
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa
File: 3BC0C42E814E11EFBDAC5230C4F9AE02.roa (raw, json)
Hash identifier: yh3QR22bEDfVny4XRxA/GnbNIdfOr99N6iLhN7CyUvk=
Subject key identifier: B2:F6:2C:0B:97:81:B3:B1:0F:95:EE:3B:BC:92:95:D1:87:A1:07:27
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 2F09
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa
Signing time: Sun 31 May 2026 16:22:48 +0000
ROA not before: Sun 31 May 2026 16:22:48 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150577
IP address blocks: 160.25.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12041 (0x2f09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: May 31 16:22:48 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c6058-6782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:a1:61:4c:d7:ea:d6:d9:5f:b9:94:46:c8:
cc:d5:33:91:51:a0:1e:9e:14:f4:88:4d:c3:19:a8:
e7:e4:42:09:d1:9d:81:57:a3:b4:fb:a5:8c:86:d6:
ba:cd:4c:58:15:a3:2f:cf:81:75:c0:7b:ae:b3:c8:
6c:d9:d3:e3:b2:28:90:cc:52:d4:e4:1e:4d:c1:ce:
5c:8a:d6:d8:75:78:16:cf:6c:bd:74:7c:3a:a9:30:
f4:33:26:01:46:da:57:0e:7d:6a:9f:f7:71:cd:85:
96:87:5f:a4:60:c7:c3:57:ad:c4:51:95:43:41:28:
88:16:85:dc:12:92:46:61:e7:56:c4:44:a2:5d:01:
4e:4b:99:e5:ba:cc:29:f8:e0:1d:87:ad:6f:21:9d:
5e:cd:9e:cd:2b:31:ed:8e:b8:ee:35:45:ed:70:18:
bf:cb:14:bc:b5:03:ff:86:1f:00:6b:39:45:52:1f:
e5:7f:16:1f:5e:38:09:a5:9c:7d:1e:cd:60:96:dc:
78:18:fc:be:ee:d1:0f:c5:57:32:32:43:9c:e2:89:
bc:a8:c3:1c:ba:75:3b:3b:c7:bf:b9:07:96:5b:b7:
eb:56:97:5b:be:f6:06:ec:74:05:10:b0:1f:42:45:
c9:80:43:aa:42:f1:1c:41:9e:89:65:8f:2c:8d:bf:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:2C:0B:97:81:B3:B1:0F:95:EE:3B:BC:92:95:D1:87:A1:07:27
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:49:88:ed:8d:1e:69:57:b7:16:24:6d:6a:a5:33:53:91:be:
5f:14:ef:88:d2:4d:c9:61:e8:d7:1f:94:3e:81:52:93:c1:05:
9b:41:ba:d5:5c:5e:4b:60:c6:f1:82:2f:79:24:27:08:f1:13:
39:cd:f9:b4:ce:33:80:bf:78:25:e0:2b:ec:3e:79:be:4f:30:
9c:b0:b0:cf:82:09:34:f2:91:0b:c7:45:89:39:3c:f1:0d:e8:
33:67:45:72:b2:95:85:04:b6:ed:78:ab:6c:54:46:d1:26:2e:
cd:7c:35:b7:eb:5b:9a:de:d3:43:3f:ad:f0:c6:97:cb:1a:ab:
2d:8b:f9:2e:25:44:38:8e:ff:a7:fb:cd:5b:65:49:78:86:68:
21:ac:cb:9c:a5:55:af:ff:aa:99:1d:45:81:0d:52:d6:22:7b:
37:c9:d8:d9:c9:13:dc:bd:35:90:eb:b3:87:f0:ff:f4:b0:ce:
be:20:d0:5b:5c:05:a4:21:3c:60:d3:e8:17:02:17:0d:d8:6f:
99:06:ae:21:60:1e:f0:a8:18:be:67:55:f1:87:a0:df:aa:90:
29:06:1f:25:92:a0:95:19:b6:75:df:b1:11:0b:fe:99:bb:6c:
d4:8b:bc:c0:eb:b9:c2:ae:74:2d:0b:05:61:93:92:92:4c:1f:
41:9d:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:34 2026 by rpki-client