
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
File: E8780C5EAC8011E79D9EAC60C4F9AE02.roa (raw, json)
Hash identifier: 2gFzBsEhEhcTbqin7FXKA5BqnV1mEmGbBayottd+FiM=
Subject key identifier: AA:D5:DD:70:E2:DD:85:EC:E7:7F:92:FA:B9:96:CD:1D:3A:82:3C:F9
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 18AC
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
Signing time: Tue 04 Nov 2025 16:34:52 +0000
ROA not before: Tue 04 Nov 2025 16:34:52 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134410
IP address blocks: 2001:df2:bb00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6316 (0x18ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Nov 4 16:34:52 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a2b2b-752e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:7e:f0:5a:06:91:ba:17:9a:54:07:ee:78:
6e:76:8c:c3:cf:1b:b4:7e:5a:85:d6:90:78:fc:61:
fa:cc:3e:77:fe:af:ea:99:ef:4f:fb:b5:0d:48:df:
5e:84:8d:bb:3a:8b:75:c0:0f:4b:05:00:94:b8:f7:
37:29:a4:5a:d3:5a:77:69:b7:be:20:48:11:dd:5e:
82:e1:4c:01:1e:cf:18:a4:94:c4:19:e2:fd:12:df:
16:a4:64:4f:03:0f:6e:96:84:ff:5d:c4:7f:7c:7c:
37:fd:a7:cc:4f:4a:20:82:39:0a:cd:ee:2d:bb:78:
ab:46:db:09:6d:ff:d0:1d:57:55:7b:54:03:32:2e:
95:a7:09:87:b0:50:5c:e7:ab:a5:ed:b9:cf:eb:8c:
09:86:88:8d:5b:c3:86:34:8c:6a:d5:e1:e2:b1:ef:
d3:68:c6:f3:8d:46:d3:21:b0:52:b5:91:94:fa:e2:
09:a8:b0:b5:9e:84:a5:69:1a:99:d2:bc:76:46:2b:
e6:f9:10:de:7e:e7:9b:89:8e:f6:76:73:25:24:f5:
09:3b:73:c0:03:2d:a4:33:3c:a1:86:7f:80:f2:59:
67:9d:36:d7:b4:da:50:c9:f1:ab:05:2e:b0:9e:00:
d4:6a:08:81:3e:3a:bc:58:7d:f0:e8:46:d8:e1:1d:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D5:DD:70:E2:DD:85:EC:E7:7F:92:FA:B9:96:CD:1D:3A:82:3C:F9
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/E8780C5EAC8011E79D9EAC60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df2:bb00::/48
Signature Algorithm: sha256WithRSAEncryption
24:44:a2:35:1f:7d:73:55:3c:11:25:e3:44:12:c7:7c:3a:f5:
12:fe:7d:fe:43:c9:2e:b6:fe:01:45:05:87:22:a9:95:26:73:
76:77:9f:79:30:74:46:13:95:91:f2:fc:6f:20:a1:7d:20:9d:
25:e4:31:2e:3f:51:ca:68:a7:39:1b:38:2c:16:b1:a5:6f:24:
5c:fc:8c:ae:12:18:d4:b3:bc:ab:38:9c:8b:70:e2:86:a9:30:
64:5f:99:82:23:fc:93:01:84:14:7c:83:81:4c:c3:31:9a:05:
1d:1d:fc:05:9f:2a:c2:fc:13:86:2f:77:6f:1a:d7:5f:ec:e9:
74:1a:8e:62:c0:e0:80:8c:58:46:e6:18:5f:91:07:5a:f8:42:
c7:25:20:67:a7:15:be:f4:d4:d7:3e:a8:6b:f8:d3:71:eb:2f:
c4:d7:66:fc:51:25:24:15:f4:f8:75:56:bd:8e:d6:0f:47:15:
50:65:65:8d:2c:a4:65:36:6d:28:e6:46:fb:22:19:3e:d3:14:
bf:88:57:68:46:b8:7a:da:2a:3d:c8:8a:00:63:d6:11:ed:09:
36:37:df:66:03:36:f3:b8:60:38:27:57:f8:36:73:69:be:85:
a6:6b:4e:2c:02:6c:ea:d5:8d:d4:f6:0b:41:e6:70:6a:f1:98:
b8:77:8a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:25:37 2025 by rpki-client