
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/8334E4446BA911EFADEBED84C4F9AE02.roa
File: 8334E4446BA911EFADEBED84C4F9AE02.roa (raw, json)
Hash identifier: /b8c3NYiRoYt5VnH0mNcKwqwOmBEVRecdoyF1gyL4+8=
Subject key identifier: 29:58:00:96:6A:BF:23:D9:D1:DC:53:B2:FB:33:9B:0E:58:CE:72:97
Certificate issuer: /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial: C2
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/8334E4446BA911EFADEBED84C4F9AE02.roa
Signing time: Sat 13 Sep 2025 06:12:45 +0000
ROA not before: Sat 13 Sep 2025 06:12:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153191
IP address blocks: 160.30.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194 (0xc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Validity
Not Before: Sep 13 06:12:45 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68c50b5d-2cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:41:60:bb:e2:9c:4f:d6:b4:46:b4:dc:f3:
1f:3d:91:5f:0f:08:6b:77:29:92:98:93:1b:b5:bc:
2a:ab:9c:62:12:42:eb:f0:06:e1:10:80:92:a2:38:
3c:6b:6a:63:81:12:17:61:fb:d8:69:a1:32:9d:43:
8c:55:ed:d2:39:7d:76:49:68:11:ba:fe:60:92:b4:
e4:3a:a9:51:8a:25:7a:6f:5f:08:d6:2e:26:98:bc:
2a:43:75:9c:35:74:11:5b:c0:f9:c4:19:37:d3:97:
37:47:cc:e8:83:73:47:6d:fd:28:eb:49:27:af:b7:
e2:51:96:0f:c9:ae:f6:0b:0c:a9:39:b7:17:82:36:
4d:89:63:9c:f0:3e:e1:c7:e5:de:2d:8c:97:bf:e6:
37:6c:77:47:cf:6a:e0:dc:2a:ab:59:b8:b8:89:4b:
c1:23:d6:a4:94:92:3e:53:3a:b0:a6:e2:de:39:66:
c5:37:5d:a6:ba:89:ae:06:06:b3:d7:f7:75:61:7f:
79:0e:37:d1:21:85:36:74:ff:38:0c:0f:1d:5c:59:
a0:95:80:65:c1:17:b9:18:6a:75:2b:b4:32:0b:28:
f8:2d:0d:a7:8d:5b:d5:52:51:76:a3:84:e6:9c:d1:
91:2a:9f:f0:b6:3a:f2:a9:c9:5c:7e:58:63:a0:3e:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:58:00:96:6A:BF:23:D9:D1:DC:53:B2:FB:33:9B:0E:58:CE:72:97
X509v3 Authority Key Identifier:
keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/8334E4446BA911EFADEBED84C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.68.0/23
Signature Algorithm: sha256WithRSAEncryption
38:29:4e:03:df:c3:b2:e7:cb:a4:bd:3e:a9:81:d1:a9:cd:fc:
07:dc:d3:82:c4:a0:42:42:37:b8:72:84:6a:61:6a:2e:55:28:
3c:75:f5:b1:6c:88:1c:ba:88:9f:81:6f:02:a9:bb:ba:7a:c7:
85:50:1d:97:36:1c:e6:f8:55:10:ae:09:39:dc:fb:82:41:fc:
ec:f9:b3:4b:6d:33:68:ac:8d:8d:57:d8:cc:36:dc:68:f4:d0:
63:17:2c:ec:00:b6:14:15:61:48:49:26:f4:70:5e:73:8f:1a:
df:a5:3f:76:cc:b5:9b:52:0f:7a:ab:2e:57:ba:aa:a2:8e:b6:
39:34:11:18:73:33:0c:fd:91:75:c0:be:b8:ed:bd:50:b5:e9:
83:0e:28:78:2c:9c:b6:00:bd:52:6d:8a:24:b0:fe:31:b4:49:
01:64:8b:f6:00:9e:cc:15:69:67:df:a5:92:55:6b:1f:f0:a2:
b2:d4:8e:34:46:ee:fb:6e:40:e6:5d:ef:18:5c:4f:04:70:60:
d6:a4:3b:00:4e:d5:96:49:ac:a3:72:ac:cf:39:2a:46:12:be:
14:5d:e4:4b:eb:6f:49:a0:5b:72:e5:af:71:f1:67:18:fa:ea:
dc:c1:e5:aa:43:45:e7:8a:d6:02:6d:86:40:a0:8c:b2:6c:0c:
11:c3:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:43 2025 by rpki-client