
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
File: 900F4ADA440611EF85166C30C4F9AE02.roa (raw, json)
Hash identifier: m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=
Subject key identifier: 6C:80:84:BC:4A:53:B2:06:0A:C6:69:38:9E:05:1D:6E:0D:95:70:BA
Certificate issuer: /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial: FD
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
Signing time: Sat 01 Nov 2025 05:19:01 +0000
ROA not before: Sat 01 Nov 2025 05:19:01 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152742
IP address blocks: 160.25.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Validity
Not Before: Nov 1 05:19:01 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69059845-11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:ec:54:33:7f:9f:98:d3:40:a4:a7:ba:db:
a8:8a:49:2f:5f:10:4e:59:23:e2:db:00:60:f9:50:
31:d4:3a:45:a4:21:72:bc:a3:23:69:c8:4e:73:01:
0a:79:0a:53:54:10:a2:ae:a5:a2:eb:33:db:23:c4:
c1:5b:ce:5f:0e:b6:f5:27:58:4f:4f:49:81:7d:20:
e5:05:88:a3:56:14:38:34:22:b0:20:ee:d8:10:0d:
0d:21:e8:2d:38:3a:66:2e:40:c5:dc:a7:dd:0a:89:
92:38:51:84:9a:ae:8f:00:62:3d:40:d0:f6:e3:57:
59:38:a4:ad:71:0e:15:1e:71:73:e5:e2:b2:5d:1d:
ab:b2:5d:d5:1f:81:ba:bb:ff:33:59:c7:c5:04:d1:
f8:be:a8:3b:91:d3:fe:cb:96:d9:06:e5:67:94:8b:
2f:4d:4e:7e:4c:35:74:f2:5d:01:73:30:11:eb:0f:
3f:38:70:19:d7:66:10:3b:40:7c:8b:52:03:df:dd:
00:06:f8:79:cf:d3:43:b2:bf:24:a3:f8:31:0f:0a:
67:ca:d3:c1:64:bf:da:f3:7f:f1:6d:66:7b:86:f9:
f9:6b:a4:95:39:28:93:1e:0b:c0:4d:3a:da:1b:20:
5e:67:e4:42:b0:14:7c:49:2b:53:ed:c6:fe:20:ca:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:84:BC:4A:53:B2:06:0A:C6:69:38:9E:05:1D:6E:0D:95:70:BA
X509v3 Authority Key Identifier:
keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:75:cc:7e:f1:2f:c4:d1:0a:dc:1d:fd:bf:20:65:d4:93:61:
8a:61:a2:84:d0:a7:64:bf:35:85:19:c2:14:db:18:34:70:27:
bb:b3:74:d8:62:28:11:e5:f9:3e:16:e4:5b:48:cf:6e:b9:53:
b3:e8:02:d2:bb:dc:1a:8d:ec:68:3f:f2:c5:1e:83:da:d9:75:
7a:97:f5:bd:c8:e1:33:a4:e9:a7:a9:c5:5e:12:67:0c:21:a3:
e6:1a:3d:2f:93:0f:3e:89:11:24:f6:20:cf:8d:c5:98:5f:30:
12:c6:fd:4f:d8:fa:96:e4:8f:50:22:0e:fc:82:4b:4b:bb:b2:
43:fb:91:2f:42:4f:4e:06:fc:89:b7:49:d8:fa:9a:89:19:a5:
33:7c:1e:48:2c:87:6c:bd:8f:3f:5a:6c:13:8a:a3:67:72:fe:
a7:12:9c:3c:55:16:4f:c9:3e:64:b0:19:d1:53:fb:21:64:2f:
a4:69:c4:ba:98:3a:30:97:1b:cd:e4:2b:9b:79:e0:da:99:92:
bf:8f:8e:7c:b3:fb:fc:39:cc:72:e3:95:79:97:48:3e:08:87:
d2:65:c4:4c:b5:f0:c2:56:64:4b:66:b6:e6:0c:78:bc:a4:2f:
d9:83:05:34:1f:a2:63:a9:a8:21:73:23:46:f8:55:14:4e:a5:
8d:8e:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:41 2025 by rpki-client