
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25E0DF60D7EB11EF82BE8B40C4F9AE02.roa
File: 25E0DF60D7EB11EF82BE8B40C4F9AE02.roa (raw, json)
Hash identifier: AcGroHpusg8cJ95bcdHgM4EHfA/K2L1kt8qNGgvfrkE=
Subject key identifier: 1E:CD:D2:72:41:37:A2:AF:27:07:1B:BA:92:CB:C3:E5:87:F7:60:5E
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3227
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25E0DF60D7EB11EF82BE8B40C4F9AE02.roa
Signing time: Mon 06 Jul 2026 16:28:38 +0000
ROA not before: Mon 06 Jul 2026 16:28:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4195
IP address blocks: 160.30.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12839 (0x3227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Jul 6 16:28:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd7b5-6455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:08:56:10:d9:02:fb:6f:03:3a:6b:5d:15:
2b:10:d2:cb:a0:7b:78:0a:9d:a8:79:81:21:2d:9d:
38:f1:68:80:25:96:3d:dd:5b:69:3e:7f:d9:2a:e2:
0e:97:e4:d7:db:34:19:95:69:40:4d:1f:1d:ab:62:
8d:79:97:81:93:97:cb:40:16:86:f6:52:be:ef:af:
ee:12:5b:47:ef:81:ba:fa:9b:b8:89:e1:ff:7e:4b:
34:34:c3:4c:52:d3:ad:d6:27:f4:d2:df:d9:77:42:
52:bf:2e:30:6b:f0:6b:29:5a:3a:9d:27:ea:43:e1:
81:3e:f3:dd:c6:2e:2f:0d:ed:17:a9:f5:96:03:96:
36:a9:18:08:5a:f0:1f:37:51:66:5a:b6:07:e3:7b:
d6:06:48:41:84:45:7d:9d:9a:9c:d8:e2:cb:e8:d5:
3f:f6:a4:ce:92:d4:34:49:11:94:01:74:1f:df:7c:
26:fc:29:d0:0a:86:64:79:2f:1e:b8:63:7c:86:50:
83:f9:25:5a:73:50:75:b0:7d:c6:50:73:5e:0a:ca:
ee:2c:d2:76:ac:f8:58:76:97:80:d7:1e:12:be:70:
af:10:7f:fa:48:2d:4a:ca:a6:c2:fe:51:93:0b:bb:
69:56:9f:78:62:20:98:68:92:a8:13:d1:23:d3:a0:
1c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CD:D2:72:41:37:A2:AF:27:07:1B:BA:92:CB:C3:E5:87:F7:60:5E
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/25E0DF60D7EB11EF82BE8B40C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.30.203.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ae:96:cb:4d:b8:35:13:1c:6e:9c:ea:79:18:43:6a:5e:56:
3f:35:b2:5f:59:57:0d:70:73:28:69:e5:ca:fe:17:6c:65:78:
84:6e:51:9c:af:e0:af:cc:6c:2f:f0:d8:0d:79:3d:be:75:29:
21:c3:2f:21:0d:06:24:6f:82:16:1d:de:57:4e:50:1c:15:68:
c7:13:3d:4b:89:cf:4e:fb:28:c4:c2:cf:c0:01:b4:54:af:24:
6a:c4:51:34:02:9b:aa:2c:1c:17:35:4a:ca:e5:c6:e0:45:c8:
04:94:0f:a7:eb:6a:98:8d:03:5c:a9:6c:9a:9b:e1:e9:99:7d:
23:e9:a2:9e:76:fd:9e:de:12:c1:34:91:6d:c6:72:e3:01:b3:
2c:00:57:33:1c:b4:bc:3d:17:15:21:19:c6:09:ec:18:f8:5b:
35:2e:a2:61:51:2d:e3:0b:d7:9c:23:32:0f:61:68:69:44:78:
6d:4a:18:ff:1e:9c:4d:9f:d4:f2:2d:e0:c2:8f:ba:33:dc:0e:
16:30:d6:25:a7:55:3d:4b:40:bf:a0:e0:46:ca:3e:a9:21:21:
60:2d:d4:62:44:ab:02:1d:f3:ab:da:5c:e5:c6:ab:86:05:85:
de:2c:73:4e:ea:96:35:c8:3b:dc:49:53:56:35:4c:d7:6f:06:
47:47:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:42 2026 by rpki-client