f4:f8:69:ab:a4:17:d8:
22:bf:2f:39:71:ad:e3:36:be:ca:74:52:2c:94:53:
9b:6e:f6:4f:31:88:d0:21:09:31:bc:01:56:53:d5:
88:5e:7b:81:11:40:2c:62:f6:e6:ed:19:53:28:e2:
f8:e7:ec:0f:d6:99:cc:9d:22:58:97:bd:f7:30:92:
f9:26:df:6b:b1:59:3a:46:86:84:5c:03:e0:ff:bf:
da:74:00:84:12:b6:6f:36:a2:56:56:81:1f:3e:27:
53:6f:31:fc:b9:6b:4f:0d:9d:bc:83:73:ca:73:08:
88:11:23:5a:f7:a5:81:92:ac:f7:a5:25:9f:77:e0:
ad:6a:1e:7b:39:23:1a:61:6e:67:90:d8:af:47:d3:
6a:b6:84:42:c6:06:e5:13:fd:f8:e9:3f:bf:5a:89:
22:09:66:54:d8:27:24:cf:99:d0:6e:92:5c:80:c4:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9E:91:29:AA:55:C1:6E:A5:F1:0F:62:5C:30:1F:02:C0:70:44:E4
X509v3 Authority Key Identifier:
keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/17782970808311EFBB9C2A46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.94.0/23
Signature Algorithm: sha256WithRSAEncryption
23:c6:7d:47:64:9a:3e:59:49:a0:d9:83:6a:95:d8:31:39:f9:
dd:ef:b0:f3:6e:b3:dd:46:e1:e6:c9:d6:22:d2:87:ee:8e:15:
e8:af:af:0a:b3:52:42:38:e3:ec:93:ef:ab:01:1f:e2:4e:5e:
46:a9:be:04:5a:06:61:e2:77:fa:56:56:01:1e:a0:ec:5e:db:
3e:a4:b8:fe:97:51:a0:f8:cb:18:df:1f:7f:3d:c4:b3:29:0e:
06:37:25:9a:8f:9a:6a:a1:7e:64:b1:4a:0e:c7:7e:46:75:8a:
80:dc:90:54:11:40:97:48:c3:73:c4:c4:0f:c2:d5:b7:c5:d3:
2c:8f:fa:98:83:16:50:62:f5:6b:ed:77:13:02:08:f1:8b:cc:
3e:bb:4b:04:7a:c7:c2:61:2f:41:ed:74:92:e3:b7:32:57:fc:
be:00:7a:0e:bf:12:16:5d:01:06:db:65:17:08:0a:ef:c1:c6:
02:75:7b:17:b1:51:b8:aa:71:fa:eb:3a:89:ef:af:8e:6a:d6:
93:f6:12:9a:62:ad:b1:6d:57:05:3b:bc:2a:fb:b8:e8:82:cb:
a4:77:36:e0:11:2c:1d:ea:0b:c6:d6:15:1e:26:f6:a7:5e:bf:
89:23:e0:7b:ff:b1:22:1e:66:cd:e7:33:ac:ec:d7:14:9b:0d:
54:a8:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:23 2026 by rpki-client