
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/25922C44F3CF11EFBCC75246C4F9AE02.roa
File: 25922C44F3CF11EFBCC75246C4F9AE02.roa (raw, json)
Hash identifier: m8QMCMJ3X0wyQt1ZZAgjhiTXmzDH/HOcOw8QopElL7I=
Subject key identifier: A5:EC:77:9C:4C:02:3B:9C:7B:96:C0:31:82:FA:07:2B:28:4F:A0:77
Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial: 014A
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/25922C44F3CF11EFBCC75246C4F9AE02.roa
Signing time: Tue 15 Sep 2026 05:55:41 +0000
ROA not before: Tue 15 Sep 2026 05:55:41 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 140637
IP address blocks: 143.188.148.0/22 maxlen: 23
143.188.152.0/22 maxlen: 23
143.188.156.0/22 maxlen: 23
143.188.160.0/23 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 330 (0x14a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Validity
Not Before: Sep 15 05:55:41 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa8dddd-8dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:9b:35:d9:73:b7:7b:f0:a3:98:60:7a:cb:
75:4b:4a:aa:e9:db:e3:d0:dc:6f:5b:9d:36:7a:2a:
11:12:49:3e:df:d0:db:c3:a7:af:3f:44:fe:22:a9:
78:f3:e1:43:4a:5e:ea:61:eb:c7:3e:42:ad:1f:0a:
29:cd:fd:ea:97:8a:f7:7b:6f:3d:4a:63:a5:ef:20:
f6:88:ce:3e:f3:e9:9c:a5:c2:31:18:0e:c3:c8:7c:
78:73:b2:a3:53:aa:17:c1:8b:da:fb:a7:51:08:eb:
93:59:ff:b1:b4:02:fb:df:34:c1:b9:10:0d:e2:1e:
2b:2c:5b:b1:8f:71:69:1e:75:62:d9:ce:b5:cc:2b:
20:f6:2b:97:88:7e:53:2d:6d:b7:ee:b2:c5:fe:15:
8c:04:b9:89:0b:a2:5d:3e:1e:79:5b:ad:08:a5:f6:
9a:e0:f0:b3:21:2f:b5:f9:4e:14:52:d7:ee:1e:4c:
a8:0a:c2:56:9a:1b:03:d9:ca:87:3e:a9:4f:2e:6f:
fa:8b:24:e1:14:b5:63:e0:43:1e:45:ba:61:fa:3a:
bd:c3:37:b3:1f:ae:29:f7:16:7f:64:d2:f9:c6:fb:
d5:a1:87:f4:84:04:17:6c:9f:9b:33:72:c4:bf:5b:
ed:25:91:e1:17:13:3b:d4:76:bf:01:3b:4f:f0:73:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EC:77:9C:4C:02:3B:9C:7B:96:C0:31:82:FA:07:2B:28:4F:A0:77
X509v3 Authority Key Identifier:
keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/25922C44F3CF11EFBCC75246C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
143.188.148.0-143.188.161.255
Signature Algorithm: sha256WithRSAEncryption
b6:7d:b3:49:1d:d9:1c:53:d7:a4:30:c5:4b:fe:00:2b:cc:13:
fb:42:4d:b0:ee:00:a4:61:e3:8d:95:d5:89:9f:95:be:18:d1:
05:9d:39:97:17:c0:98:84:1a:42:19:7a:eb:fa:9d:87:e4:99:
bb:24:dc:04:cb:5f:78:2f:3d:83:b9:93:91:f8:28:4e:dc:2f:
4a:f0:78:9c:e6:57:b7:44:ef:54:80:25:b7:b6:e6:32:8c:23:
b5:1a:b6:78:98:0e:87:ab:90:62:e6:51:40:6d:61:0a:60:ba:
96:89:84:76:1b:14:7b:e5:13:3e:72:b1:47:af:e2:e1:36:ee:
de:ef:50:ce:6c:c8:03:7a:b6:05:7e:fc:a5:08:ae:fa:b4:e2:
e7:29:00:1b:ff:bb:c7:84:7c:73:18:da:9b:2d:7e:3a:4c:20:
22:54:b2:7b:43:46:56:15:6a:4c:94:ef:6e:db:f9:41:08:ef:
5c:36:85:b6:c8:57:bd:af:b6:71:e6:55:46:b9:13:d8:46:eb:
1d:30:6d:b1:85:12:f5:4b:dc:b7:e7:b3:62:cc:b4:af:af:ea:
7c:e2:a3:47:f8:37:8d:6e:03:ec:60:2b:3d:5c:d7:d3:20:a3:
7d:05:2a:5d:ce:70:18:89:35:60:5b:d2:71:5a:2c:39:23:03:
53:50:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:44:38 2026 by rpki-client