
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/25A3C2F46D1B11F09E59264EC4F9AE02.roa
File: 25A3C2F46D1B11F09E59264EC4F9AE02.roa (raw, json)
Hash identifier: 9X406cRfEaaV9qLi/6kgIQY+OvvghF/tupg4ZJ65XWo=
Subject key identifier: 91:99:99:AD:E2:96:C2:25:55:B5:A3:7D:E1:52:AC:B8:CD:25:1A:FC
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2D1C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/25A3C2F46D1B11F09E59264EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:27:06 +0000
ROA not before: Wed 30 Jul 2025 07:59:41 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7843
IP address blocks: 43.254.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11548 (0x2d1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 30 07:59:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4af2a-b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:26:47:e4:21:e7:79:59:a1:e7:4e:8b:7a:
6a:7e:3d:27:ea:7e:e5:10:f3:3a:d6:3a:6e:1f:0e:
4d:4c:45:94:1e:81:f5:88:ef:e6:7a:e9:db:ec:f8:
00:af:ba:83:f2:83:b5:93:bb:a3:f7:f7:cf:dd:c7:
bb:d0:2e:fb:7b:ec:b5:f9:6a:a2:cf:f0:80:39:47:
6c:e8:2b:ea:f8:6a:6b:48:c8:74:7f:c4:a2:65:5e:
ed:5e:31:39:ce:24:fd:a8:39:7d:d3:06:1f:8c:f5:
99:bf:01:77:85:6d:f9:5d:e8:55:05:08:29:a7:82:
40:2c:35:2f:e4:14:9f:1b:ab:ba:62:5d:bc:74:f5:
de:49:31:9a:f0:21:48:7c:ca:f4:c9:97:45:65:d3:
be:19:fc:6e:ec:4b:ed:55:08:4f:3c:df:42:be:c0:
09:94:d9:ba:72:a2:8e:10:05:b7:eb:64:81:3b:fd:
24:ef:6b:59:56:3d:73:4f:04:5c:ca:04:2d:90:5e:
73:bd:93:fb:5f:0a:a2:9d:53:1a:ee:29:e1:86:31:
41:5f:46:07:86:8e:84:18:6d:93:d1:88:87:f9:4b:
71:19:b6:87:b7:e3:fd:30:73:4e:2c:a2:6b:83:0c:
f8:46:d8:95:28:cb:fc:31:79:a0:d7:30:05:f3:ab:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:99:99:AD:E2:96:C2:25:55:B5:A3:7D:E1:52:AC:B8:CD:25:1A:FC
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/25A3C2F46D1B11F09E59264EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:e2:b5:74:0d:4c:42:bc:20:04:d7:84:0f:93:29:f1:a6:2e:
f9:20:43:f7:a3:a8:01:32:37:ec:0a:62:95:67:b4:0d:ea:79:
65:bb:ec:da:46:88:87:8b:0e:64:1a:05:d1:a2:e0:e2:6d:55:
54:74:9f:a1:20:e4:65:6d:9c:51:27:2c:16:db:df:b3:e8:59:
87:f5:74:5f:9d:61:3f:d4:d1:97:ea:5b:db:00:71:0d:a9:2a:
e4:3b:a0:a5:1a:d4:48:1a:b7:da:2c:a8:c3:79:b9:cf:50:64:
8d:29:29:41:01:6a:fc:fa:3c:14:79:f0:1c:69:b9:6f:dd:bc:
1f:1f:12:5d:63:94:08:5b:3c:aa:8f:6c:f4:60:7c:0f:00:7f:
e9:44:72:e3:6c:ca:75:b7:4c:74:ff:34:44:1d:88:62:cf:3e:
05:09:32:84:35:cd:06:64:1d:bc:18:3b:85:74:a1:32:64:f9:
66:37:9c:b6:71:dc:72:53:3a:01:92:81:87:36:83:d8:75:65:
e1:3b:ca:70:a0:ee:49:94:e7:86:5c:b4:bb:14:24:c3:df:43:
b6:ae:3e:c6:9f:a0:a6:01:b2:cd:c9:7e:87:58:b7:cb:96:8b:
75:05:e1:91:d5:63:f8:3a:05:85:f3:4b:4e:93:05:c4:05:cb:
2c:5b:6c:68
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNzMwMDc1OTQxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWYyYS1iNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAilgmR+Qh53lZoedOi3pqfj0n6n7lEPM61jpuHw5NTEWUHoH1iO/meunb7PgA
r7qD8oO1k7uj9/fP3ce70C77e+y1+Wqiz/CAOUds6Cvq+GprSMh0f8SiZV7tXjE5
ziT9qDl90wYfjPWZvwF3hW35XehVBQgpp4JALDUv5BSfG6u6Yl28dPXeSTGa8CFI
fMr0yZdFZdO+Gfxu7EvtVQhPPN9CvsAJlNm6cqKOEAW362SBO/0k72tZVj1zTwRc
ygQtkF5zvZP7XwqinVMa7inhhjFBX0YHho6EGG2T0YiH+UtxGbaHt+P9MHNOLKJr
gwz4RtiVKMv8MXmg1zAF86tZ9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJGZma3i
lsIlVbWjfeFSrLjNJRr8MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjVBM0MyRjQ2
RDFCMTFGMDlFNTkyNjRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCK/4MMA0GCSqGSIb3DQEBCwUAA4IBAQBu4rV0DUxCvCAE14QPkynx
pi75IEP3o6gBMjfsCmKVZ7QN6nllu+zaRoiHiw5kGgXRouDibVVUdJ+hIORlbZxR
JywW29+z6FmH9XRfnWE/1NGX6lvbAHENqSrkO6ClGtRIGrfaLKjDebnPUGSNKSlB
AWr8+jwUefAcablv3bwfHxJdY5QIWzyqj2z0YHwPAH/pRHLjbMp1t0x0/zREHYhi
zz4FCTKENc0GZB28GDuFdKEyZPlmN5y2cdxyUzoBkoGHNoPYdWXhO8pwoO5JlOeG
XLS7FCTD30O2rj7Gn6CmAbLNyX6HWLfLlot1BeGR1WP4OgWF80tOkwXEBcssW2xo
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:30 2026 by rpki-client