
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/79A1CFF0F2F311F08CC9D9AA476F56BC.roa
File: 79A1CFF0F2F311F08CC9D9AA476F56BC.roa (raw, json)
Hash identifier: ImLzfO9eYPkP8TeOeHFGuBUxwADU7Ur8U4TyxjSkGl0=
Subject key identifier: 34:49:AD:36:E5:A9:34:5F:44:FB:45:8B:3F:1F:F8:EE:E3:A5:1D:6A
Certificate issuer: /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial: 0147
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/79A1CFF0F2F311F08CC9D9AA476F56BC.roa
Signing time: Sun 01 Mar 2026 16:56:39 +0000
ROA not before: Fri 16 Jan 2026 15:53:18 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153853
IP address blocks: 160.25.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327 (0x147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Validity
Not Before: Jan 16 15:53:18 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46fc6-363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:f4:d4:2f:49:d5:79:d7:e7:23:bc:0e:66:
83:98:60:f1:f7:2d:4a:7a:61:74:b7:ab:da:65:95:
9d:a3:be:43:23:69:ba:55:12:ea:00:71:b1:56:1c:
55:79:71:09:d9:41:cb:41:97:44:6f:96:18:20:79:
87:a4:3b:15:d6:ae:c5:a8:1c:9c:79:26:17:0a:76:
19:06:48:4d:84:64:a5:e2:40:65:fa:dd:81:e3:fe:
0a:9e:b5:fb:a6:a3:df:78:04:89:24:53:6b:a0:5d:
6c:86:21:fb:a7:06:cd:95:78:1f:b1:75:cf:05:12:
c5:bb:0f:af:49:52:e3:b1:57:55:ab:d4:48:84:82:
2d:ac:82:22:8d:13:38:d9:7d:a4:cb:b0:11:49:06:
56:b0:f3:89:54:45:79:71:ec:64:63:4c:9b:0b:f5:
3f:ce:0a:78:6b:04:2b:bf:7e:6c:c7:58:80:f1:ee:
33:b7:fa:0f:49:93:d6:b2:90:ed:3a:8e:a8:b2:ce:
46:73:4a:50:bd:f8:46:91:cb:a5:d4:cf:2f:03:6a:
f0:5f:75:d1:a0:b0:dd:90:f7:b2:4f:11:ca:84:a2:
ca:c9:82:41:f8:cb:9c:94:ec:90:67:ad:ad:3e:ee:
4c:21:e4:7a:e7:7d:c0:61:d5:4e:ed:e6:77:b8:82:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:AD:36:E5:A9:34:5F:44:FB:45:8B:3F:1F:F8:EE:E3:A5:1D:6A
X509v3 Authority Key Identifier:
keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/79A1CFF0F2F311F08CC9D9AA476F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.5.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ee:98:3e:29:6d:80:98:c3:04:79:1e:aa:24:2d:90:94:ae:
3c:78:d4:34:6f:e1:f0:c9:03:f6:32:82:98:af:b2:97:e3:8c:
c4:3f:45:36:2c:6d:02:3e:d9:50:66:15:c9:79:c7:c4:e4:cb:
97:5e:51:09:dc:07:1a:d9:47:40:4c:1c:b9:48:3d:06:96:9e:
0d:9a:03:c7:93:9f:eb:7b:20:68:8a:a8:2a:15:df:fd:b2:4a:
54:d5:94:ed:d8:39:2e:1b:a8:f3:96:6d:ef:eb:b4:17:ca:2e:
4c:ce:c2:20:b6:7a:5c:95:55:33:10:e9:0a:53:5d:a6:87:0d:
52:c7:35:57:78:41:f0:91:3a:db:a6:68:e8:86:ec:3f:25:66:
0f:84:79:b6:66:95:a6:fc:65:c4:b8:38:b6:96:9f:66:16:fe:
5b:64:78:1f:76:30:bc:dc:9e:45:bf:98:5d:af:3b:f9:2d:cc:
49:4e:4b:22:b3:15:3d:94:fb:f2:95:14:41:6f:35:ac:9f:33:
d4:3c:44:cb:e4:cd:5b:f6:d1:73:33:3c:b1:bb:a7:3c:88:66:
ab:81:e5:72:ab:e5:ca:fe:c8:38:16:83:1d:81:d2:55:e9:24:
41:b3:f7:0c:b2:e7:49:ba:a5:58:ed:ab:f2:8e:b6:1e:f8:2b:
f2:81:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:11:04 2026 by rpki-client