
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
File: 3A0740706A0111F1AE9FA49E6847A888.roa (raw, json)
Hash identifier: /Srq5MiMNluOeB/MaAcPWH/+xgC/lA9Gk28hUJt1d5o=
Subject key identifier: B5:DD:42:FB:E5:CB:94:7B:0A:62:DD:F7:E9:2D:0D:4F:DA:E3:B3:26
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 23EC
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
Signing time: Fri 02 Oct 2026 15:20:55 +0000
ROA not before: Fri 02 Oct 2026 15:20:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154552
IP address blocks: 160.25.232.0/24 maxlen: 24
160.25.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9196 (0x23ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Oct 2 15:20:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abfcbd6-f3bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:45:8d:9f:ba:33:2a:90:f9:86:c9:8f:a3:
ea:b5:32:b4:77:d1:15:53:49:f7:49:01:12:3f:bc:
03:19:69:08:ae:6c:73:9e:cc:c8:94:84:78:5d:32:
26:fb:a4:df:e7:b4:49:c9:eb:2e:1b:6c:85:d9:48:
fa:a4:26:37:fe:05:ed:dd:30:61:af:3e:cf:9c:8b:
83:5f:b9:91:56:ee:b4:85:78:8b:5f:80:35:5f:60:
22:b0:2e:0e:5c:24:ca:a9:c4:e6:22:63:d3:f9:19:
d2:93:2c:e0:52:3e:23:19:01:2d:9c:bb:a2:40:1a:
f2:b3:fc:e5:97:f4:5e:54:38:74:a1:29:27:96:2a:
25:46:1a:c7:f1:3a:1a:98:e6:dd:70:93:87:b3:94:
11:5c:a0:92:6b:bf:f6:d6:a7:40:83:bc:7f:2a:27:
99:5b:7f:65:a7:00:dd:f3:3a:fe:43:4d:48:2a:ca:
36:5d:9f:4b:36:91:ad:7b:f6:be:ec:b8:18:bf:69:
d0:cb:a8:a8:65:7c:b3:28:45:36:01:e0:5a:63:1f:
aa:33:b3:8d:df:c0:06:72:40:3c:52:43:49:20:ee:
5b:fd:08:84:c9:ba:22:a2:c2:32:b9:2e:83:53:90:
b1:2b:04:0e:96:69:a9:ab:38:1c:c4:db:b9:a9:cc:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:42:FB:E5:CB:94:7B:0A:62:DD:F7:E9:2D:0D:4F:DA:E3:B3:26
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.232.0/23
Signature Algorithm: sha256WithRSAEncryption
60:4b:65:99:7f:b1:41:ed:60:a5:fe:da:a8:33:61:86:cf:e9:
fd:71:32:61:68:bf:1c:d6:46:e0:60:5e:89:38:d9:f3:58:7f:
bb:bd:c9:30:01:81:fb:75:f1:cc:21:2a:bf:73:9e:e0:60:c1:
4a:0f:92:8a:ee:a2:f2:1d:80:be:90:16:58:6e:b2:fd:4e:34:
d1:93:7e:34:81:d8:6d:94:b7:2f:6f:83:fe:be:7c:a3:f3:7c:
28:51:92:3c:44:cd:d5:c6:fc:f9:e5:a4:8b:8f:d0:a7:89:8e:
f3:b8:9b:de:e9:80:5b:da:1c:22:38:9f:67:aa:4e:10:e0:b8:
eb:cb:33:6d:a5:a6:49:86:ee:02:b7:2e:ea:fd:fb:0c:1d:2e:
d1:b1:9a:8b:9e:84:4a:77:70:90:15:3b:62:d5:2c:16:d9:e6:
bb:cf:45:12:c2:d0:15:84:27:f9:d8:29:2e:a8:fd:bb:e7:f6:
7d:ca:76:45:d3:52:48:c7:59:d3:b5:7c:8d:0e:71:05:02:90:
25:89:60:ca:28:73:12:91:13:7f:6b:d7:56:66:54:13:3f:05:
6b:b8:93:10:c8:1c:75:3f:c1:72:a7:31:fd:20:2f:06:06:84:
5b:f9:3c:7e:1b:99:07:af:5f:22:06:aa:ce:f8:89:1e:2a:ac:
a0:90:c0:da
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUyMDU0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2JkNi1mM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzftFjZ+6MyqQ+YbJj6PqtTK0d9EVU0n3SQESP7wDGWkIrmxznszIlIR4XTIm
+6Tf57RJyesuG2yF2Uj6pCY3/gXt3TBhrz7PnIuDX7mRVu60hXiLX4A1X2AisC4O
XCTKqcTmImPT+RnSkyzgUj4jGQEtnLuiQBrys/zll/ReVDh0oSknliolRhrH8Toa
mObdcJOHs5QRXKCSa7/21qdAg7x/KieZW39lpwDd8zr+Q01IKso2XZ9LNpGte/a+
7LgYv2nQy6ioZXyzKEU2AeBaYx+qM7ON38AGckA8UkNJIO5b/QiEyboiosIyuS6D
U5CxKwQOlmmpqzgcxNu5qcwh6QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLXdQvvl
y5R7CmLd9+ktDU/a47MmMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvM0EwNzQwNzA2
QTAxMTFGMUFFOUZBNDlFNjg0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBnoMA0GCSqGSIb3DQEBCwUAA4IBAQBgS2WZf7FB7WCl/tqoM2GG
z+n9cTJhaL8c1kbgYF6JONnzWH+7vckwAYH7dfHMISq/c57gYMFKD5KK7qLyHYC+
kBZYbrL9TjTRk340gdhtlLcvb4P+vnyj83woUZI8RM3Vxvz55aSLj9CniY7zuJve
6YBb2hwiOJ9nqk4Q4LjryzNtpaZJhu4Cty7q/fsMHS7RsZqLnoRKd3CQFTti1SwW
2ea7z0USwtAVhCf52CkuqP275/Z9ynZF01JIx1nTtXyNDnEFApAliWDKKHMSkRN/
a9dWZlQTPwVruJMQyBx1P8FypzH9IC8GBoRb+Tx+G5kHr18iBqrO+IkeKqygkMDa
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:11:50 2026 by rpki-client