
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/5D71196CB13A11F08347B23DC4F9AE02.roa
File: 5D71196CB13A11F08347B23DC4F9AE02.roa (raw, json)
Hash identifier: 82Jy7YS4cnwuangwpWGSf+Ny4I9O0KalVxHcCJLAFH4=
Subject key identifier: 53:6C:89:99:37:C5:9B:8D:DC:67:7B:93:CD:2B:BB:56:37:D8:15:6A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: B1
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/5D71196CB13A11F08347B23DC4F9AE02.roa
Signing time: Sat 25 Oct 2025 00:34:29 +0000
ROA not before: Sat 25 Oct 2025 00:34:29 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 154317
IP address blocks: 160.250.224.0/24 maxlen: 24
160.250.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Oct 25 00:34:29 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68fc1b14-2b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:5e:f3:95:26:45:8f:ef:3a:81:cb:3a:0c:
13:27:f3:95:b6:b0:c0:be:ac:09:4f:f8:21:16:88:
6d:5d:62:e1:dd:1f:fc:c6:18:0b:ac:6f:57:48:b1:
1c:b0:c4:b3:64:bc:41:fe:d5:f8:93:86:b3:27:46:
13:9b:9b:2f:61:61:76:65:8e:a0:cd:5a:9b:58:76:
e2:88:8f:3d:d1:06:ca:3c:6c:5e:01:35:cb:c0:12:
e6:0c:51:13:1c:f9:a9:a1:23:26:df:34:79:92:b4:
d5:ee:a4:dc:9a:3f:ff:d7:16:7e:66:14:a2:3a:f1:
d0:3d:cf:45:91:06:75:bb:4f:44:c3:16:6e:1a:5f:
62:a5:31:a6:c1:20:86:f4:26:45:f4:12:ef:f3:fc:
ae:9d:a4:54:94:5a:3a:84:e8:5b:31:9d:d2:6f:64:
12:23:c0:e2:05:82:80:6b:37:f7:37:2f:26:fa:06:
dc:83:fd:19:d3:e4:f0:9e:0f:7f:47:25:77:55:40:
c9:74:4f:09:eb:46:08:f7:61:4f:7a:0e:ea:76:49:
70:9f:a3:7b:ae:13:54:52:da:d3:00:80:96:5b:e0:
ec:53:e0:02:ad:15:a4:bc:8a:06:28:ab:3c:2c:fc:
8b:d5:96:23:7a:f1:92:20:77:4f:24:a7:7e:5c:90:
ed:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6C:89:99:37:C5:9B:8D:DC:67:7B:93:CD:2B:BB:56:37:D8:15:6A
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/5D71196CB13A11F08347B23DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.224.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:e1:e0:5b:7e:b8:3a:0d:d6:f5:26:b0:bb:e9:63:69:55:b0:
ea:bc:d0:31:8c:09:7c:39:8b:5d:b6:1b:8a:1e:4d:a4:68:6b:
26:66:a6:aa:d1:46:f6:ba:6a:ea:4b:78:fc:e3:6f:98:85:3b:
c6:23:bb:48:5c:7c:8d:66:83:3e:72:7c:00:82:92:79:98:da:
78:b3:b0:fb:8d:0c:0d:d2:9f:a4:1e:bd:59:23:db:1f:5b:a1:
4b:c3:32:30:2d:80:2a:a4:41:13:43:bb:54:e0:34:2f:16:40:
a1:3e:e5:70:7a:07:17:45:c1:e5:1d:6d:a8:79:75:78:46:fd:
2b:01:2d:06:d8:44:e0:2d:7e:bb:0d:dc:d7:68:46:a3:cb:fa:
bb:32:6e:c1:5d:43:e2:c0:9f:13:59:66:d2:41:7c:98:83:ff:
af:fc:11:5c:16:6d:43:f3:10:5a:d3:19:80:55:1b:b3:49:3b:
ec:e4:8a:88:ce:fb:7e:5b:d6:3a:32:33:5a:eb:b5:3a:e7:24:
a7:7f:bb:86:cf:0b:60:ad:bb:50:1a:ed:e0:f9:d4:b8:f3:8b:
4d:6d:1c:26:6f:5b:4a:88:6a:a0:9a:7b:01:d0:d7:79:61:f0:
f9:4e:4e:84:1a:cd:41:09:70:41:1d:1b:29:7c:ed:a2:db:9c:
6c:d1:e3:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5
NDJFNkE1MUEwHhcNMjUxMDI1MDAzNDI5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZjMWIxNC0yYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfZe85UmRY/vOoHLOgwTJ/OVtrDAvqwJT/ghFohtXWLh3R/8xhgLrG9XSLEc
sMSzZLxB/tX4k4azJ0YTm5svYWF2ZY6gzVqbWHbiiI890QbKPGxeATXLwBLmDFET
HPmpoSMm3zR5krTV7qTcmj//1xZ+ZhSiOvHQPc9FkQZ1u09EwxZuGl9ipTGmwSCG
9CZF9BLv8/yunaRUlFo6hOhbMZ3Sb2QSI8DiBYKAazf3Ny8m+gbcg/0Z0+Twng9/
RyV3VUDJdE8J60YI92FPeg7qdklwn6N7rhNUUtrTAICWW+DsU+ACrRWkvIoGKKs8
LPyL1ZYjevGSIHdPJKd+XJDtGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFNsiZk3
xZuN3Gd7k80ru1Y32BVqMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD
MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUY3NTMvNzgwOURBMDJCQzBEMTFFRjlCNEFENjQ5QzRGOUFFMDIvNUQ3MTE5NkNC
MTNBMTFGMDgzNDdCMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGg+uAwDQYJKoZIhvcNAQELBQADggEBAKHh4Ft+uDoN1vUm
sLvpY2lVsOq80DGMCXw5i122G4oeTaRoayZmpqrRRva6aupLePzjb5iFO8Yju0hc
fI1mgz5yfACCknmY2nizsPuNDA3Sn6QevVkj2x9boUvDMjAtgCqkQRNDu1TgNC8W
QKE+5XB6BxdFweUdbah5dXhG/SsBLQbYROAtfrsN3NdoRqPL+rsybsFdQ+LAnxNZ
ZtJBfJiD/6/8EVwWbUPzEFrTGYBVG7NJO+zkiojO+35b1joyM1rrtTrnJKd/u4bP
C2Ctu1Aa7eD51Ljzi01tHCZvW0qIaqCaewHQ13lh8PlOToQazUEJcEEdGyl87aLb
nGzR40k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 23:27:02 2025 by rpki-client