
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/E692CC2A8A9B11EFBC56AA85C4F9AE02.roa
File: E692CC2A8A9B11EFBC56AA85C4F9AE02.roa (raw, json)
Hash identifier: izaJYsSU6U7Mo7zWWYJeDmZ95mIz6wQL/e1yh556DPY=
Subject key identifier: 43:24:37:87:95:73:7D:98:5C:BB:8C:2D:D9:92:BB:22:34:35:31:5E
Certificate issuer: /CN=A911CB05/serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Certificate serial: C8
Authority key identifier: 40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/E692CC2A8A9B11EFBC56AA85C4F9AE02.roa
Signing time: Mon 03 Nov 2025 05:51:27 +0000
ROA not before: Mon 03 Nov 2025 05:51:27 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136745
IP address blocks: 160.187.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CB05, serialNumber=40DDEEF018EADCDE4D1BF78D154851F8D8BC26A5
Validity
Not Before: Nov 3 05:51:27 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690842df-0858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:6c:29:b3:b4:9f:9c:14:29:2d:4a:54:66:
fd:a4:35:96:1a:1f:f3:c8:46:6c:6f:4d:47:62:67:
ae:4e:59:d5:a8:be:41:66:11:22:b5:87:a3:2e:65:
4e:4d:b8:a9:68:c1:26:7d:6c:a4:3b:68:9c:b3:72:
e0:d8:cc:8d:b7:82:be:29:2c:ba:32:26:ce:5b:8e:
69:c6:9f:ac:b5:9a:5c:c8:68:e3:ca:11:51:75:a6:
f8:e0:e1:cd:28:c4:3e:76:bf:56:24:69:68:c8:e6:
bd:3a:23:d8:de:5a:c2:cb:ef:c3:23:07:0e:fb:ff:
3c:61:8f:f6:a4:8e:88:17:db:8e:5d:92:cf:14:4b:
83:db:7a:6b:36:e7:86:8d:ed:65:c7:dd:4a:3d:40:
f6:58:9f:53:4b:88:c5:38:60:87:c6:52:17:26:53:
8c:b0:7c:31:3a:92:ca:3c:bd:e8:37:81:cb:d7:87:
93:1b:dd:22:58:df:dd:5e:87:c1:36:bc:d5:0b:9d:
34:12:7f:2b:d9:09:8d:3b:bb:fa:a5:79:2b:13:50:
a6:bf:b9:07:c2:19:5d:1a:b3:aa:37:96:90:db:57:
d8:9c:07:df:65:1c:16:92:f7:3f:1b:54:0c:75:17:
00:4f:63:97:cc:d6:de:5f:af:89:83:c3:e7:d9:55:
af:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:37:87:95:73:7D:98:5C:BB:8C:2D:D9:92:BB:22:34:35:31:5E
X509v3 Authority Key Identifier:
keyid:40:DD:EE:F0:18:EA:DC:DE:4D:1B:F7:8D:15:48:51:F8:D8:BC:26:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QN3u8Bjq3N5NG_eNFUhR-Ni8JqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/F0B66CF88A9A11EFB8AA5648C4F9AE02/E692CC2A8A9B11EFBC56AA85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:07:86:34:e4:d7:27:f5:0b:1a:87:25:8b:c9:6b:5f:3d:4f:
55:31:10:07:a5:4f:58:e3:cb:fb:58:68:26:6f:0f:2e:96:fd:
0a:8e:d1:7b:af:90:9b:b1:9f:39:27:67:17:82:d2:a2:6c:ff:
79:51:08:19:11:f8:97:07:6f:25:86:3b:cc:77:69:5a:1b:52:
a5:7a:04:83:8b:16:55:02:d2:8b:b7:72:58:89:5d:fb:df:f6:
3a:4e:1c:b0:e4:db:08:cb:4c:ea:75:3a:97:bd:f1:aa:97:1a:
1b:40:28:a0:7d:17:34:d5:f4:cf:04:d8:60:49:d3:e6:f8:b8:
29:8a:00:b6:6c:7e:51:a3:17:00:60:af:2a:6e:c6:1a:30:25:
2b:66:ca:e4:88:b8:d6:d7:c7:a4:9e:41:f5:8f:87:fb:cf:ed:
d2:5e:e0:2f:78:92:99:59:1f:8e:4a:2a:aa:23:c1:5f:fe:6d:
40:d8:8c:e8:7c:99:e7:eb:41:e3:ff:df:70:38:ef:f9:05:0f:
05:af:09:67:58:78:85:20:48:5c:93:bd:25:e5:10:e0:62:7b:
e6:52:41:2a:0c:1e:00:95:61:24:49:00:8c:44:2d:25:cd:71:
ad:bb:aa:a9:2c:7d:dc:cf:9c:19:9e:38:51:2a:a4:86:cf:eb:
e6:ab:49:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:33:20 2025 by rpki-client