
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa
File: D61B5A66480A11EF90444C33C4F9AE02.roa (raw, json)
Hash identifier: OR4mKC69fbIdY3zEDM4p4C7jpSzPMx91kMymrb4GGh8=
Subject key identifier: 18:69:47:27:6D:EF:48:EB:BF:EE:21:B6:C0:08:50:FD:13:D4:16:BE
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 1E2B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa
Signing time: Thu 08 May 2025 15:55:34 +0000
ROA not before: Thu 08 May 2025 15:55:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17665
IP address blocks: 160.25.30.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7723 (0x1e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 8 15:55:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd3f6-ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:a6:1c:b4:a4:46:62:c0:b8:cd:a0:de:b4:
25:10:a1:08:56:ed:2a:04:8e:25:9d:cc:13:43:49:
0d:43:ea:23:da:33:a9:eb:f7:2e:f4:b8:12:a2:67:
fb:20:95:e8:38:1e:0b:a1:df:8b:7c:8f:dc:8a:48:
47:ca:06:72:ee:4c:d1:a5:fd:62:e2:fa:6d:13:57:
fa:71:27:ea:6c:43:b8:bc:ea:46:4c:bf:e0:09:95:
ad:99:70:ee:f0:9a:4b:9a:ca:ec:aa:c1:03:2d:13:
e6:38:f9:2a:67:37:a3:64:b3:cb:e8:fe:8e:33:a8:
5c:fc:9f:25:f7:76:b5:94:c7:d9:5f:a0:01:1c:6f:
7b:73:1e:f4:2e:b3:0b:25:c0:2b:fb:e3:15:b3:21:
67:44:ec:61:e1:1d:aa:31:34:fd:29:1b:94:eb:f3:
3d:0a:1f:aa:56:eb:fc:85:20:cd:ab:e3:eb:6a:44:
c3:25:85:b9:01:57:62:b2:37:fc:43:34:93:09:70:
37:60:84:c3:cb:70:d6:08:17:59:17:25:d2:72:d4:
0f:6b:60:4d:1c:94:f9:87:17:58:3e:f2:1e:07:ad:
ce:4d:2f:29:31:43:31:ad:0e:de:c7:30:bd:c7:99:
7e:37:9e:7e:e7:15:f5:cb:ac:ef:8d:2b:69:72:e3:
6f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:47:27:6D:EF:48:EB:BF:EE:21:B6:C0:08:50:FD:13:D4:16:BE
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.30.0/23
Signature Algorithm: sha256WithRSAEncryption
71:44:8c:94:ce:c7:47:25:86:89:de:49:26:07:10:fc:fa:e4:
44:0a:ae:5b:f5:5b:78:8c:c7:09:e2:a1:6e:ef:4a:ff:b0:3c:
8b:6c:de:15:b3:4f:ce:92:d8:db:41:5b:69:b4:46:74:bb:6e:
54:b6:74:49:6f:e9:3f:40:f8:c9:25:4e:2d:10:a1:3e:31:7d:
7e:89:f2:43:a1:c1:43:cf:c6:ae:f9:8d:f5:12:e4:94:40:4b:
ea:27:2e:c3:d7:3b:a5:d1:e0:83:b9:60:ba:70:d8:b6:e4:74:
c9:8f:5a:0a:03:aa:90:ea:25:29:e4:6a:bb:36:7d:9d:13:0d:
3c:bb:bc:29:bb:ce:72:15:33:4a:c1:b1:17:ae:5c:6b:d9:52:
36:3e:c0:d7:af:af:f0:89:75:89:b2:cb:f3:a8:33:fe:9f:9d:
db:da:1c:7c:1f:86:b8:e6:bd:00:43:90:3c:ca:17:c9:1e:c2:
a1:f5:f3:81:4b:49:1e:a8:5e:5d:3b:f3:b8:24:26:e8:32:ff:
34:f0:b8:1d:be:01:e7:5d:95:2d:8a:88:6d:35:6a:a9:76:7b:
93:bd:e4:17:70:cf:82:45:2b:a5:c6:eb:22:ba:87:3f:16:cb:
58:2a:98:20:77:e2:1c:c1:5b:5e:d9:b2:f9:45:08:d8:87:54:
92:dc:19:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:22 2025 by rpki-client