
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/36CFD1EE4AD011EF9B941D17C4F9AE02.roa
File: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (raw, json)
Hash identifier: MUunUkwxKjQsXH8JfGfvX7BfOKqKymz6NC/WOW+DYqA=
Subject key identifier: 3B:FC:66:66:C6:D7:A0:69:B2:B7:4F:45:C6:73:D8:C1:23:69:9F:96
Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Certificate serial: 018D
Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/36CFD1EE4AD011EF9B941D17C4F9AE02.roa
Signing time: Wed 19 Aug 2026 05:54:16 +0000
ROA not before: Wed 19 Aug 2026 05:54:16 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153173
IP address blocks: 160.25.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl
rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 04:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99
Validity
Not Before: Aug 19 05:54:16 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a854508-72b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c4:4a:6a:8b:1b:d2:41:32:71:ab:28:4e:8b:
c8:37:8c:20:99:0e:d7:06:06:29:d6:63:8c:5e:39:
90:fe:e0:e9:c9:4c:bd:82:96:27:29:72:ff:a5:49:
4b:d0:a0:46:20:c8:c7:ce:ce:e1:85:a2:92:bc:e0:
48:e6:90:06:e1:68:94:3d:56:13:5d:dd:74:8d:c9:
df:7c:a7:6d:ac:52:1f:43:03:ee:26:f7:f2:a5:06:
c9:7e:4d:21:91:68:31:d9:30:4b:95:f4:33:4f:96:
2e:8c:b0:2b:67:04:b4:24:fc:d1:27:03:e8:0f:51:
fe:5a:64:07:d2:58:47:dd:44:32:e3:c3:cf:c7:23:
07:7a:d8:f2:1a:83:64:0e:6f:8e:c3:37:15:0f:ea:
12:9d:83:3b:d4:1d:6a:44:93:a2:94:fc:88:15:1a:
09:40:7c:62:b3:7b:96:1e:bd:f5:88:ef:ac:59:ec:
fc:d3:4d:e0:2f:fc:26:7e:f3:7b:29:9c:8c:0d:ca:
02:b7:10:4b:8d:5b:0a:a2:9b:38:d9:c8:6a:16:af:
56:0d:86:19:db:16:36:82:a3:19:58:eb:00:41:e1:
18:42:0d:0f:e4:76:94:c3:3c:63:50:ec:76:58:37:
4c:5d:92:85:a6:63:7b:c7:7f:19:21:cf:1a:3a:5d:
78:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FC:66:66:C6:D7:A0:69:B2:B7:4F:45:C6:73:D8:C1:23:69:9F:96
X509v3 Authority Key Identifier:
keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/36CFD1EE4AD011EF9B941D17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.213.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ec:72:cc:fd:65:0a:54:4a:c7:2d:dd:c1:a9:8d:ff:d1:ad:
ad:8b:75:18:03:14:30:43:20:32:73:99:b0:ad:8d:c6:a6:80:
0e:27:d3:18:60:ad:d0:cd:0a:76:7b:ed:04:88:e3:b4:a1:1c:
fd:2d:ca:b1:68:62:42:6a:fd:08:44:82:06:17:66:42:e8:2f:
0a:54:c3:b4:c1:38:43:9c:e5:9b:be:bc:26:bb:06:8a:85:44:
e5:ae:61:8a:3e:51:50:a9:8b:87:48:a5:ed:ab:d9:ee:ed:1b:
7b:05:ef:6f:3b:26:bf:84:f3:ed:83:17:36:a4:95:ef:c9:b9:
8d:f8:60:e9:83:6f:ac:bf:da:29:55:7f:b9:64:2d:c6:ba:41:
05:de:b9:ae:49:75:5f:4a:ce:d7:c9:f6:25:4c:e0:b5:fe:99:
69:56:cd:38:73:71:48:aa:aa:cb:e8:66:ac:c7:83:7f:11:ca:
42:da:bd:17:04:09:3a:09:d9:bc:54:89:e0:9d:71:5b:cd:2f:
16:34:f3:ad:11:66:0c:55:e9:60:ec:f4:01:75:88:24:b7:ce:
0a:40:ac:50:04:95:29:66:01:8f:c5:3b:67:9d:eb:b2:8a:a5:
2a:0e:6f:01:63:64:da:23:e4:73:05:8d:91:0d:20:74:c8:95:
c5:d1:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:08:23 2026 by rpki-client