
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa
File: D24D5B8A3DD011EF883E3225C4F9AE02.roa (raw, json)
Hash identifier: jf0GeJh7153yOoZ8nQWNKn3U6Nop1tQWQSkXEcpgkNs=
Subject key identifier: 5E:FB:E1:79:3B:2C:6B:47:1C:91:E1:D7:EC:D8:12:76:68:F9:E2:0F
Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial: 20A5
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:06:13 +0000
ROA not before: Thu 28 Aug 2025 14:51:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 152940
IP address blocks: 160.25.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 14:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8357 (0x20a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Validity
Not Before: Aug 28 14:51:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a609d5-ff6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:26:c4:c9:b0:71:da:70:91:c5:f3:4f:40:
e4:e0:33:5f:a0:4d:70:c4:2e:c8:6a:3d:56:c4:db:
f5:68:d8:9d:95:08:7c:df:56:6f:87:c0:63:97:d1:
4f:ea:17:41:f9:00:4d:d8:f4:6c:c8:2f:6f:87:7e:
5c:be:8f:01:52:a3:42:98:ae:55:fe:d9:38:19:f3:
95:30:63:d8:cb:26:54:92:66:ae:8e:ed:1a:44:ac:
2e:7b:d8:b7:54:7c:a4:ea:53:5f:3f:d0:98:bb:73:
03:43:4d:8e:94:9d:0e:0a:c8:28:6f:1c:5a:74:28:
16:bf:00:46:cf:65:ef:5d:cd:78:23:7c:95:68:f7:
ec:8a:84:7b:bf:16:93:28:64:73:22:65:21:7c:01:
73:8f:83:8e:ab:3d:a6:7e:12:bf:bf:3d:71:33:31:
be:22:4e:7f:cc:6b:d3:43:96:ef:d0:8c:c0:d5:9a:
49:34:0c:57:b6:cb:f4:0e:9d:da:8c:fa:18:f3:f9:
e9:67:52:23:dd:1c:b0:3c:bd:c3:d9:37:20:23:2f:
e3:83:2d:df:c5:c7:1c:09:2a:32:3c:04:0b:52:8b:
a0:31:6d:3a:64:ed:b3:27:49:81:88:e7:96:fb:23:
fb:a0:c3:d7:2d:26:c8:f2:2c:6b:f4:0a:a2:f5:4d:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FB:E1:79:3B:2C:6B:47:1C:91:E1:D7:EC:D8:12:76:68:F9:E2:0F
X509v3 Authority Key Identifier:
keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D24D5B8A3DD011EF883E3225C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.78.0/23
Signature Algorithm: sha256WithRSAEncryption
88:b1:8a:bc:f1:ab:a9:93:18:94:52:56:2d:2c:86:80:88:3f:
33:22:05:8f:25:b2:00:29:ca:81:a3:6e:81:c5:e5:b6:08:95:
42:df:ad:05:47:56:17:d5:80:18:bc:9a:8b:4d:b3:a3:52:41:
2a:22:36:b3:2e:d5:01:4b:80:60:4a:11:1a:08:42:47:86:0e:
03:11:0e:89:93:b0:77:41:9f:f2:c9:54:2c:16:87:47:ad:8b:
b9:86:1b:dd:ed:67:69:42:38:b6:b4:2e:c1:e5:f7:e9:17:38:
2d:f8:5d:62:42:00:71:eb:a9:95:6c:5a:1c:81:fc:14:ac:ee:
04:56:a2:92:29:53:72:6b:70:42:b2:1f:10:1c:84:d7:42:3b:
46:0b:32:27:a0:2d:99:d6:e0:77:28:e8:0f:fa:bb:2d:d6:c1:
50:da:e9:33:3f:a7:82:a0:d6:ba:af:ca:b4:1b:f9:61:5e:d2:
9c:19:0b:c8:15:da:86:df:6e:98:2d:e7:0d:6b:42:49:f1:c8:
46:22:31:75:18:ae:03:37:64:8a:7b:53:ec:40:9b:2e:cf:fd:
01:c7:de:11:f3:d0:1c:08:1a:6a:7a:4f:43:97:96:98:cf:11:
d0:4b:c0:d2:98:8e:bf:5d:68:16:ea:bf:92:6a:c7:03:f2:d4:
64:df:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:52 2026 by rpki-client