
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
File: 77D3D4A0FEDA11F0AB7A7279726F56BC.roa (raw, json)
Hash identifier: FHfqmVc0DH5T6GrvyUSWpVxXHt1ddRfHNNOxDC51WEY=
Subject key identifier: 42:DC:01:AC:24:F8:CE:11:9D:46:B5:69:93:32:2D:2F:EE:CD:F6:73
Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial: 0148
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
Signing time: Sun 01 Mar 2026 13:25:06 +0000
ROA not before: Sat 31 Jan 2026 19:24:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135682
IP address blocks: 160.25.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 328 (0x148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Validity
Not Before: Jan 31 19:24:31 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a43e32-424f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c2:81:50:ba:3e:fe:10:72:1f:af:73:cf:49:
00:cb:25:ff:cf:7b:d8:c5:47:e6:ce:7d:96:71:e1:
68:27:49:f1:70:4c:9e:3c:80:e6:4c:6a:3b:e2:db:
a2:43:29:c1:21:ed:72:e7:da:2c:6b:06:dd:e1:a5:
81:53:a8:b0:91:cd:6e:bd:d0:01:b2:9d:97:a5:6c:
53:1e:43:dd:88:92:2c:13:18:9f:5b:2b:13:39:3b:
f6:9e:fb:6c:61:b6:f9:fa:3d:5b:7b:74:f4:61:6b:
f0:96:39:fe:a3:43:94:50:78:98:58:43:f7:7e:3e:
0b:cf:68:9d:92:bc:e1:8b:7d:85:f5:3a:e6:20:29:
4d:f2:88:6a:92:c6:08:a8:bb:2b:1d:3f:ec:9f:d5:
10:4d:80:87:41:97:07:dc:f8:51:6d:d5:e8:6f:1a:
6e:45:e9:99:ed:34:47:c4:bf:0d:a3:5e:31:e0:42:
61:62:b6:c7:f8:da:3f:d8:7f:05:08:3a:d5:c4:07:
30:a2:85:db:9e:94:a8:84:17:dd:40:85:a7:5a:f8:
27:6f:7c:a8:93:b0:12:87:51:7e:8a:a1:51:c0:e0:
fc:b9:e0:d1:e0:6b:f8:7e:c1:8b:e1:c8:ac:23:f7:
09:37:26:97:bf:0d:3a:5b:c7:ff:b1:17:21:c0:83:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DC:01:AC:24:F8:CE:11:9D:46:B5:69:93:32:2D:2F:EE:CD:F6:73
X509v3 Authority Key Identifier:
keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b9:ec:fc:e4:94:88:57:97:eb:f7:cf:f3:97:83:b5:88:d8:
79:e4:a5:38:1b:ec:50:4d:77:8a:f5:04:8a:ba:0d:9a:04:de:
e6:86:05:70:d3:ce:ff:31:cc:f6:5c:d8:00:e5:03:5c:7a:d7:
82:1d:06:c0:75:6f:e9:cf:60:58:4a:ed:8b:36:57:72:35:a4:
4b:7c:b9:6b:cf:dc:5c:e6:2c:53:56:78:87:50:1c:29:0d:99:
6d:49:ce:2f:d9:71:4f:52:dc:47:db:17:20:f9:8f:38:cf:75:
87:28:cd:83:e7:69:77:22:46:9f:c1:ed:10:64:6a:5b:6b:30:
cd:23:41:9c:df:1e:18:d7:b7:f9:7b:e8:79:66:d4:69:f4:6d:
73:92:24:20:e9:cd:9e:2d:72:cc:93:e9:89:23:4e:5c:03:18:
58:39:e5:c8:d5:45:d2:ee:9a:77:75:14:61:b0:67:3e:11:4e:
94:2a:4d:08:73:81:a7:20:36:5d:4e:4e:e2:3a:49:76:53:a5:
74:1b:7d:1f:cf:a2:0b:d7:de:11:3d:26:aa:d2:d4:42:a3:f8:
f3:3c:60:9c:c4:56:65:5b:b7:3e:75:2d:98:1a:e5:00:75:58:
aa:24:ee:62:0f:2d:91:a5:d8:c8:8f:af:7d:eb:c1:0c:b4:ef:
50:83:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:10 2026 by rpki-client