
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/C470564044BD11EFA8F7157FC4F9AE02.roa
File: C470564044BD11EFA8F7157FC4F9AE02.roa (raw, json)
Hash identifier: 2nH7N4ovFMEiAx6nSrcLjxkbYh/zpbNAaRQrma2Npz0=
Subject key identifier: 24:28:3E:6D:95:71:FE:82:BF:5B:42:CD:F7:58:3C:21:05:CA:1A:C7
Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial: 0137
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/C470564044BD11EFA8F7157FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:39:05 +0000
ROA not before: Tue 05 Aug 2025 06:44:14 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152698
IP address blocks: 160.25.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Validity
Not Before: Aug 5 06:44:14 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a41748-a68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:15:e1:ff:2f:14:a0:d1:3d:80:bc:12:a5:
2b:94:97:e0:38:39:55:38:33:ed:25:dd:8c:53:4f:
55:55:09:1e:ea:69:5d:5c:19:25:84:01:0f:00:76:
04:0f:63:dc:8f:27:0e:1e:3f:ed:a7:d2:24:9b:d4:
c7:b1:82:74:fd:0c:83:3c:b5:27:b3:0f:ac:29:73:
86:45:bb:ef:60:ec:0a:23:d0:a0:78:58:e6:31:fe:
35:58:9e:19:a8:d9:25:69:fe:22:ca:f1:4f:ae:6b:
3c:a6:ee:90:60:9e:f9:2c:38:9c:b1:62:d0:f4:1f:
3a:a2:43:2e:11:5e:46:ab:38:de:97:b0:15:e1:f1:
a9:60:8c:ca:63:90:b8:4f:d2:a9:5b:8e:e4:8b:8c:
ee:df:a4:59:c2:35:fd:ba:62:fd:54:15:87:af:7e:
08:98:3b:d8:38:18:f8:6e:89:39:24:e2:51:0d:ba:
09:dd:f5:65:33:e2:db:e4:23:8c:5f:e0:86:d5:33:
6d:14:e0:9a:e4:db:40:fc:74:56:90:01:ae:0c:c9:
d6:d4:c9:80:d8:3d:a5:4f:9a:59:95:0b:c8:b2:8e:
e9:f6:b9:e9:41:69:57:93:d0:e7:44:0b:36:7c:a8:
77:e1:c1:33:f4:c9:0e:65:27:9b:c6:ff:7f:cc:d9:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:28:3E:6D:95:71:FE:82:BF:5B:42:CD:F7:58:3C:21:05:CA:1A:C7
X509v3 Authority Key Identifier:
keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/C470564044BD11EFA8F7157FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d5:27:f9:7a:12:8d:12:dd:1c:1e:e3:5a:c6:70:c0:1c:0c:
bb:7e:72:49:c1:ea:60:aa:74:e5:d4:7b:f9:3c:48:69:c4:e2:
fc:12:4b:ff:5b:1b:5b:92:17:41:ac:9c:c0:51:37:dc:d8:21:
80:1b:54:5e:f8:2d:82:85:ce:2a:b0:e9:10:1a:02:dd:8b:7b:
70:06:03:51:19:3e:f5:7d:93:d4:76:98:77:c5:5c:b0:58:0e:
43:0a:07:fd:48:79:41:ac:a4:70:52:ae:6a:1c:1d:ca:e5:ac:
8b:49:bc:78:98:57:de:40:46:a4:96:64:d8:6e:bb:93:b1:3d:
4d:89:8f:0c:d5:99:3f:58:12:a3:eb:00:aa:2d:0a:06:3f:72:
10:ad:c3:e6:b1:e6:f4:58:d7:f3:3a:13:45:81:96:ce:4b:56:
6d:d5:10:83:06:3a:e9:32:5f:05:e2:e3:28:89:85:70:92:1d:
33:2d:c5:0a:a0:1b:ca:86:0b:17:66:bf:57:c1:40:35:bb:38:
65:83:e4:f4:dc:b0:ce:5c:1f:73:78:36:85:2d:de:89:29:4c:
94:4a:8f:0d:a4:e5:b4:31:91:b8:bc:87:49:a7:f7:cf:c8:18:
61:4d:fb:d0:55:66:2c:ae:d9:98:3e:1e:b0:37:c1:f2:ba:98:
01:fd:4a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:22 2026 by rpki-client