
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/A18C777C6F5F11EFAF849B28C4F9AE02.roa
File: A18C777C6F5F11EFAF849B28C4F9AE02.roa (raw, json)
Hash identifier: 10tMqu+nwfPiB/Sv877/PBI+cY8PjVYEl7SPzvcI+/U=
Subject key identifier: 79:76:7D:BB:17:A0:20:67:12:6F:A0:D8:01:81:28:1B:E2:5D:6B:A4
Certificate issuer: /CN=A91F89D9/serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Certificate serial: DD
Authority key identifier: 17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/A18C777C6F5F11EFAF849B28C4F9AE02.roa
Signing time: Mon 03 Nov 2025 05:50:52 +0000
ROA not before: Mon 03 Nov 2025 05:50:52 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 138558
IP address blocks: 160.30.184.0/24 maxlen: 24
160.30.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89D9, serialNumber=175D42022BF50BD6C20F30B1C5AD8C94E085BC4E
Validity
Not Before: Nov 3 05:50:52 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=690842bc-87a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:f0:a3:fc:bd:d0:c0:33:c5:1f:57:24:f4:
b2:59:be:c1:cb:91:67:aa:e6:78:e6:d7:5c:65:b1:
10:9c:8c:c3:af:b7:76:b7:98:bb:97:cb:aa:c4:3a:
8f:86:ff:6b:24:1d:0a:5a:a3:99:4e:62:38:23:f9:
df:23:47:63:e2:c7:72:22:fd:0d:61:fb:c4:42:e3:
04:27:23:59:c1:86:8d:64:9f:45:d5:3a:66:3e:59:
18:fc:ed:53:48:6a:26:91:e6:df:f9:05:ca:ba:f3:
64:e6:d2:35:97:4e:53:f7:7c:4c:0a:c3:c8:07:9d:
72:56:bb:e4:04:5c:2b:55:35:3b:f0:97:49:d8:04:
f8:1f:c2:16:8b:6e:24:f4:bf:5d:93:6a:49:df:4d:
98:d6:cd:0e:9b:29:80:c5:b7:c4:8c:8a:c6:b4:2d:
7c:b6:fc:01:3b:70:88:99:56:4d:3a:38:dd:df:1c:
5b:34:40:be:55:ef:d9:66:fd:e3:85:a0:0e:3d:97:
08:82:ec:92:60:f6:89:3a:ae:45:11:80:a3:52:9a:
7d:35:35:5e:d3:f0:b4:ec:8b:c8:9a:31:cc:43:56:
21:63:c2:00:c2:37:e3:d8:33:98:3b:11:36:12:fa:
19:ba:40:9d:58:f8:01:ed:65:8a:a4:eb:5a:9a:3d:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:7D:BB:17:A0:20:67:12:6F:A0:D8:01:81:28:1B:E2:5D:6B:A4
X509v3 Authority Key Identifier:
keyid:17:5D:42:02:2B:F5:0B:D6:C2:0F:30:B1:C5:AD:8C:94:E0:85:BC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/F11CAiv1C9bCDzCxxa2MlOCFvE4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F11CAiv1C9bCDzCxxa2MlOCFvE4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/EABFEBF26F5C11EF835A7B66C4F9AE02/A18C777C6F5F11EFAF849B28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.184.0/23
Signature Algorithm: sha256WithRSAEncryption
87:19:ee:bd:30:a6:f1:69:6e:e8:d5:c9:29:b7:b4:d6:34:c2:
b8:ae:d7:d7:b8:04:f9:b3:0a:68:fc:ae:f0:9f:d9:11:ad:b4:
75:76:37:2f:86:df:6c:60:2b:3b:e0:72:d6:11:50:28:19:1b:
ce:f4:02:8e:a6:e0:de:35:b5:eb:88:78:93:93:12:72:9f:4f:
3f:4b:90:dc:63:b5:34:e8:4e:02:3c:96:83:de:c8:cb:be:ba:
7e:36:cd:ac:ac:45:0b:98:cd:43:ba:13:77:81:a5:3f:0a:d8:
9f:01:02:0a:1c:0f:24:7e:74:54:03:e8:21:05:14:8e:c6:a8:
9a:60:b8:44:73:53:e1:07:b6:30:7a:a8:5c:32:3e:98:ef:07:
a9:b8:fb:85:7c:1b:2a:7f:b5:ca:a1:fc:dd:6d:43:d9:c1:ee:
ae:e4:96:18:d3:da:ad:3d:f0:63:d0:ac:42:8c:7a:b7:e5:55:
8f:c7:d3:88:6c:e7:cd:94:29:43:b3:61:8b:46:9d:64:20:0b:
ef:45:37:bd:0a:7a:78:0e:37:14:a3:6c:25:b1:aa:06:20:1d:
08:67:fd:23:ed:ab:20:2c:43:c2:25:31:21:ea:fd:3c:1e:dc:
7f:ba:a6:19:3e:6d:70:30:bf:75:d5:f8:9a:4d:52:c8:d8:c3:
13:2b:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:05 2025 by rpki-client