
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
File: 00E00D025BC711F0886C5B59C4F9AE02.roa (raw, json)
Hash identifier: 4/6lX4NZ27z+xN3FhA2YCKR5609eVbF1fWeCrdQJGAI=
Subject key identifier: 8B:18:11:07:D9:84:0F:B7:05:43:F8:E5:F4:93:FC:74:CF:25:C0:47
Certificate issuer: /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial: DA
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
Signing time: Thu 23 Oct 2025 07:49:51 +0000
ROA not before: Thu 23 Oct 2025 07:49:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139052
IP address blocks: 160.187.102.0/23 maxlen: 23
160.187.102.0/24 maxlen: 24
160.187.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:49:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Validity
Not Before: Oct 23 07:49:51 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f9de1e-ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:d9:96:2f:e8:c4:da:9f:1c:54:97:8a:1e:
2b:f3:57:7c:52:b2:a5:a1:50:98:00:1c:5c:58:f0:
08:84:35:07:07:e6:d5:64:83:a5:53:c4:01:8e:bc:
43:73:37:f1:a3:ae:e3:7e:45:40:53:e1:6c:ef:0f:
f3:45:36:29:48:27:af:5a:de:5d:38:c7:01:1f:9b:
cb:e8:da:26:bb:14:a5:49:ed:56:85:d6:8a:b3:2d:
3a:45:72:7f:ff:79:92:22:1b:7b:5a:99:34:10:2c:
50:d9:36:fc:58:a4:8e:70:2a:85:bf:de:35:64:79:
89:56:aa:8a:91:30:0a:2f:2b:92:4b:12:85:a6:2b:
e4:dc:81:ac:ef:94:ae:45:15:cc:bd:6f:66:7b:7a:
05:58:21:5e:63:b3:fa:5d:a8:5c:76:fc:4c:b5:fd:
ff:e4:bf:59:3a:9a:bd:06:57:7d:1e:37:ff:69:29:
04:f9:f4:fe:b4:26:63:1e:a1:bd:6b:d1:bb:a3:d0:
cc:e8:96:40:b1:a9:4b:a4:97:9e:09:67:78:cb:c0:
6a:9a:30:96:76:59:3e:d7:8a:9f:b2:ee:bf:7e:33:
84:a1:57:51:d9:23:78:b7:2c:c4:32:82:59:b6:66:
fe:f4:4b:21:77:39:9f:8a:69:95:06:b6:ba:e5:a2:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:18:11:07:D9:84:0F:B7:05:43:F8:E5:F4:93:FC:74:CF:25:C0:47
X509v3 Authority Key Identifier:
keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.102.0/23
Signature Algorithm: sha256WithRSAEncryption
19:d4:12:8b:ca:5a:e8:a3:f2:aa:61:c1:e1:e9:f9:c8:16:b3:
5e:d1:f6:7a:de:63:0f:d4:a0:82:00:f9:31:e2:ee:83:bf:73:
94:49:33:8b:71:b3:97:5e:26:c1:b4:2c:de:47:10:e9:06:82:
d7:64:24:a6:d4:f9:b8:c2:f2:10:29:fe:5a:30:68:46:1c:b0:
fd:11:80:bf:79:81:54:1b:be:90:e0:3f:39:d3:23:91:bf:e1:
8f:de:4a:61:ab:b8:53:2f:04:80:f8:72:af:16:fa:1d:1a:7b:
72:1f:22:c1:18:9b:11:af:2f:80:51:48:93:e2:81:7e:89:8f:
84:3d:a9:19:47:31:88:de:25:97:b6:e2:b5:4e:10:66:25:d5:
43:bb:5e:0c:27:5a:0a:fb:eb:93:07:94:e3:6b:dd:6f:d3:eb:
84:ba:4f:b3:f8:f3:71:ef:6b:75:35:38:16:a5:6a:f4:75:cc:
8d:a3:65:9f:ac:29:69:bf:97:c8:a9:3a:c9:f9:23:c0:4a:81:
0c:20:9d:2e:2d:95:88:d9:84:83:f3:30:82:cd:a9:66:1e:08:
03:30:e3:2f:85:1f:70:43:94:c9:82:e7:ff:e7:b9:5c:eb:d7:
e1:12:0f:83:07:ac:76:2b:fe:0f:a2:b6:71:3e:e4:ec:77:f6:
a3:62:ee:9c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ2QzExMTAvBgNVBAUTKDI2RDg2NDVFRThFRTNBNUQxRUIxRDJERjk3OUI4NTQ5
Qjg3NjFFMkEwHhcNMjUxMDIzMDc0OTUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGY5ZGUxZS1hYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6zZli/oxNqfHFSXih4r81d8UrKloVCYABxcWPAIhDUHB+bVZIOlU8QBjrxD
czfxo67jfkVAU+Fs7w/zRTYpSCevWt5dOMcBH5vL6NomuxSlSe1WhdaKsy06RXJ/
/3mSIht7Wpk0ECxQ2Tb8WKSOcCqFv941ZHmJVqqKkTAKLyuSSxKFpivk3IGs75Su
RRXMvW9me3oFWCFeY7P6XahcdvxMtf3/5L9ZOpq9Bld9Hjf/aSkE+fT+tCZjHqG9
a9G7o9DM6JZAsalLpJeeCWd4y8BqmjCWdlk+14qfsu6/fjOEoVdR2SN4tyzEMoJZ
tmb+9EshdzmfimmVBra65aLgGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIsYEQfZ
hA+3BUP45fST/HTPJcBHMB8GA1UdIwQYMBaAFCbYZF7o7jpdHrHS35ebhUm4dh4q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDZDMS9EQjcwNDRFMjdB
MjYxMUVGQUYwN0I2NTVDNEY5QUUwMi9KdGhrWHVqdU9sMGVzZExmbDV1RlNiaDJI
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0p0aGtYdWp1T2wwZXNkTGZsNXVGU2JoMkhpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ2QzEvREI3MDQ0RTI3QTI2MTFFRkFGMDdCNjU1QzRGOUFFMDIvMDBFMDBEMDI1
QkM3MTFGMDg4NkM1QjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgu2YwDQYJKoZIhvcNAQELBQADggEBABnUEovKWuij8qph
weHp+cgWs17R9nreYw/UoIIA+THi7oO/c5RJM4txs5deJsG0LN5HEOkGgtdkJKbU
+bjC8hAp/lowaEYcsP0RgL95gVQbvpDgPznTI5G/4Y/eSmGruFMvBID4cq8W+h0a
e3IfIsEYmxGvL4BRSJPigX6Jj4Q9qRlHMYjeJZe24rVOEGYl1UO7XgwnWgr765MH
lONr3W/T64S6T7P483Hva3U1OBalavR1zI2jZZ+sKWm/l8ipOsn5I8BKgQwgnS4t
lYjZhIPzMILNqWYeCAMw4y+FH3BDlMmC5//nuVzr1+ESD4MHrHYr/g+itnE+5Ox3
9qNi7pw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:01 2025 by rpki-client