
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
File: D525D9EE7E9311F19E24FC4D5FA30FBC.roa (raw, json)
Hash identifier: /+XJwpoYaaPxuUpocTQ1TOPsH5/A3dpDpHYUXNcoxEY=
Subject key identifier: 4E:13:77:38:40:E7:C2:4B:20:30:A3:A0:CE:A4:3D:3D:1B:07:66:FB
Certificate issuer: /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial: 01B9
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
Signing time: Mon 31 Aug 2026 04:53:45 +0000
ROA not before: Mon 31 Aug 2026 04:53:45 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 154024
IP address blocks: 160.25.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Validity
Not Before: Aug 31 04:53:45 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9508d9-556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:37:12:f3:d6:f3:b1:2d:2b:28:5f:86:2c:d3:
e0:40:34:c6:b8:e9:89:a0:19:8b:28:53:7f:15:4a:
b8:b8:28:90:d2:f7:ec:d7:d0:c2:ae:d6:1c:55:17:
d3:de:f6:6b:b8:cc:ab:1d:86:c0:42:1e:55:08:dc:
ce:c2:b0:5e:9d:e2:ce:17:04:fd:96:1d:1d:29:59:
3f:36:01:08:94:b8:8e:3b:c3:41:7c:0b:64:2b:01:
59:7e:36:2e:9a:fc:5c:7c:7b:ef:f9:04:4c:a9:f2:
36:67:c9:2f:7e:00:8a:ab:a6:f9:fc:2f:60:fa:5c:
35:e0:e4:85:f6:66:2a:a9:10:b2:61:b6:25:7c:78:
05:0d:99:d7:6b:a7:ca:ce:3c:89:d5:7b:0f:fa:74:
1c:02:72:05:84:82:89:8d:ce:cf:a6:40:80:c1:af:
70:a9:3a:ca:57:a4:03:d6:c9:19:25:16:c8:a4:23:
7c:e9:7d:c4:0b:5d:fe:8a:83:d5:3d:be:b6:19:5a:
df:67:3f:0c:e3:c8:44:c0:30:d5:6d:96:b4:4b:bf:
3d:80:d7:4b:66:5e:8f:e3:03:59:53:87:8f:44:d6:
c7:68:60:a2:27:61:0a:a4:2d:66:ec:88:5c:37:fa:
e9:f8:ed:48:cd:89:b3:c7:94:14:19:bf:3d:d4:bb:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:77:38:40:E7:C2:4B:20:30:A3:A0:CE:A4:3D:3D:1B:07:66:FB
X509v3 Authority Key Identifier:
keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.224.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6d:18:d9:27:00:31:74:ec:2f:99:2c:2b:e4:b8:e5:7d:fd:
ec:25:72:a0:9d:84:13:68:f6:3e:d7:82:6b:b9:1a:38:a6:de:
62:8a:e0:79:2a:57:63:7e:4a:ce:f6:dd:a0:da:34:7c:f0:8e:
d5:79:ad:47:c7:7e:66:d7:6a:e7:d6:19:fb:3b:85:bd:6c:07:
d9:5f:32:c1:b0:3a:05:04:d2:4b:7c:0f:fc:aa:bf:a0:aa:29:
ef:ef:13:68:bf:4c:37:78:ef:47:e1:78:ef:46:04:41:a5:b7:
47:db:25:89:97:01:17:53:69:21:52:21:24:8e:4a:bf:c1:30:
08:57:7c:cb:25:b5:a1:4a:f3:ab:7b:1a:41:5e:dc:6a:7c:5b:
96:05:99:2e:21:73:36:63:be:45:38:9e:88:92:f9:b7:a4:ed:
3d:5e:d1:1d:0f:3e:f1:8f:97:04:ce:31:05:51:98:54:21:21:
d8:96:54:11:4d:d6:a0:75:a4:f5:ce:93:cf:50:e6:83:9e:48:
02:81:69:0b:8e:b9:5c:52:49:69:61:ce:12:08:06:a0:81:e1:
6f:43:52:b1:73:1a:8f:5e:b3:69:81:d2:27:c7:98:ac:12:8e:
d2:7d:93:4f:69:15:24:1b:54:17:7e:9f:f7:1d:d3:e6:68:81:
db:e7:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:36:19 2026 by rpki-client