
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
File: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (raw, json)
Hash identifier: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=
Subject key identifier: 81:EF:CE:E7:D2:A4:E9:CF:E1:F3:F1:A3:57:F1:01:14:C1:21:49:5E
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 07AD
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
Signing time: Fri 06 Jun 2025 21:41:03 +0000
ROA not before: Fri 06 Jun 2025 21:41:03 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23926
IP address blocks: 27.123.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:23:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965 (0x7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Jun 6 21:41:03 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6843606f-b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0c:3a:f2:c5:8e:eb:93:5d:29:c7:ac:89:1f:
31:be:d4:2e:3b:85:de:a9:28:a8:50:0e:4c:4e:07:
df:15:db:a8:7d:e0:f1:80:27:df:22:dd:ba:85:4e:
f0:f3:5f:6b:79:61:fd:16:50:4a:40:a4:72:d5:86:
21:29:18:cc:8c:0d:9e:f8:c0:91:2d:7e:55:a7:d9:
29:b1:ac:ae:3f:5a:0b:91:23:5a:2b:af:0e:d4:8e:
3a:e5:5c:7b:c1:30:99:ee:48:b2:c8:bd:54:e3:5f:
74:f5:74:6f:72:7a:ee:f2:8d:76:70:da:85:8e:22:
27:59:91:59:94:38:69:66:8a:4b:e7:b1:8b:05:cf:
6c:9b:60:a9:d8:ef:b0:bf:da:25:78:f1:89:aa:b2:
a5:a4:6b:d3:85:0f:7a:ad:fb:fa:b6:3f:58:7a:ae:
33:47:13:38:c1:28:e5:3c:42:f3:90:99:24:0e:51:
62:be:5c:6a:7c:0d:8c:4c:b2:46:ef:26:c0:19:21:
71:16:a9:18:3d:78:51:85:10:0c:53:0a:86:f4:5e:
f4:12:66:d8:83:7f:02:54:83:ab:82:a0:da:7d:9b:
c2:0d:e6:18:c5:ca:f0:83:43:6f:c0:73:2c:17:9b:
be:79:15:3c:eb:74:47:06:6f:e4:c5:16:90:d3:f2:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EF:CE:E7:D2:A4:E9:CF:E1:F3:F1:A3:57:F1:01:14:C1:21:49:5E
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/7AA7B416E01011EEA1CA127CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.43.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d5:14:6e:41:ee:89:84:ee:d8:1a:ff:6d:81:e1:3d:10:64:
8a:ab:cb:7c:2f:7a:bf:9c:43:a7:4a:f0:9b:39:cf:69:07:98:
05:5f:0e:66:c6:b9:92:91:83:9a:3a:ea:5e:35:e7:69:fb:c3:
a7:e0:25:30:b0:15:38:6f:ec:0c:99:f3:79:ff:07:1a:ea:43:
27:c9:4f:49:e6:3a:8b:a7:63:43:19:36:3c:3e:86:11:e5:3d:
d3:3b:d9:35:86:4e:1b:5f:c1:eb:55:43:05:3d:9d:86:24:72:
ec:78:c4:f5:65:da:dc:d1:7c:76:90:b5:17:6b:04:fe:e8:9e:
22:c8:02:1b:7a:c0:12:33:08:6e:4e:1a:38:33:31:c3:04:14:
08:e5:17:88:58:e8:2b:5b:6f:27:00:2e:32:f3:67:58:1c:a3:
83:a7:2e:c0:35:d5:5f:ba:f2:25:5f:50:f7:1e:b9:d8:e6:4e:
43:d7:fb:5f:bb:3d:59:80:6f:0a:11:7c:13:be:2e:72:23:43:
82:97:8c:ab:7c:2c:b4:96:cb:74:13:57:29:8f:b0:c6:a5:88:
68:2d:65:03:cf:62:c2:17:56:ea:82:fe:a7:ba:f2:e2:ea:25:
2e:1a:96:b8:7d:99:ec:80:cc:9e:25:1e:31:9e:ba:84:ad:7d:
8a:db:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:36 2025 by rpki-client