
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/37C8E00A6EA011F0835F9E19C4F9AE02.roa
File: 37C8E00A6EA011F0835F9E19C4F9AE02.roa (raw, json)
Hash identifier: ObDEmQtG1k/lwRkpOy9F2JW1dUiE7e1eGbOxUKu27dQ=
Subject key identifier: 44:16:2B:CC:31:10:47:7B:39:78:7E:BF:6D:7F:88:AD:A3:62:1C:B6
Certificate issuer: /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial: 0194
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/37C8E00A6EA011F0835F9E19C4F9AE02.roa
Signing time: Wed 05 Aug 2026 05:55:27 +0000
ROA not before: Wed 05 Aug 2026 05:55:27 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 153174
IP address blocks: 160.25.230.0/23 maxlen: 23
160.25.230.0/24 maxlen: 24
160.25.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 18 Aug 2026 04:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Validity
Not Before: Aug 5 05:55:27 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a72d04f-595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:15:53:77:f0:a2:81:b4:e3:c5:7a:3d:30:
ae:53:71:11:72:9d:24:95:1c:c6:bf:98:93:e3:d1:
6d:06:17:d7:47:99:31:18:73:1e:d7:1e:78:39:85:
23:ae:09:05:df:88:69:54:5b:0a:96:db:ad:05:89:
0b:80:7d:72:c1:15:31:15:5a:04:76:eb:44:64:18:
cd:13:6e:33:8b:2f:f8:37:00:67:0a:e1:93:35:48:
67:9e:35:47:59:c5:47:ee:74:a4:0d:6b:68:46:14:
0a:f4:3c:be:9f:60:93:a1:11:4a:00:11:7f:52:a3:
db:f5:62:40:8b:b8:5d:8f:74:aa:53:3c:ad:0f:36:
f1:61:15:a6:c3:2b:3c:97:58:13:e4:fb:8c:a4:37:
a5:40:fd:e0:e3:84:9f:87:64:e4:a1:19:ba:31:54:
e7:84:50:94:99:f3:b5:99:26:9d:bc:98:0f:94:99:
48:dc:b4:94:bf:4b:7c:b0:06:75:cf:3f:94:13:11:
54:b5:76:a0:e1:ff:95:6b:17:3d:5f:12:8a:a3:25:
e9:dc:87:ce:03:f6:2a:5b:0d:6a:fc:c0:85:58:b4:
7b:66:8f:16:2c:57:b9:fc:9d:51:d3:3a:b0:43:8d:
8c:f3:d5:58:cb:1f:c2:b0:a3:df:99:7c:08:a7:c8:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:2B:CC:31:10:47:7B:39:78:7E:BF:6D:7F:88:AD:A3:62:1C:B6
X509v3 Authority Key Identifier:
keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/37C8E00A6EA011F0835F9E19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.230.0/23
Signature Algorithm: sha256WithRSAEncryption
06:af:61:f2:ba:80:4b:ba:9e:3e:a5:e5:ad:8c:25:79:69:9d:
55:b2:c7:8e:b4:da:4b:d4:01:93:fd:4f:f2:f3:8e:e7:02:69:
16:39:65:86:a3:2a:d3:c9:fe:1f:96:8e:34:44:e7:11:56:d0:
c6:84:79:6f:1b:48:c3:98:31:cd:b5:fd:f6:d1:7f:5a:5b:e2:
13:92:9f:a0:43:9d:46:3f:55:cb:ae:85:de:7d:73:49:44:be:
26:67:2e:b7:9b:42:a5:82:0c:98:df:56:fe:b1:10:87:97:56:
6d:f9:2f:d7:ad:eb:45:6f:35:12:9f:d0:5f:2c:b2:62:83:b0:
82:44:29:85:12:f0:b6:e1:5e:58:23:2f:1b:ba:36:90:dc:5a:
ba:7f:34:51:e9:31:ad:e5:d9:4b:18:c7:bf:ad:9f:fb:b3:2e:
e4:30:c3:53:f5:f1:5c:6c:6b:ea:4e:4b:e6:ab:fa:2f:4b:bc:
9d:e2:70:9f:67:ca:c4:a5:b8:ff:c4:86:ca:fe:85:dc:58:73:
41:a2:29:f2:a2:7f:66:48:b7:cf:e8:d4:40:86:f3:c6:b5:62:
90:13:ed:b0:09:c7:3d:a5:20:2f:db:2f:b7:5c:4e:c1:9e:99:
37:d2:5a:64:15:2a:30:51:14:db:59:f1:bf:5b:3c:91:6c:1d:
1d:ad:f1:a6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM5MUYxMTAvBgNVBAUTKEJBODVEOTFEMjRBQ0E5RTlFMDMxMUU1NTJEQkYzNzU5
NzYzQTYyQkEwHhcNMjYwODA1MDU1NTI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcyZDA0Zi01OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnSIVU3fwooG048V6PTCuU3ERcp0klRzGv5iT49FtBhfXR5kxGHMe1x54OYUj
rgkF34hpVFsKltutBYkLgH1ywRUxFVoEdutEZBjNE24ziy/4NwBnCuGTNUhnnjVH
WcVH7nSkDWtoRhQK9Dy+n2CToRFKABF/UqPb9WJAi7hdj3SqUzytDzbxYRWmwys8
l1gT5PuMpDelQP3g44Sfh2TkoRm6MVTnhFCUmfO1mSadvJgPlJlI3LSUv0t8sAZ1
zz+UExFUtXag4f+Vaxc9XxKKoyXp3IfOA/YqWw1q/MCFWLR7Zo8WLFe5/J1R0zqw
Q42M89VYyx/CsKPfmXwIp8h5aQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEQWK8wx
EEd7OXh+v21/iK2jYhy2MB8GA1UdIwQYMBaAFLqF2R0krKnp4DEeVS2/N1l2OmK6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81MDgzNUU2ODQ1
NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi91b1haSFNTc3FlbmdNUjVWTGI4M1dYWTZZ
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VvWFpIU1NzcWVuZ01SNVZMYjgzV1hZNllyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjM5MUYvNTA4MzVFNjg0NTcwMTFFRjlDOEI4RTcxQzRGOUFFMDIvMzdDOEUwMEE2
RUEwMTFGMDgzNUY5RTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBnmMA0GCSqGSIb3DQEBCwUAA4IBAQAGr2HyuoBLup4+peWtjCV5
aZ1VsseOtNpL1AGT/U/y847nAmkWOWWGoyrTyf4flo40ROcRVtDGhHlvG0jDmDHN
tf320X9aW+ITkp+gQ51GP1XLroXefXNJRL4mZy63m0KlggyY31b+sRCHl1Zt+S/X
retFbzUSn9BfLLJig7CCRCmFEvC24V5YIy8bujaQ3Fq6fzRR6TGt5dlLGMe/rZ/7
sy7kMMNT9fFcbGvqTkvmq/ovS7yd4nCfZ8rEpbj/xIbK/oXcWHNBoinyon9mSLfP
6NRAhvPGtWKQE+2wCcc9pSAv2y+3XE7Bnpk30lpkFSowURTbWfG/WzyRbB0drfGm
-----END CERTIFICATE-----
Generated at Thu Aug 13 03:06:22 2026 by rpki-client