
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
File: DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (raw, json)
Hash identifier: v8ohmUSHk0fnin1T0AiYUETFghcnt5SEXbq5Yrmd+XU=
Subject key identifier: C4:E3:41:4A:B8:E9:31:D5:06:68:EB:9C:54:61:A3:7B:C9:DB:51:E5
Certificate issuer: /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial: E4
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
Signing time: Sat 25 Oct 2025 09:49:54 +0000
ROA not before: Sat 25 Oct 2025 09:49:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153358
IP address blocks: 160.187.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Validity
Not Before: Oct 25 09:49:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68fc9d41-5027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:cb:b4:dc:22:6d:40:2b:b8:63:e9:2b:fd:
dd:6d:2b:5e:d1:61:fe:8f:73:9e:07:13:1d:11:51:
30:b2:88:4f:f9:a9:82:61:a8:1d:a3:50:18:5b:a4:
29:58:90:05:c6:22:88:0f:a8:c2:91:0c:e2:44:e3:
68:cc:6f:f3:fc:c7:9a:e1:03:f5:28:4f:26:66:b6:
e2:aa:aa:13:e6:9c:13:2c:2f:6a:ed:0c:e0:00:dd:
17:c4:05:b7:41:3d:f7:f9:75:72:fb:9e:95:50:28:
5e:19:28:dc:7e:79:f3:a1:0e:70:38:fc:47:98:87:
8d:c2:ce:37:f6:72:5d:08:3a:3e:1f:33:2a:0c:47:
e3:1b:a4:0d:9c:48:94:16:5c:16:36:de:18:41:ae:
00:e0:dd:1d:9f:9f:7a:98:c9:63:22:63:46:ad:1b:
7a:e3:63:a8:36:67:61:f4:c0:4e:4c:2d:ba:e4:e6:
78:66:16:8f:bc:86:28:11:6c:d5:85:26:72:be:78:
e6:5a:87:8e:54:dc:e8:11:b3:2f:19:3a:42:a5:fd:
83:f2:e1:ea:2e:d3:09:06:88:a5:a1:73:12:5c:01:
ca:a7:8a:61:d1:e3:e1:99:2c:fc:cf:72:b6:5a:36:
1e:b0:e3:34:4b:ab:f7:a4:81:81:65:06:13:96:fc:
27:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E3:41:4A:B8:E9:31:D5:06:68:EB:9C:54:61:A3:7B:C9:DB:51:E5
X509v3 Authority Key Identifier:
keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.175.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:15:4c:1b:c3:4d:14:b0:b3:f3:e0:4a:2b:6a:f3:2d:fe:71:
c9:1c:7e:82:7d:ad:df:01:19:30:68:fc:9b:6c:17:c2:d1:0a:
a1:0f:45:c8:cf:b8:ef:b3:70:1b:f6:90:90:3e:6b:bf:81:e5:
cb:14:89:1a:84:a5:0e:b2:cb:7c:fc:61:99:75:02:16:e6:93:
9e:9f:32:e7:e4:d3:d3:7a:d1:29:c0:77:58:9a:d7:22:3f:aa:
c1:41:02:12:68:34:e3:38:52:03:08:58:68:96:40:98:56:26:
ed:7c:8f:69:1d:9d:00:08:75:db:9d:37:8c:2e:ed:57:12:df:
0d:e7:ba:3e:85:d1:25:fe:47:48:55:28:43:e9:58:82:47:aa:
7a:80:04:12:bf:00:a4:6e:3c:1c:52:cb:25:f9:0c:f3:06:58:
56:b7:ac:14:fa:53:d9:77:46:ba:0e:e7:b7:0f:57:aa:c6:ed:
c8:c0:46:ac:37:fd:05:f1:bf:b5:57:a2:fd:b3:ea:90:03:99:
06:81:29:2b:33:c4:0f:bc:c3:cc:28:94:7a:b0:c3:d9:f2:fd:
79:2c:54:3b:0a:c8:37:d5:2d:28:62:44:87:21:10:6d:db:b8:
7c:c3:a1:06:0e:42:bb:91:3f:13:42:91:49:26:7c:d3:7d:48:
c5:19:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:40 2025 by rpki-client