
$ rpki-client -vvf rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/691B3B36FCC611EF8337B652C4F9AE02.roa
File: 691B3B36FCC611EF8337B652C4F9AE02.roa (raw, json)
Hash identifier: 9OScaduExEngNPz5wsuWcHvwLQIw8gltPcbBA5tFHWk=
Subject key identifier: 1A:CF:5F:62:97:35:4E:B4:3C:ED:E0:92:31:8C:A4:E6:19:F0:82:18
Certificate issuer: /CN=A9114FD8/serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Certificate serial: 02
Authority key identifier: 80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/691B3B36FCC611EF8337B652C4F9AE02.roa
Signing time: Sun 09 Mar 2025 09:10:57 +0000
ROA not before: Sun 09 Mar 2025 09:10:57 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153623
IP address blocks: 163.61.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114FD8, serialNumber=80463074D83F5E80354D1970586F54A8965E18D2
Validity
Not Before: Mar 9 09:10:57 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67cd5b21-b64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:46:28:96:4f:bc:76:c7:01:d0:6e:c4:1a:
55:38:35:d4:11:f3:6d:53:5f:ab:f7:bc:25:1a:f8:
78:0f:cc:0a:e0:ad:0f:43:28:ce:c8:e5:dc:e3:42:
36:59:5c:7a:6f:f6:e7:e2:04:f8:25:04:68:7b:c7:
24:8f:1d:b8:ac:aa:f6:3b:6f:cd:7d:8d:4e:38:af:
fa:00:df:8e:22:43:fd:a2:fa:64:69:4a:07:25:be:
2e:86:b6:3c:a3:52:b0:a2:e6:a4:26:10:8f:ec:27:
17:9b:f2:06:e2:17:60:b2:56:76:9d:6c:07:4b:e6:
89:42:55:0e:7e:cd:c6:98:72:60:31:d9:0e:08:4e:
9a:aa:69:dc:c6:3b:8b:50:ae:e6:58:d3:09:d7:4e:
68:59:ab:0b:41:eb:e1:c5:bf:a9:13:42:85:f0:2d:
30:78:3e:08:d7:56:98:49:de:7b:4c:a1:22:f9:2c:
62:05:90:95:15:af:a4:3c:de:65:ed:13:df:44:78:
c5:2a:1c:db:3d:8b:8e:3f:49:60:27:c6:ba:54:46:
9d:55:9d:07:e5:79:86:31:03:68:86:70:9b:ad:a4:
34:74:2a:af:1c:bb:2a:78:e3:65:30:95:25:ed:43:
9c:fb:88:8a:2f:3b:ba:17:e6:07:bd:d8:12:4f:a1:
33:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CF:5F:62:97:35:4E:B4:3C:ED:E0:92:31:8C:A4:E6:19:F0:82:18
X509v3 Authority Key Identifier:
keyid:80:46:30:74:D8:3F:5E:80:35:4D:19:70:58:6F:54:A8:96:5E:18:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/gEYwdNg_XoA1TRlwWG9UqJZeGNI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gEYwdNg_XoA1TRlwWG9UqJZeGNI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114FD8/F3512A0AFCC511EFA9090852C4F9AE02/691B3B36FCC611EF8337B652C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.192.0/23
Signature Algorithm: sha256WithRSAEncryption
04:7a:de:48:8d:6b:07:e1:cc:11:e2:8a:ff:9e:05:5b:e3:d3:
12:3d:95:68:ad:b9:92:4f:76:e8:fe:16:8c:24:bc:f3:17:e4:
60:30:a0:38:50:d6:18:19:ba:f9:47:29:b1:30:6d:40:d6:07:
ca:b6:f8:c6:9b:71:d3:f2:a0:65:49:46:7e:20:61:6d:2f:be:
c1:71:9d:7d:93:2e:53:05:dd:56:f4:28:bb:1f:2e:1a:72:a7:
31:43:79:a4:8f:eb:77:1e:9a:ce:44:5a:a9:00:77:d8:2a:d9:
37:b9:58:2f:fa:53:66:a6:9b:fc:7a:88:6d:7b:b3:db:e2:69:
51:93:3d:8b:3a:a5:8c:26:de:f7:10:9e:d8:45:33:c6:f0:5c:
8e:b5:68:d0:e7:63:61:47:47:86:c7:47:72:12:18:24:c3:70:
86:fc:d7:d3:99:d7:5c:c3:d1:b6:b6:b1:95:04:36:cb:25:59:
a0:d9:46:92:54:88:33:80:17:7c:a5:01:0c:42:63:bf:d5:29:
15:71:56:68:b3:63:4d:dc:43:76:57:aa:41:bf:f5:35:bb:c5:
b3:0f:28:da:19:21:17:5d:4e:ef:85:23:f2:62:a1:fb:0f:9a:
e3:5f:15:83:92:dd:67:c8:75:2b:27:c5:1d:f1:27:b1:6e:17:
96:83:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:47 2025 by rpki-client