
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
File: 3A0740706A0111F1AE9FA49E6847A888.roa (raw, json)
Hash identifier: TB+qGWyCG+3ATfDbu8QRRgTA96zkFuHMqGdvOV499L4=
Subject key identifier: 58:2E:01:F2:04:74:33:C3:2F:46:64:87:A6:D3:86:85:DF:7A:1A:3C
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 22FA
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
Signing time: Wed 17 Jun 2026 04:01:33 +0000
ROA not before: Wed 17 Jun 2026 04:01:33 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154552
IP address blocks: 160.25.232.0/24 maxlen: 24
160.25.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8954 (0x22fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Jun 17 04:01:33 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=6a321c1d-f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:b0:92:ca:52:a7:3b:ac:65:00:83:92:7e:
15:81:fc:50:15:88:ac:7c:2f:de:cd:eb:e1:5d:7c:
03:88:37:0e:e3:f3:16:ca:3f:35:5f:e6:d3:20:80:
61:e3:a4:03:6d:49:21:8d:3b:09:79:0a:64:ed:ac:
dd:1e:dd:59:b2:85:ca:35:f1:fc:34:7a:d8:19:6d:
24:08:77:08:a8:fc:d2:1c:7a:66:00:6c:32:d9:e3:
b0:a2:e2:f5:da:e5:6e:53:f6:ea:a7:47:9c:d5:97:
32:d2:7e:98:b8:85:dd:3c:fe:0a:a3:2b:43:84:25:
c2:21:71:50:9a:1e:88:4c:32:34:38:00:14:39:4b:
e5:6a:32:44:bf:cc:85:51:94:65:e0:b2:28:50:43:
bd:33:dd:07:66:f5:eb:dc:0a:88:c3:f2:7a:0a:a6:
96:27:db:4e:67:3c:91:44:dd:a6:5e:49:28:3f:60:
d8:ea:0a:1c:e4:db:cf:56:05:dd:98:7b:dd:8f:e3:
62:c7:4a:3b:6d:39:7b:63:61:07:f7:d8:17:ab:4f:
45:43:c6:73:8d:f3:ae:42:db:50:a9:ab:01:c8:88:
f4:23:e7:2c:c0:60:5b:c7:54:8e:f0:72:02:32:4e:
e4:b0:bd:79:ad:92:4a:41:29:78:9d:df:67:42:54:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:01:F2:04:74:33:C3:2F:46:64:87:A6:D3:86:85:DF:7A:1A:3C
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.232.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c2:ea:00:52:5a:d2:15:4d:7f:2c:dc:47:f1:12:e2:e9:40:
af:3a:73:48:1f:8f:34:44:b9:40:b2:fb:e5:5e:71:66:92:03:
2d:0c:28:4f:92:a6:05:58:36:c4:90:be:ba:af:ce:13:5e:b4:
32:91:8a:85:f6:7e:29:f1:41:ec:a3:29:ed:2c:78:77:24:5b:
74:4e:ef:d8:7d:bf:a9:5a:0b:e2:b1:77:a5:e2:1a:1f:22:80:
b5:ac:9f:a3:60:6c:3b:3f:b3:e2:0c:74:f8:24:bf:49:0f:c3:
f3:bf:92:8c:f2:81:ac:88:d8:b7:a3:96:49:44:63:bb:db:46:
91:f2:9d:6b:d2:57:41:c9:55:69:40:76:1b:ae:06:26:aa:70:
b0:ed:4b:64:47:d4:04:ee:f9:69:c9:1d:29:bc:41:a5:dc:ca:
96:8a:51:67:5c:d6:6d:c4:4d:a9:84:55:78:f2:4e:8a:6c:22:
13:a9:d6:67:60:13:07:0b:21:1a:cf:d3:91:2d:e7:cd:4c:9a:
62:f0:c4:c9:46:b8:0b:76:77:42:c8:3b:7f:62:be:17:22:72:
71:46:75:9a:52:9b:4f:a6:8a:89:4f:30:2c:67:bf:23:ff:cb:
71:58:5f:36:e5:0e:fc:11:74:f6:56:98:e2:a1:38:2f:29:76:
26:45:5a:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYwNjE3MDQwMTMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMyMWMxZC1mOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtUewkspSpzusZQCDkn4VgfxQFYisfC/ezevhXXwDiDcO4/MWyj81X+bTIIBh
46QDbUkhjTsJeQpk7azdHt1ZsoXKNfH8NHrYGW0kCHcIqPzSHHpmAGwy2eOwouL1
2uVuU/bqp0ec1Zcy0n6YuIXdPP4KoytDhCXCIXFQmh6ITDI0OAAUOUvlajJEv8yF
UZRl4LIoUEO9M90HZvXr3AqIw/J6CqaWJ9tOZzyRRN2mXkkoP2DY6goc5NvPVgXd
mHvdj+Nix0o7bTl7Y2EH99gXq09FQ8ZzjfOuQttQqasByIj0I+cswGBbx1SO8HIC
Mk7ksL15rZJKQSl4nd9nQlSC1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFguAfIE
dDPDL0Zkh6bThoXfeho8MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvM0EwNzQwNzA2
QTAxMTFGMUFFOUZBNDlFNjg0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBnoMA0GCSqGSIb3DQEBCwUAA4IBAQBEwuoAUlrSFU1/LNxH8RLi
6UCvOnNIH480RLlAsvvlXnFmkgMtDChPkqYFWDbEkL66r84TXrQykYqF9n4p8UHs
oyntLHh3JFt0Tu/Yfb+pWgvisXel4hofIoC1rJ+jYGw7P7PiDHT4JL9JD8Pzv5KM
8oGsiNi3o5ZJRGO720aR8p1r0ldByVVpQHYbrgYmqnCw7UtkR9QE7vlpyR0pvEGl
3MqWilFnXNZtxE2phFV48k6KbCITqdZnYBMHCyEaz9ORLefNTJpi8MTJRrgLdndC
yDt/Yr4XInJxRnWaUptPpoqJTzAsZ78j/8txWF825Q78EXT2VpjioTgvKXYmRVrc
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:09:10 2026 by rpki-client