
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5C399D6A6C2311EF98DCE774C4F9AE02.roa
File: 5C399D6A6C2311EF98DCE774C4F9AE02.roa (raw, json)
Hash identifier: /VqtCQas3+zvQOfypNhQlUFJUwA6IU4vNsTPy2QmvQg=
Subject key identifier: 04:27:12:CF:72:8E:2B:5F:62:43:A0:48:70:AE:12:E7:58:C8:6B:DA
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2C10
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5C399D6A6C2311EF98DCE774C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:45:28 +0000
ROA not before: Thu 08 May 2025 15:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152508
IP address blocks: 160.25.30.0/24 maxlen: 24
160.25.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11280 (0x2c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c188-d5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:bb:90:da:05:f8:58:bf:6a:c8:c4:06:b6:49:
19:23:0f:9f:ae:e6:85:27:2d:4d:e6:85:50:b6:c8:
5d:f4:81:e8:ab:d0:e6:78:24:a0:77:45:28:3e:7c:
87:ea:7d:7a:3f:27:56:88:53:ae:ea:08:62:d4:7f:
66:6d:9b:82:85:9f:de:8e:0a:db:0b:32:cc:62:4d:
7f:27:c6:9f:fe:6a:e2:b9:1b:77:d7:19:f1:33:23:
31:fd:59:96:b5:21:ff:bd:44:cd:31:18:06:0d:c6:
3c:92:f8:ae:fb:28:60:ea:cd:7f:52:94:ef:d7:95:
50:c6:3f:2b:34:0b:d5:73:f4:78:29:c3:2e:0b:a4:
2c:93:ea:eb:fe:98:ef:1d:c7:87:ac:b2:13:e8:dd:
d6:c6:9a:cf:9e:d7:b1:b0:3b:9b:69:f5:6e:9b:04:
b5:e1:33:16:a4:53:45:47:5b:a1:cf:49:f0:93:d5:
b6:ea:49:69:70:93:e2:f5:e5:fc:66:22:62:c9:0c:
6f:28:01:57:92:ac:89:ab:54:c5:e8:4c:55:2a:ed:
79:4b:bf:4d:f3:67:d0:96:e0:8b:c4:87:36:dd:3c:
aa:09:36:40:50:98:ed:1e:a2:e3:1e:f3:6b:11:31:
0c:c2:d9:1d:79:9f:f3:32:11:94:bf:dd:28:c8:74:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:27:12:CF:72:8E:2B:5F:62:43:A0:48:70:AE:12:E7:58:C8:6B:DA
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5C399D6A6C2311EF98DCE774C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.30.0/23
Signature Algorithm: sha256WithRSAEncryption
05:07:a8:e3:e7:f9:a4:0d:77:b9:f3:6c:95:27:23:72:e4:4a:
eb:5d:84:5c:4c:34:de:4c:70:6e:9a:70:2d:70:ff:10:a3:29:
03:41:1b:b3:7a:50:9d:89:2e:0c:73:41:9b:f4:f8:46:b9:ed:
c3:2c:ae:fe:4a:c6:54:ee:dd:ec:2b:2a:98:de:74:45:7a:18:
36:25:45:fa:81:4f:2b:23:35:94:78:c0:b2:55:16:09:70:00:
d6:d8:76:df:e9:07:ad:2d:3b:93:d9:9b:48:66:e3:ac:5b:78:
4f:85:2d:1b:a3:5b:d4:d6:29:ea:c9:c1:0c:2b:95:a6:7b:2b:
df:10:fd:78:7c:d5:69:2c:6f:df:40:e5:f2:87:f6:29:71:be:
94:16:2e:ce:97:da:98:f7:d0:41:fc:b6:48:12:0a:ed:f5:23:
78:87:6e:68:ca:b9:b9:e1:12:ff:d5:a6:4b:cb:49:90:6e:59:
e9:64:f2:cd:a2:0d:ab:3b:08:5d:2a:65:ce:c4:2d:b4:e3:67:
4a:3f:3a:9c:a0:9f:d1:a0:75:dc:2c:bd:c9:82:65:88:b9:2c:
0e:b8:99:b3:fd:54:fd:7e:db:ad:1c:d4:32:fc:01:8c:ce:b0:
53:9d:80:f6:65:e5:26:3e:b2:74:c4:3a:69:8f:5b:17:bf:a4:
c1:d0:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:56 2026 by rpki-client