
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/F51AC6A6C99A11EFB5D4B020C4F9AE02.roa
File: F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (raw, json)
Hash identifier: McJ+hP8GUu/Ld5Rarq2qGp1xUtwodZVqiVkbBVRJzkE=
Subject key identifier: FB:BD:79:C9:4C:24:66:54:B3:DF:54:62:F1:B6:A8:6F:3C:DF:6A:14
Certificate issuer: /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial: 64
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/F51AC6A6C99A11EFB5D4B020C4F9AE02.roa
Signing time: Fri 11 Jul 2025 07:44:25 +0000
ROA not before: Fri 11 Jul 2025 07:44:25 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141756
IP address blocks: 160.22.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100 (0x64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Validity
Not Before: Jul 11 07:44:25 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6870c0d9-c149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:90:92:27:0f:93:f7:28:3a:63:b5:db:be:
7e:f4:2d:23:92:b1:5d:12:33:57:9a:1a:c0:28:68:
f2:a4:65:b1:09:94:fd:65:fb:94:ab:1e:46:9b:48:
21:93:15:44:ec:9c:11:9a:f9:b7:13:87:f4:7e:4a:
94:90:6f:57:0e:78:c7:2e:ac:dc:a3:b4:2f:26:c2:
d8:dc:55:c9:3b:36:c2:5e:44:57:2d:6b:cd:70:f8:
2e:09:c8:5e:7c:63:c9:16:be:b1:6e:31:2e:b2:16:
88:e3:dc:c6:10:33:ea:0c:0b:4e:2e:5c:2f:92:b3:
e1:03:34:58:33:c3:9a:70:10:8e:ff:86:9a:5a:0a:
de:f7:dd:cd:7a:92:bc:19:a9:cf:e4:ea:31:ab:c2:
af:81:9a:a9:15:b1:16:a5:81:f8:9d:71:87:45:78:
15:4d:00:96:29:d9:73:e2:a6:7d:75:4f:cd:6e:a6:
fe:03:c7:0b:f5:33:b1:81:7d:d2:24:6a:fc:18:4f:
47:54:36:09:06:76:03:09:12:bd:c6:d5:d0:56:09:
92:cb:af:da:74:27:7a:99:48:f5:55:68:71:4f:fa:
af:85:e7:36:77:1b:fa:9c:0a:00:0d:d4:5c:cb:ef:
56:50:7e:c1:d5:ff:bb:6b:00:a6:e9:5d:ab:0a:bc:
0e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BD:79:C9:4C:24:66:54:B3:DF:54:62:F1:B6:A8:6F:3C:DF:6A:14
X509v3 Authority Key Identifier:
keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/F51AC6A6C99A11EFB5D4B020C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.22.213.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d9:e4:8c:ff:14:25:ac:c8:af:ae:27:ac:f0:87:36:24:fa:
63:a9:eb:da:7c:b4:a5:9e:72:8b:29:8e:e8:38:1b:72:0f:81:
14:86:a0:0b:fe:ea:8e:23:cf:c3:9b:84:3c:ef:4b:7a:b7:52:
14:72:97:18:25:a2:3f:ad:51:ac:eb:2f:b3:a9:07:f5:96:f0:
6b:f9:88:13:64:a5:69:ff:4f:95:62:32:3c:cc:42:27:2a:f4:
4e:17:ce:29:41:3f:43:5f:ba:d3:0c:06:9b:e3:fe:46:98:e8:
59:a5:53:41:17:7f:4d:c0:6f:49:f9:de:ee:4c:cd:6d:72:5f:
a6:a7:03:55:bc:66:72:07:4d:9e:2c:13:18:a7:d1:6a:45:4e:
f0:e1:fd:68:93:cc:d7:95:a4:a8:e4:17:77:5d:8f:c7:35:47:
a3:33:d6:2f:c7:3d:54:07:c3:22:1f:24:42:2a:04:69:5c:9f:
04:56:ef:68:86:58:fd:92:fa:b7:f2:56:ad:33:07:00:c0:5f:
81:c2:90:86:a3:8e:01:3f:dd:40:03:99:b8:56:94:15:10:0e:
d2:80:54:b5:4b:41:cd:d2:5d:0c:26:e4:92:9c:6b:dd:2c:35:
d9:1f:b7:23:f1:28:40:58:d3:3f:3b:3c:b8:c5:67:5b:fd:e9:
49:50:52:e4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RjUzNjExMC8GA1UEBRMoMkFFOTg1ODE1QTEwREQ2RDA0NTIzRkM4MUQ4REFGRDcy
NkJFNzgxNjAeFw0yNTA3MTEwNzQ0MjVaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NzBjMGQ5LWMxNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5CZCSJw+T9yg6Y7Xbvn70LSOSsV0SM1eaGsAoaPKkZbEJlP1l+5SrHkabSCGT
FUTsnBGa+bcTh/R+SpSQb1cOeMcurNyjtC8mwtjcVck7NsJeRFcta81w+C4JyF58
Y8kWvrFuMS6yFojj3MYQM+oMC04uXC+Ss+EDNFgzw5pwEI7/hppaCt733c16krwZ
qc/k6jGrwq+BmqkVsRalgfidcYdFeBVNAJYp2XPipn11T81upv4Dxwv1M7GBfdIk
avwYT0dUNgkGdgMJEr3G1dBWCZLLr9p0J3qZSPVVaHFP+q+F5zZ3G/qcCgAN1FzL
71ZQfsHV/7trAKbpXasKvA7lAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+715yUwk
ZlSz31Ri8baobzzfahQwHwYDVR0jBBgwFoAUKumFgVoQ3W0EUj/IHY2v1ya+eBYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2LzlBODZEQkQwQzk5
QTExRUZCNENFRUYxRUM0RjlBRTAyL0t1bUZnVm9RM1cwRVVqX0lIWTJ2MXlhLWVC
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvS3VtRmdWb1EzVzBFVWpfSUhZMnYxeWEtZUJZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RjUzNi85QTg2REJEMEM5OUExMUVGQjRDRUVGMUVDNEY5QUUwMi9GNTFBQzZBNkM5
OUExMUVGQjVENEIwMjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAW1TANBgkqhkiG9w0BAQsFAAOCAQEAeNnkjP8UJazIr64n
rPCHNiT6Y6nr2ny0pZ5yiymO6Dgbcg+BFIagC/7qjiPPw5uEPO9LerdSFHKXGCWi
P61RrOsvs6kH9Zbwa/mIE2Slaf9PlWIyPMxCJyr0ThfOKUE/Q1+60wwGm+P+Rpjo
WaVTQRd/TcBvSfne7kzNbXJfpqcDVbxmcgdNniwTGKfRakVO8OH9aJPM15WkqOQX
d12PxzVHozPWL8c9VAfDIh8kQioEaVyfBFbvaIZY/ZL6t/JWrTMHAMBfgcKQhqOO
AT/dQAOZuFaUFRAO0oBUtUtBzdJdDCbkkpxr3Sw12R+3I/EoQFjTPzs8uMVnW/3p
SVBS5A==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:51:55 2025 by rpki-client