
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa
File: 0D38E31833A411EF82E92524C4F9AE02.roa (raw, json)
Hash identifier: dMfHfrbTyibI/vfMvch+qwnCQAs6chEo73/KA4HRzas=
Subject key identifier: 61:5A:27:E3:3A:B3:25:C3:79:6B:C7:19:E9:51:15:5E:D9:38:F8:7D
Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Certificate serial: 0198
Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa
Signing time: Mon 17 Aug 2026 05:54:08 +0000
ROA not before: Mon 17 Aug 2026 05:54:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134371
IP address blocks: 160.25.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 01 Sep 2026 04:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724
Validity
Not Before: Aug 17 05:54:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a82a200-270f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:37:26:43:3e:c2:59:a9:11:11:5e:cb:ee:
79:2a:a3:1c:0b:bd:d1:3c:c7:7a:8d:5a:49:32:1c:
68:95:fe:5e:50:ae:5b:db:90:4c:04:65:9c:20:2a:
dc:81:f5:53:38:9a:04:60:08:b3:45:83:d9:eb:41:
05:05:dc:6b:b7:81:3b:f3:cc:ba:94:ea:b9:ef:a0:
b0:11:e2:0a:ba:16:6b:3b:37:d6:30:eb:e2:45:36:
b4:c3:ed:78:a2:8f:f0:f3:8a:e9:8d:00:09:39:82:
a8:2d:33:4f:79:a6:47:3b:d4:7e:dc:4a:a2:29:c4:
dd:ff:c5:82:4f:69:f8:a6:fb:76:fa:fe:f1:d1:76:
ff:3e:95:d5:59:8e:4e:cd:cf:48:4a:f2:ed:42:90:
61:bd:a1:56:53:18:2d:fc:9e:71:d5:2c:bc:4e:ad:
df:18:55:3d:71:3e:3d:33:49:dc:69:04:6f:f5:eb:
6d:98:12:b1:94:25:cc:d2:53:b9:70:98:b0:41:82:
88:1c:36:23:85:97:2c:0c:41:7e:7f:ff:34:26:d0:
69:94:c0:85:9c:f3:8e:8e:68:b0:bd:bb:84:fb:3b:
34:60:1c:2f:6d:3b:4c:ea:44:5e:4a:7c:73:8e:c5:
69:4d:2b:41:26:16:ed:c4:e4:1c:5f:5c:90:e3:01:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5A:27:E3:3A:B3:25:C3:79:6B:C7:19:E9:51:15:5E:D9:38:F8:7D
X509v3 Authority Key Identifier:
keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.25.8.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:ec:c3:1e:77:2f:90:c7:97:b3:ee:de:94:c4:9c:04:83:ac:
48:f7:b1:f0:cc:5b:5e:3e:10:50:a2:34:32:c1:13:98:80:88:
d5:6c:4a:9d:f7:d0:39:b1:10:a7:13:9d:ee:fd:fd:a9:e1:a9:
2f:67:c2:a0:f3:dc:18:18:fd:0a:0c:3a:a3:34:74:eb:ea:af:
8d:6b:3b:09:e7:27:88:20:2d:03:7b:09:1e:99:30:08:d8:ce:
22:55:b7:58:05:fb:8f:b4:7d:43:df:6e:bb:c6:16:41:eb:f5:
1a:2d:d3:73:5f:71:55:1f:9e:99:68:5d:e4:0f:cf:71:c8:d7:
fb:cd:58:98:d7:f4:37:c5:7e:ee:f0:27:51:28:cc:d6:37:72:
22:95:94:f2:23:90:ae:fb:73:82:e7:61:ab:0c:35:0c:47:50:
9b:10:25:02:34:5e:f7:3f:03:ee:9e:1d:62:64:dd:31:2b:ce:
6d:3b:9d:77:e0:ab:02:fb:ad:cd:b3:dc:63:ad:a8:c6:2f:06:
34:04:86:a1:36:1b:70:9c:ba:89:08:71:1b:f8:5d:94:e5:6a:
7e:bb:7c:ce:00:85:60:1f:30:b9:d0:36:4b:11:c1:30:ce:a0:
ec:45:ea:e0:20:3a:4d:d6:f8:da:87:53:c2:88:40:14:95:94:
22:4a:f7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:58 2026 by rpki-client