
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
File: 250320C4761511EDA05B8A63C4F9AE02.roa (raw, json)
Hash identifier: fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=
Subject key identifier: 73:68:53:B1:C2:25:00:B5:18:45:F8:17:0A:CA:BF:FC:2F:4B:33:F4
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 0269
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:35:13 +0000
ROA not before: Wed 07 May 2025 02:39:33 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9509
IP address blocks: 165.12.0.0/16 maxlen: 16
192.207.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: May 7 02:39:33 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5a021-aec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:23:8d:fe:d2:6f:70:34:45:80:00:0b:32:35:
6d:50:5f:24:87:33:ed:fc:1c:d3:3c:cd:f5:c0:99:
df:09:35:bc:7c:a0:d8:6b:98:2c:f4:08:19:76:f9:
59:45:e6:77:63:24:6d:4d:a5:c3:b0:b0:38:ff:5a:
ee:3c:7d:7d:98:13:64:a0:73:4f:ac:0f:0d:b3:d2:
b3:e2:a6:6a:f0:28:2d:c1:17:d1:ae:67:80:96:96:
31:90:71:1f:8e:57:d1:df:1f:13:af:92:87:1b:4d:
62:34:b4:3e:4e:3f:73:df:0e:7f:4c:be:ee:79:d3:
1c:a3:0d:05:80:a3:c4:cf:b1:38:05:33:ee:23:0f:
df:55:e6:b7:49:a0:c7:fb:db:f9:07:25:2b:05:7e:
29:24:d8:dd:77:2d:dd:23:d4:de:79:79:51:01:62:
49:b1:f9:29:8a:5f:87:57:f5:80:4e:6a:73:50:a1:
21:bc:5b:66:8e:dd:71:b7:28:33:7b:7d:1e:de:4a:
d7:48:a0:6b:fe:74:1b:0b:54:2c:85:f7:eb:ae:ba:
7f:18:f4:c7:ef:ad:82:22:b9:c8:85:2e:6c:61:85:
77:82:29:43:a1:02:c9:bb:a7:fc:9e:e7:dc:7c:18:
7a:f5:67:0f:66:19:7c:d1:42:ec:af:5e:a9:bf:14:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:68:53:B1:C2:25:00:B5:18:45:F8:17:0A:CA:BF:FC:2F:4B:33:F4
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
165.12.0.0/16
192.207.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:32:32:66:67:22:2d:d6:f1:62:06:f6:c1:59:3c:39:25:5e:
45:9e:45:17:8d:1f:2d:f9:ce:5d:bd:2d:39:fa:5f:7f:2e:27:
7a:41:ff:ae:a3:b1:dc:2f:95:23:ea:f8:21:06:a9:2b:ee:63:
df:7e:7a:5a:a8:48:40:77:ef:fb:1d:83:1f:f7:15:99:d2:f7:
94:13:74:c3:4c:8f:88:de:9f:9a:b7:bc:84:8d:65:9d:f4:14:
2d:00:f1:c9:c9:5c:91:9d:1e:9b:40:59:ba:91:12:25:47:ac:
8c:b4:f6:12:cc:9c:a8:00:75:2f:8e:c9:c9:89:8a:b6:16:3e:
89:07:2e:e3:b3:7b:05:e3:20:1e:de:cf:ae:c0:ea:d3:62:fa:
c7:0b:51:db:f7:2e:d8:0f:9f:ad:e1:f7:7e:78:c0:ff:1d:39:
20:f6:df:f2:7f:54:a9:eb:64:c4:ca:46:6b:cc:04:76:f9:c3:
b3:36:b2:1b:a6:da:d3:d9:42:29:41:7f:0e:b3:2e:31:35:ea:
fd:b7:dd:e5:b8:37:83:43:5d:c2:35:58:56:92:4a:23:ac:b7:
2a:07:24:08:fc:71:70:38:be:35:0d:31:f8:f8:b0:25:a6:03:
ce:39:76:16:af:8e:75:dc:48:91:90:b2:49:ec:d6:13:55:25:
c2:97:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:18 2026 by rpki-client