
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
File: 19D852C853EF11EF838B8354C4F9AE02.roa (raw, json)
Hash identifier: Hj/RBdHByEmRs/c38GH071peXfF5OHug4ibUe/kltTo=
Subject key identifier: E0:A9:71:51:C8:22:80:17:06:F2:D3:B6:7A:E8:D3:A9:AF:2A:7D:CC
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C1C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:44 +0000
ROA not before: Thu 08 May 2025 15:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152525
IP address blocks: 160.25.136.0/24 maxlen: 24
160.25.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11292 (0x2c1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c198-538d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:ba:3a:3b:22:34:cb:58:b3:1e:e5:84:60:
8a:39:8a:b7:0d:d7:6d:75:0a:4f:16:0a:a5:34:4e:
c2:df:dc:d6:12:59:62:4a:8d:f7:9d:6d:18:ac:c1:
23:71:27:53:ba:37:4b:6a:9e:fe:80:5a:81:87:7c:
36:4e:58:a2:7a:3b:ea:3d:d4:89:d9:01:41:2b:3a:
71:6d:e7:74:54:4a:fb:c7:d0:7a:25:11:d8:cc:53:
48:80:e9:50:66:fe:1e:cd:c0:ae:83:a7:d8:58:32:
db:2c:f2:80:03:35:b4:ee:50:46:1a:97:08:9f:15:
d6:8e:a3:3a:c6:b8:85:07:b4:41:51:54:72:eb:d4:
6f:e7:f5:6a:a9:72:ff:21:1c:3b:87:d8:9b:0e:45:
eb:63:28:91:76:a8:ac:22:20:cf:6b:f9:e2:09:13:
9e:cc:44:76:e2:54:44:79:e7:23:ff:1a:cb:6f:d7:
52:b1:51:4c:49:f4:ad:f4:74:49:95:95:8a:e0:2f:
ba:b6:83:1d:65:64:4f:a2:31:bf:aa:c3:c7:1e:2a:
36:cf:8b:9c:f6:c9:f5:4f:fb:d3:7e:28:3a:e3:1c:
cd:d0:6b:61:b5:4b:e7:0a:bb:81:85:42:c4:a2:c6:
48:6a:f8:28:ba:1b:55:d4:78:9f:88:02:78:84:89:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:71:51:C8:22:80:17:06:F2:D3:B6:7A:E8:D3:A9:AF:2A:7D:CC
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.136.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:91:f4:3b:f9:d3:42:12:21:c4:c9:a8:27:36:6a:2f:8d:36:
a4:1e:fd:3d:b4:df:a0:cc:81:87:2c:80:20:40:5e:4a:51:ff:
c6:9e:15:90:8e:fd:7a:5a:d7:e0:55:96:4d:f3:b3:9b:eb:d4:
60:9d:50:23:bb:cc:96:86:f4:a6:84:df:85:84:e3:67:46:67:
69:54:e5:bd:e1:68:db:e9:4a:c5:6f:b5:f3:60:0f:1d:cb:73:
69:d0:e1:9a:16:eb:69:89:b7:a8:01:52:5f:b4:3b:20:b1:b8:
fc:05:8e:f1:32:e3:55:81:5d:fb:0b:28:66:44:c8:aa:f1:9d:
b9:cc:e2:22:e7:5b:6f:02:3b:da:d3:c3:4a:5c:1b:1f:cd:25:
7a:32:40:1c:9f:01:ea:c5:c2:50:2d:9f:01:53:e1:09:36:7c:
db:04:02:79:1f:b8:69:77:ca:c8:75:58:74:cf:9c:be:f6:66:
0f:f6:12:64:a2:bd:fb:c1:d8:20:c1:56:69:de:ab:9d:cf:88:
cb:a6:54:1d:63:fa:28:d0:19:01:9a:1c:22:60:b3:82:de:8b:
6a:f9:bb:14:f6:8d:77:04:4d:ec:6a:f4:9b:33:fa:43:e9:6a:
b9:45:b8:d3:af:15:cf:41:cb:ef:db:6c:ad:64:00:04:2b:05:
96:8e:f0:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDIwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE5OC01MzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp+e6OjsiNMtYsx7lhGCKOYq3DddtdQpPFgqlNE7C39zWElliSo33nW0YrMEj
cSdTujdLap7+gFqBh3w2TliiejvqPdSJ2QFBKzpxbed0VEr7x9B6JRHYzFNIgOlQ
Zv4ezcCug6fYWDLbLPKAAzW07lBGGpcInxXWjqM6xriFB7RBUVRy69Rv5/VqqXL/
IRw7h9ibDkXrYyiRdqisIiDPa/niCROezER24lREeecj/xrLb9dSsVFMSfSt9HRJ
lZWK4C+6toMdZWRPojG/qsPHHio2z4uc9sn1T/vTfig64xzN0GthtUvnCruBhULE
osZIavgouhtV1HifiAJ4hIkhMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOCpcVHI
IoAXBvLTtnro06mvKn3MMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTlEODUyQzg1
M0VGMTFFRjgzOEI4MzU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBmIMA0GCSqGSIb3DQEBCwUAA4IBAQALkfQ7+dNCEiHEyagnNmov
jTakHv09tN+gzIGHLIAgQF5KUf/GnhWQjv16WtfgVZZN87Ob69RgnVAju8yWhvSm
hN+FhONnRmdpVOW94Wjb6UrFb7XzYA8dy3Np0OGaFutpibeoAVJftDsgsbj8BY7x
MuNVgV37CyhmRMiq8Z25zOIi51tvAjva08NKXBsfzSV6MkAcnwHqxcJQLZ8BU+EJ
NnzbBAJ5H7hpd8rIdVh0z5y+9mYP9hJkor37wdggwVZp3qudz4jLplQdY/oo0BkB
mhwiYLOC3otq+bsU9o13BE3savSbM/pD6Wq5RbjTrxXPQcvv22ytZAAEKwWWjvAV
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:13 2026 by rpki-client