
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa
File: 0D38E31833A411EF82E92524C4F9AE02.roa (raw, json)
Hash identifier: pj9aUMZT0p0mxgs9aMMBAdtewJzXJebkeL4JCQr84hg=
Subject key identifier: C3:CA:FC:3E:B7:E7:F0:E4:8A:9B:97:FC:15:7D:EF:3E:2B:41:71:00
Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial: 0140
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:55:00 +0000
ROA not before: Wed 23 Jul 2025 06:13:33 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134371
IP address blocks: 160.25.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Validity
Not Before: Jul 23 06:13:33 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a596b4-3717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:17:51:7a:16:d4:fb:6c:bc:a8:80:e9:45:
75:3b:dc:f7:05:b7:44:d7:d9:97:05:d3:1d:b9:c5:
27:94:c9:bc:99:3c:d0:f1:05:c8:1d:c6:3b:ed:ae:
87:50:0d:e9:b4:5c:2b:7a:69:6a:44:79:05:9f:c8:
51:31:23:4b:35:67:38:f6:a7:da:56:ea:31:81:55:
ca:7c:f8:7d:17:0b:11:dd:99:fb:ff:67:66:03:2f:
9d:ce:aa:4a:b7:e3:0a:d3:f8:b3:b1:5c:9e:cc:ab:
76:17:6c:03:91:46:8e:8f:53:58:22:b8:7e:a5:37:
64:d0:b3:90:d6:44:df:b4:05:b6:f3:64:b5:55:b0:
72:73:6b:5b:ca:2f:d2:73:a4:13:20:97:ec:31:7c:
03:2f:d2:c8:c3:73:a2:c5:be:2b:ce:e5:ac:e9:b7:
23:1c:0e:f0:9c:2e:2a:80:29:47:22:e6:24:9f:e5:
41:28:45:99:c2:21:80:47:91:8c:f4:9f:5c:41:27:
95:2a:39:38:f6:51:79:3a:2c:e4:df:d5:10:2c:b5:
08:4e:d2:18:b8:31:9f:ba:82:26:8d:1c:5b:5f:b6:
5b:e2:c6:64:e6:6f:df:20:91:aa:fc:47:9f:d2:3e:
c2:b8:18:4e:87:7c:06:88:71:78:ae:63:5c:dd:83:
4e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CA:FC:3E:B7:E7:F0:E4:8A:9B:97:FC:15:7D:EF:3E:2B:41:71:00
X509v3 Authority Key Identifier:
keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.8.0/23
Signature Algorithm: sha256WithRSAEncryption
66:2a:eb:2b:9b:a6:99:ad:60:66:20:b3:db:04:54:51:87:34:
15:50:e9:68:ef:5d:0f:d2:25:1a:8e:d1:b7:4f:c9:54:18:08:
ca:ef:d6:ec:a6:6d:ae:62:71:13:2d:0d:f1:f4:ca:27:28:4a:
5c:03:eb:e6:72:50:db:44:e4:e9:f2:f4:6c:90:5a:dc:df:c1:
df:f0:dd:8a:b2:67:0a:55:6d:e4:86:4c:ed:10:86:6c:81:e8:
66:9b:ca:b1:ed:21:fe:e8:40:48:5d:1d:5a:bf:5b:a3:88:06:
e1:e2:4f:9e:cb:89:c7:56:98:36:a6:bd:0d:ff:ac:65:e9:3b:
47:0a:56:da:a7:48:08:db:15:32:83:eb:dd:5b:f6:54:b0:64:
d7:5f:d6:b8:46:bb:f3:fe:b9:52:ea:f7:34:ad:7a:c1:ad:d7:
04:29:ab:c7:87:b0:8a:15:84:17:f4:32:62:78:0b:0d:ec:e0:
d5:c5:18:81:cc:38:fd:18:c9:c4:b3:4b:77:a0:16:d1:ca:05:
d0:ba:66:19:15:2e:27:a2:82:64:4d:7c:53:37:55:6f:3c:44:
64:f9:b9:16:ea:d8:75:11:34:b8:d1:39:23:f6:71:b5:0d:6b:
49:65:b8:f4:ef:cd:90:7a:33:06:7d:6c:2c:56:16:92:fc:da:
5a:fd:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:10:07 2026 by rpki-client