
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
File: 6FB1CD6EE04211EC8F5BA126C4F9AE02.roa (raw, json)
Hash identifier: Eh+YF691/mNWRx61vK+TGiiIkuqLisPYxXGYIhY+wSU=
Subject key identifier: 25:20:EE:49:5A:BB:6E:63:C3:64:FE:10:5D:8E:D4:4B:EE:7B:4C:0D
Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial: 0667
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
Signing time: Wed 27 Aug 2025 01:05:59 +0000
ROA not before: Wed 27 Aug 2025 01:05:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38444
IP address blocks: 203.146.62.0/23 maxlen: 23
203.146.62.0/24 maxlen: 24
203.146.63.0/24 maxlen: 24
203.170.228.0/24 maxlen: 24
203.170.229.0/24 maxlen: 24
203.170.230.0/24 maxlen: 24
203.170.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1639 (0x667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Validity
Not Before: Aug 27 01:05:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68ae59f7-9d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:b9:75:6d:95:51:cf:7e:85:52:7c:14:38:
61:3e:ff:bc:71:5a:8c:01:02:eb:51:61:07:ac:5a:
19:2c:9d:98:de:fa:f3:cc:33:de:2d:6c:3f:d4:55:
60:ac:56:6e:fa:10:a7:b5:d5:99:0f:5a:26:8a:20:
b8:1b:d6:6d:23:81:f3:dd:1a:e5:2b:8b:2c:49:7f:
cf:78:26:55:20:fd:12:af:ec:d4:da:b9:f3:45:76:
e4:54:c0:c7:a5:08:91:52:b4:f3:d5:e8:79:dd:68:
6d:c7:b7:cf:fb:2c:fd:eb:85:29:e9:13:ae:6f:8b:
d8:46:93:ed:e6:2f:ac:37:7e:1a:7b:e1:b8:41:3f:
a9:6c:66:31:c5:67:2c:26:98:7f:6e:65:8b:c7:f4:
3c:0d:51:00:4d:cb:a2:08:98:a2:4e:22:5c:ce:a3:
83:6a:9b:31:84:17:30:aa:2d:14:3b:4b:6f:8a:5d:
e8:9a:5b:d7:67:9e:a3:dc:61:c5:5a:7e:3a:ed:70:
67:8a:ec:6d:ba:2e:d2:58:d9:72:7c:17:9f:e2:ff:
14:1c:ee:cf:8c:e8:4b:2b:c2:cb:82:e2:0d:8f:66:
32:5a:a4:e2:76:02:8f:b4:82:0c:fc:51:b7:59:32:
fd:c0:7d:1a:cf:da:d2:b4:b8:55:7f:50:7b:3a:84:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:20:EE:49:5A:BB:6E:63:C3:64:FE:10:5D:8E:D4:4B:EE:7B:4C:0D
X509v3 Authority Key Identifier:
keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/6FB1CD6EE04211EC8F5BA126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.146.62.0/23
203.170.228.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:53:99:49:48:54:86:d3:99:7e:8d:bb:64:59:bb:31:64:6c:
6f:5b:35:65:93:c0:85:33:1d:d2:f7:8a:b7:ca:a6:e8:5c:a8:
ed:76:14:64:e6:3b:22:8c:61:62:ab:31:21:ec:b5:1a:71:c6:
ef:9e:76:8a:40:16:a8:68:44:c1:a9:b4:a7:a9:cd:9c:d0:97:
37:6f:5f:71:9f:e9:a4:c0:ad:05:1e:e4:8e:f4:81:f5:d5:36:
da:fc:c3:34:6f:4f:a6:78:80:68:ab:f1:f6:f2:67:48:e9:5b:
4b:5d:8b:f1:d2:ac:b4:d7:af:61:20:b9:19:20:c1:1a:45:6b:
b8:f7:7a:cd:99:36:81:ac:42:5a:9a:49:04:9d:de:9c:e5:53:
dc:55:f0:62:38:0b:86:b1:aa:81:c9:e2:72:a1:13:1e:da:44:
2d:90:42:55:28:ce:24:7c:66:d5:16:e8:34:2a:7a:5d:38:2e:
15:0d:5a:3f:4f:5a:89:73:fa:1c:cb:f8:9c:b2:71:3e:ee:7b:
79:fd:16:16:3d:8e:9f:ea:d4:d2:50:db:ba:fe:17:d4:b4:d3:
68:5b:b8:94:fd:5e:f1:61:74:0f:82:d3:ec:8e:4e:71:7b:d5:
f0:4a:dd:c8:87:96:e5:26:76:45:d3:fc:d6:1a:e1:8d:12:17:
d3:61:60:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:21 2025 by rpki-client