
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/D0B078FA389611EF909AF237C4F9AE02.roa
File: D0B078FA389611EF909AF237C4F9AE02.roa (raw, json)
Hash identifier: r4s86w8kUPh2Ayt425Fs7qlK2WFWesJZiNchbJioMHQ=
Subject key identifier: DC:D9:18:FE:0F:68:DC:8D:08:26:00:B2:6B:95:E9:69:CD:EE:ED:42
Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial: 018E
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/D0B078FA389611EF909AF237C4F9AE02.roa
Signing time: Wed 29 Jul 2026 05:55:56 +0000
ROA not before: Wed 29 Jul 2026 05:55:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 153048
IP address blocks: 160.25.40.0/24 maxlen: 24
160.25.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 04:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Validity
Not Before: Jul 29 05:55:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6995ec-8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:d5:93:84:94:ff:d4:15:1a:71:57:47:da:
c8:74:38:af:74:0a:de:09:9a:a7:26:11:ac:e4:8f:
d9:78:13:b1:76:9a:5a:61:5c:a3:a2:1d:f0:40:7d:
5b:dc:23:31:27:d5:b2:cc:d9:6c:e8:2e:7e:d2:8e:
28:47:63:a1:7f:01:fe:5c:80:aa:bd:32:c5:6d:6a:
5a:d6:ae:48:36:16:a9:e5:9d:10:a9:d2:97:ec:e4:
5b:58:1f:71:aa:2e:51:6d:19:0a:1b:a6:1f:2e:e7:
94:48:47:c8:26:ee:f5:b1:5a:03:e0:2d:6f:78:54:
56:5a:75:dc:48:49:92:f2:a0:b9:a0:1a:2d:e3:f0:
0d:55:5f:52:4a:cd:df:ba:f3:9e:dc:9c:6e:57:a0:
21:39:de:a1:08:19:00:96:72:3f:15:47:7e:97:48:
96:dd:13:ef:e7:9a:56:d1:22:64:08:21:f6:6c:bf:
b1:7f:29:e8:60:2b:9c:49:82:ae:13:5e:d1:d4:b9:
a5:aa:74:b4:87:c1:7c:a5:be:83:6b:82:4a:f9:51:
6a:3e:77:99:ed:2a:f8:c9:d3:6a:aa:72:34:c8:f8:
99:7a:8e:06:9a:5b:c5:eb:68:c2:70:24:42:e7:9b:
39:63:b6:20:d7:4a:27:82:47:1b:d2:0c:3b:e5:3e:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:18:FE:0F:68:DC:8D:08:26:00:B2:6B:95:E9:69:CD:EE:ED:42
X509v3 Authority Key Identifier:
keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/D0B078FA389611EF909AF237C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.40.0/23
Signature Algorithm: sha256WithRSAEncryption
19:47:39:14:17:da:63:6d:7d:8a:7d:5d:41:08:33:ad:68:21:
81:aa:51:c8:c2:3a:c4:bf:c8:e2:64:58:70:0b:b5:d7:17:38:
89:76:e9:5a:d9:c0:fd:e3:95:40:0c:05:7e:a3:9e:c2:96:d6:
f3:7a:36:85:18:0d:8f:30:27:5a:77:30:11:7a:e7:bf:2b:3c:
d5:40:11:4a:31:1d:74:e6:de:45:87:05:4c:b4:e6:87:20:88:
15:89:56:02:f2:b1:a2:53:62:9a:98:11:37:d3:a4:5f:e2:3e:
0d:f0:e4:39:94:9d:01:6d:ee:a0:92:00:b7:0b:d4:e7:0d:ae:
5a:08:d4:18:db:d9:0c:e2:6b:d3:90:41:bf:93:46:7e:92:16:
4c:0c:c4:bd:85:45:54:f8:26:e5:eb:94:9a:59:96:98:80:57:
81:60:f5:ca:1f:35:88:9f:8c:3a:e3:4d:3f:7f:0b:3b:3b:88:
05:b6:0d:49:0c:1f:51:f1:30:a4:c5:36:74:f5:3f:58:fb:0a:
9c:a6:cf:8b:f6:c8:97:99:e8:29:6e:fb:91:fc:c7:3c:64:25:
25:9d:45:a7:06:af:5f:2b:72:f9:e1:bd:d1:ae:e6:41:e2:82:
7a:69:cf:37:0d:63:de:20:96:9b:d4:ee:bd:bb:bd:d7:30:51:
3c:45:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:16:34 2026 by rpki-client