
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
File: E098BB864FA311F0B96FBA3DC4F9AE02.roa (raw, json)
Hash identifier: C+d1LQ7j4suoEMqt6jmxPLK9+SyxrHsAW+pg0qKDarw=
Subject key identifier: 78:1B:77:FA:23:DB:EF:3A:5A:D0:D8:AC:2D:B7:E3:13:50:65:12:C4
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: B0
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
Signing time: Sun 22 Jun 2025 20:02:51 +0000
ROA not before: Sun 22 Jun 2025 20:02:51 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 141413
IP address blocks: 160.25.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: Jun 22 20:02:51 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6858616b-0004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:93:1a:71:6b:75:68:b6:15:6a:98:5d:d8:
c6:ea:d6:ac:8e:2a:5f:42:93:83:7f:88:72:1e:52:
0b:13:4b:71:06:70:0d:92:e8:1f:3b:e7:86:87:bc:
e8:ae:35:bd:35:77:af:2f:a4:38:c7:da:8c:bc:ff:
99:51:cc:a4:d7:ff:24:b7:e2:de:17:e6:f1:3a:98:
91:35:f9:38:b2:3c:cd:47:c7:9c:40:70:a3:66:b2:
6f:21:d7:ab:91:91:1c:26:29:bc:8c:7b:c7:4f:90:
2c:78:d6:c8:e8:85:dd:46:5a:49:1c:9a:20:70:c3:
bc:57:d6:cd:f6:97:4e:6c:b1:dc:88:5f:79:36:7b:
97:5a:02:b8:b7:3b:4e:1c:ab:b2:27:ac:30:2c:95:
fc:c7:b8:c1:1f:15:90:06:7b:0a:49:18:33:83:90:
cd:19:aa:cf:bf:53:8f:14:cf:12:89:28:5d:53:f0:
31:2a:47:d2:e9:ee:90:e0:ab:44:0c:40:d6:09:4e:
5d:c9:0b:fd:7b:f0:e4:07:59:79:96:6b:07:97:b9:
fd:6d:d7:bd:d2:e3:63:d2:be:c9:9b:20:6b:ba:e2:
ff:d9:7d:6c:0f:2a:a5:1d:b2:8b:c7:6b:d3:85:9c:
1d:99:f9:95:a0:ee:95:79:a2:ba:cd:82:9f:64:e5:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1B:77:FA:23:DB:EF:3A:5A:D0:D8:AC:2D:B7:E3:13:50:65:12:C4
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.25.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9e:f7:ab:54:0a:69:ca:c0:1a:af:c2:31:eb:36:65:de:64:
be:0f:c2:8f:df:54:d0:b4:04:d7:da:f5:d8:e4:ca:17:25:f9:
c9:46:6c:a2:91:c6:4e:03:f4:40:6a:23:5e:4b:8d:91:be:4e:
53:71:2a:e5:e3:7e:47:fd:80:be:cf:84:5e:24:0c:e8:d0:97:
7e:50:0e:75:d8:47:b9:e4:f6:f7:07:61:0a:80:50:d4:2e:ca:
4e:7b:3c:8a:e1:99:06:fe:3a:26:e0:d5:14:5e:db:59:63:09:
8a:2a:79:40:87:93:92:81:75:84:d9:b6:10:20:b1:d4:4f:17:
63:a5:88:79:a8:7e:f3:b6:13:04:4f:d1:c7:51:10:8b:d6:41:
2f:25:78:ac:4a:0e:63:97:16:81:24:50:d7:f7:a5:5f:7b:bb:
a6:65:78:b3:8c:c4:49:96:ab:1e:03:8f:45:fd:80:54:5f:67:
73:3c:e9:4f:a7:92:89:af:32:db:be:5d:a8:30:a3:3b:8a:b6:
b3:05:6d:2c:e3:2b:c1:ae:e1:e6:a3:59:2a:60:23:a9:f0:4f:
3a:bf:1f:a0:0c:d7:96:e4:34:1b:89:a9:a4:2d:93:00:f7:31:
aa:72:37:0d:f2:02:ae:76:98:e3:42:1b:97:39:af:35:1d:89:
a3:2d:bd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:44 2025 by rpki-client