
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
File: 70ED9D2837D111EF99A8011CC4F9AE02.roa (raw, json)
Hash identifier: mOCADM7rUyrVZQHR29QGDW6mWHRCcP7t6l0A8fFGuLc=
Subject key identifier: 22:D9:B7:41:35:53:10:06:D1:8B:D4:2A:80:5E:A6:E2:40:B0:F6:79
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 0140
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:35:16 +0000
ROA not before: Fri 25 Jul 2025 06:13:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153045
IP address blocks: 160.25.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 04:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Jul 25 06:13:34 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58404-b9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:1f:e5:b3:96:07:68:20:b8:2b:90:2a:87:
0a:37:47:e5:58:9d:e5:92:93:eb:c3:01:0d:7e:f7:
94:8d:90:dc:a7:dd:e8:b1:c7:e2:3b:d0:4e:fd:26:
04:05:25:55:14:23:4d:40:be:a5:28:1b:99:0b:2a:
3c:54:ea:50:f7:ed:ff:32:35:50:db:9d:74:68:f5:
32:6c:44:3f:eb:61:fd:f3:d1:60:f4:01:55:97:a5:
60:13:8e:0d:6d:0c:2e:57:c4:f9:09:2b:95:cd:52:
b7:9b:5a:cd:53:a1:5a:bf:f6:08:45:fe:60:9d:ae:
a9:82:f0:84:1f:75:0f:e3:ac:23:31:2e:9a:ff:cd:
d4:65:71:44:5a:14:2e:24:32:00:64:5e:05:81:3f:
59:60:ca:26:3d:b3:75:c3:ad:8f:b5:a6:2c:ec:27:
e6:73:b0:b2:18:77:0e:93:26:5d:52:00:a0:4a:f1:
f7:7d:28:dc:ae:5d:23:98:ce:e1:6e:e2:2f:52:06:
f2:18:37:9e:1e:47:bc:1b:bc:23:0f:af:8a:21:83:
16:da:d0:0d:e5:bd:ec:e5:d1:67:3f:21:a1:ba:07:
03:32:47:44:cf:70:f0:e3:a3:e6:92:42:fb:4a:9a:
d7:3b:d2:21:68:b5:ca:7b:8e:db:f0:be:80:2b:82:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D9:B7:41:35:53:10:06:D1:8B:D4:2A:80:5E:A6:E2:40:B0:F6:79
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.44.0/24
Signature Algorithm: sha256WithRSAEncryption
65:37:88:11:57:69:19:0c:5d:c5:fe:01:99:10:e3:03:f2:f9:
00:c6:0f:73:13:d2:ee:ea:12:a5:b4:a4:8a:51:80:81:62:e4:
a3:fe:4a:19:26:16:91:cd:32:e7:c2:a8:08:69:b3:2c:32:63:
ce:90:9a:da:b3:43:7e:de:a8:71:a9:d7:b3:ab:6f:4f:bc:ce:
9c:fe:70:53:41:e8:73:f2:70:e5:8e:66:9f:9e:23:a7:7e:4d:
f3:8b:0f:b7:9b:4c:d5:0d:ac:b2:14:cb:ea:65:b8:9e:eb:0c:
bf:51:08:2c:77:95:99:bc:a4:27:25:0a:57:9f:bc:4a:62:0b:
fb:d6:6e:f5:5e:d6:3d:3f:b6:75:1c:ff:95:2f:fd:92:4c:2f:
44:91:63:d8:ab:73:08:4d:19:27:22:4e:0c:05:66:ba:9d:f8:
16:20:76:f5:d8:db:50:96:0c:0c:05:5e:2b:35:45:ac:93:1f:
d0:af:54:09:b8:89:e6:36:7e:32:db:44:70:cf:cb:32:ef:8b:
b2:77:d2:80:07:d3:c8:11:93:1e:af:53:ca:6b:a3:02:c3:12:
9c:93:b3:fc:e2:77:18:7d:5a:e6:d7:92:4b:9a:41:6b:3e:79:
d0:db:f7:29:6d:5d:f1:a9:05:ba:bd:53:ba:6f:2e:9c:02:31:
38:ed:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:06 2026 by rpki-client