
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/302768A6C8CE11F1AD968CFE6611F970.roa
File: 302768A6C8CE11F1AD968CFE6611F970.roa (raw, json)
Hash identifier: xjhdiBJYZ/QzBii4+RbevwzS+oPnfsx9fU9b+5NEeTA=
Subject key identifier: 80:34:73:72:92:58:8B:04:A2:4B:2A:45:64:64:0A:02:A7:B6:EA:B4
Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial: 01D2
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/302768A6C8CE11F1AD968CFE6611F970.roa
Signing time: Thu 15 Oct 2026 19:25:32 +0000
ROA not before: Thu 15 Oct 2026 19:25:32 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154947
IP address blocks: 160.25.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 04:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466 (0x1d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Validity
Not Before: Oct 15 19:25:32 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6ad128ac-c886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:a9:9c:e2:ea:fe:0c:4c:67:8c:b5:37:13:
88:be:52:17:d7:52:bc:23:5b:7e:ec:64:f3:db:07:
24:62:56:59:c5:65:05:6f:90:80:65:d1:62:1d:f3:
1d:2b:2a:c4:b7:a1:91:3f:c9:e0:36:aa:46:42:46:
e0:aa:77:58:68:11:eb:84:b2:a9:ea:5b:0e:7f:75:
2b:1f:df:28:00:78:9e:07:b2:d3:98:56:fe:8b:a1:
9b:2a:f4:f9:3f:89:c0:b9:f8:e9:54:d0:50:75:15:
17:97:d4:f5:9e:bd:f1:ef:4a:2d:75:dd:be:b8:2b:
e4:3e:ca:5f:b2:9f:be:01:e7:67:6c:ab:c6:57:de:
f2:f5:b6:bf:5d:56:9a:41:5b:1b:4a:cb:96:be:1b:
e5:51:29:89:15:97:11:75:fd:c6:c9:09:95:96:15:
36:22:fd:80:52:08:88:26:30:ba:58:44:ce:89:2e:
2e:b4:b4:19:ea:f8:57:5b:c4:6b:9b:93:eb:67:a1:
e2:9c:b1:a7:69:8d:74:10:34:ce:81:e9:8e:91:8d:
28:53:b6:d7:a6:bf:a7:b1:21:25:6e:ce:07:7d:f5:
52:c6:60:07:07:f3:1e:ba:0f:f2:e8:ca:ef:2f:d6:
31:36:fc:6d:f1:30:ab:47:b2:08:c7:c2:fa:87:94:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:34:73:72:92:58:8B:04:A2:4B:2A:45:64:64:0A:02:A7:B6:EA:B4
X509v3 Authority Key Identifier:
keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/302768A6C8CE11F1AD968CFE6611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.224.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ed:8e:70:ec:e7:16:00:58:a0:d0:b3:ac:5e:d3:17:35:c4:
45:63:f3:bc:99:d1:ee:22:20:b7:79:5a:4b:e7:8d:e0:0b:18:
dc:6b:80:79:14:d9:5e:8a:8a:89:73:6c:7f:b3:ef:2b:6e:e4:
e6:bb:df:94:16:e9:7b:f9:7f:04:44:38:9b:78:c4:cb:b0:4f:
b0:7c:96:71:4e:a6:3b:67:63:d0:0c:f5:57:42:3e:03:a6:34:
6e:9d:3c:cf:bb:cf:be:87:e0:e9:7d:e1:53:ef:7a:78:7e:2f:
c0:82:99:56:4c:79:43:0a:47:56:bf:28:e5:cd:ba:ed:11:e3:
cc:a1:6d:d6:13:18:40:6e:b7:87:fc:25:67:b6:5d:21:b5:e9:
f9:2c:dc:5e:23:c0:ae:39:d3:20:94:f1:bf:d2:69:47:72:b1:
51:88:8f:24:ae:93:39:13:5b:99:78:cd:cf:89:6a:6d:01:52:
f2:5f:96:0d:f4:70:8f:5b:fa:3c:ca:c3:09:ae:d2:5d:92:f4:
7b:43:80:b8:a3:96:ff:4e:29:82:a3:68:cb:6f:e4:34:59:6d:
d3:63:29:60:23:94:cc:0e:02:61:6d:5f:bd:74:3a:ac:eb:51:
63:ea:83:75:66:de:c7:09:18:d2:68:21:e9:6b:7b:e3:7d:a7:
8f:77:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:13:14 2026 by rpki-client