
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/25BD1CFA3D6311F0AF2C2257C4F9AE02.roa
File: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (raw, json)
Hash identifier: 6mMgJQqrTt//DicYwifA+2B1HPeEaPw9MesPtrZauGc=
Subject key identifier: 56:1A:AD:B0:99:84:24:2A:64:FB:0C:10:B8:CB:65:79:90:DB:CE:15
Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
Certificate serial: C6
Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/25BD1CFA3D6311F0AF2C2257C4F9AE02.roa
Signing time: Mon 03 Nov 2025 06:21:51 +0000
ROA not before: Mon 03 Nov 2025 06:21:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140219
IP address blocks: 160.187.158.0/24 maxlen: 24
160.187.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl
rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475
Validity
Not Before: Nov 3 06:21:51 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690849ff-a2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0f:8f:d6:01:75:d0:6b:63:3c:0a:47:f8:fe:
81:4f:c4:53:60:c1:94:e1:6a:ac:33:8f:12:b2:43:
b4:85:3d:97:a7:a4:b9:1f:e0:be:be:ac:95:95:5b:
15:1e:ab:df:8a:bc:fe:84:c6:9c:74:44:a5:18:98:
9c:9c:c1:01:7b:6f:60:8b:ec:c9:d8:0e:bd:78:b5:
51:a8:52:5b:b0:ec:8a:29:07:c5:f5:8c:9f:39:61:
bf:51:01:94:8d:4b:97:a7:cf:bb:9e:f8:96:ca:1d:
dc:1b:15:20:ad:c6:1c:31:e4:3e:d8:ae:59:fa:53:
3b:39:d7:09:7d:c1:cb:66:4a:55:fe:4d:d0:bd:de:
50:ab:28:f9:f2:0c:82:fc:ca:df:90:e7:b4:c7:4f:
6a:24:63:79:67:75:cd:88:c5:6e:5d:93:5a:b5:cb:
1b:4c:48:79:45:5c:91:ef:d9:c9:1a:f8:6d:a4:90:
70:d1:60:3e:2a:da:44:8d:c8:ec:8c:36:55:89:28:
86:ff:d1:ce:c2:90:1a:13:74:b0:ed:e9:c9:38:0b:
a5:9d:b2:15:7d:4d:f7:0f:5a:1d:17:25:5a:29:e7:
df:02:15:0d:be:56:d4:cb:5b:11:80:63:71:47:88:
31:df:c7:6a:3c:65:08:90:85:c6:c5:2e:ca:87:a4:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:AD:B0:99:84:24:2A:64:FB:0C:10:B8:CB:65:79:90:DB:CE:15
X509v3 Authority Key Identifier:
keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/25BD1CFA3D6311F0AF2C2257C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.158.0/23
Signature Algorithm: sha256WithRSAEncryption
09:e3:96:67:d6:a1:be:ec:dc:e9:80:24:6b:8c:fe:53:84:55:
6c:7f:8d:91:30:03:fa:c2:c1:76:65:88:a4:30:44:30:c7:d1:
3e:ab:fe:bb:ab:bd:bd:a9:53:6c:18:4e:6c:24:6c:8c:01:4d:
92:36:2e:cd:bf:26:e2:a2:88:e3:e3:e0:5b:e5:a0:e1:6c:70:
21:91:87:a7:14:8d:24:58:4e:e0:e0:a1:8c:db:1f:7b:ec:42:
f3:d4:7a:e3:af:c1:6c:30:a2:2d:40:63:17:bc:78:17:37:e7:
ea:48:d0:87:02:59:24:f7:16:96:6f:a3:36:a9:c1:22:88:cd:
38:a6:ae:a2:b4:13:16:bf:fc:99:c8:69:d4:40:13:c1:e5:be:
8e:dd:90:76:67:f5:0e:4a:66:ea:b7:16:04:2a:5a:c8:06:0c:
fd:26:46:2e:19:d4:f1:fb:02:65:ea:16:fe:54:c4:cf:3f:26:
f6:0b:8d:54:e2:54:a9:66:f7:b8:a4:17:3d:ed:b1:3d:23:48:
97:62:2b:d4:76:5c:a7:a5:e4:38:0c:46:de:49:38:0d:ad:90:
01:9a:09:9c:4a:69:fa:ed:5e:3d:ad:19:3c:d4:56:12:02:aa:
f0:2e:1d:de:39:51:e6:7a:1f:e2:21:00:97:f6:4b:d1:b2:a3:
0e:0a:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:38:50 2025 by rpki-client