
$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
File: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (raw, json)
Hash identifier: LfZGAfyu1X1XJTr/vcwjFbw+uPCbKT4FYiAcrfY1D/8=
Subject key identifier: AD:13:B2:5F:27:B7:66:3E:D4:B9:D0:2F:B7:D7:54:26:21:83:BC:16
Certificate issuer: /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial: 60
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
Signing time: Sat 19 Jul 2025 07:43:20 +0000
ROA not before: Sat 19 Jul 2025 07:43:20 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2401:c2e0::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96 (0x60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Validity
Not Before: Jul 19 07:43:20 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=687b4c98-eddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:d4:e0:c0:35:3b:92:82:90:22:3d:6f:cc:
4f:e2:ae:ca:75:d1:c0:84:2d:d5:36:2f:3c:9c:22:
61:ab:e3:37:ca:db:23:04:f9:b9:ae:4f:ab:07:f2:
be:80:5b:d0:a3:e6:da:e7:48:ab:f3:07:b8:d1:53:
59:b4:f3:a5:a3:e2:4d:a0:8d:66:c8:2e:ac:48:65:
74:b8:2b:20:dc:70:3f:c5:92:41:55:18:a9:04:9c:
eb:ff:cd:84:c7:b5:8f:d8:92:28:15:33:d3:7d:4f:
2f:8d:29:db:76:0e:79:77:89:76:99:21:77:e2:40:
68:37:2c:58:82:2d:04:09:67:5d:ee:fa:ae:07:ce:
d9:f5:d5:f4:04:66:00:64:b3:8d:9f:eb:27:0a:8b:
61:cd:5b:71:7f:31:2f:e9:54:b3:66:14:be:58:27:
d6:d6:0e:e3:80:80:b4:36:12:87:f0:03:30:23:79:
cc:ee:b4:58:49:90:15:10:9c:cc:93:d3:9e:7a:e2:
e1:c8:da:71:be:0a:cc:bc:84:7f:7d:2b:e5:32:f5:
90:ca:c0:de:9d:3c:31:9f:f6:3f:4c:b0:3e:98:74:
de:fa:e7:37:13:d3:6e:4f:ef:b5:36:1a:df:ec:60:
2f:f3:e2:da:4b:a2:95:54:0e:44:4a:b9:c7:8a:e9:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:13:B2:5F:27:B7:66:3E:D4:B9:D0:2F:B7:D7:54:26:21:83:BC:16
X509v3 Authority Key Identifier:
keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:c2e0::/40
Signature Algorithm: sha256WithRSAEncryption
07:a5:f3:69:5d:f5:40:4d:cb:d7:a6:6e:a2:5a:bf:46:11:77:
a4:67:a9:64:55:04:7d:2f:58:a9:68:8b:5a:28:7d:4d:50:eb:
51:9d:30:9f:1b:15:d5:b6:ba:c9:62:83:6f:08:0e:36:93:8e:
e7:49:ab:b6:7a:20:cd:3b:75:bf:72:ef:63:0a:c4:c8:23:e1:
24:8e:e6:5f:51:4f:cb:ea:9e:ed:85:77:93:17:82:6b:70:0d:
d6:5d:7a:2c:2d:a6:d2:3e:f0:f8:eb:2f:91:99:c6:0c:be:1a:
fc:e4:a7:5f:f7:8f:25:72:8e:35:91:a8:8b:d6:b5:f0:f0:10:
e8:cc:02:ee:1d:0c:33:10:22:3a:a9:54:17:6d:7b:fb:45:e0:
72:3a:0b:27:1d:3a:cb:13:24:0e:f0:b6:ce:37:6e:8e:ac:65:
ca:a5:17:0a:9c:15:68:97:55:65:1e:82:dd:e1:74:b7:69:50:
9d:96:cf:60:ff:9a:33:66:17:2d:4b:92:ec:c0:48:ad:09:f5:
b6:bc:16:2e:e7:6b:b7:8c:f2:8d:a9:29:9b:57:14:21:87:56:
91:52:e9:89:3e:81:5a:4d:ea:d9:ca:86:ab:3f:3c:f7:71:63:
d3:88:05:ae:72:54:83:b2:6d:a2:2c:39:7c:54:31:c3:6b:a7:
c9:29:1f:48
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDU5RTExMC8GA1UEBRMoNzI1OERGRDU2RkE1QTQ4N0YwRDRBQ0M2OUNBREIxQkVB
QzJGOTcwRTAeFw0yNTA3MTkwNzQzMjBaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4N2I0Yzk4LWVkZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDkONTgwDU7koKQIj1vzE/irsp10cCELdU2LzycImGr4zfK2yME+bmuT6sH8r6A
W9Cj5trnSKvzB7jRU1m086Wj4k2gjWbILqxIZXS4KyDccD/FkkFVGKkEnOv/zYTH
tY/YkigVM9N9Ty+NKdt2Dnl3iXaZIXfiQGg3LFiCLQQJZ13u+q4Hztn11fQEZgBk
s42f6ycKi2HNW3F/MS/pVLNmFL5YJ9bWDuOAgLQ2EofwAzAjeczutFhJkBUQnMyT
05564uHI2nG+Csy8hH99K+Uy9ZDKwN6dPDGf9j9MsD6YdN765zcT025P77U2Gt/s
YC/z4tpLopVUDkRKuceK6f+JAgMBAAGjggKXMIICkzAdBgNVHQ4EFgQUrROyXye3
Zj7UudAvt9dUJiGDvBYwHwYDVR0jBBgwFoAUcljf1W+lpIfw1KzGnK2xvqwvlw4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNTlFLzU1NjY2QjU2RDlE
MDExRUY5OEI4NUU2REM0RjlBRTAyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY2xqZjFXLWxwSWZ3MUt6R25LMnh2cXd2bHc0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDU5RS81NTY2NkI1NkQ5RDAxMUVGOThCODVFNkRDNEY5QUUwMi85OUFCNjVFRURB
MkMxMUVGQUM1Mzg4MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAhBggrBgEFBQcBBwEB/wQS
MBAwDgQCAAIwCAMGACQBwuAAMA0GCSqGSIb3DQEBCwUAA4IBAQAHpfNpXfVATcvX
pm6iWr9GEXekZ6lkVQR9L1ipaItaKH1NUOtRnTCfGxXVtrrJYoNvCA42k47nSau2
eiDNO3W/cu9jCsTII+EkjuZfUU/L6p7thXeTF4JrcA3WXXosLabSPvD46y+RmcYM
vhr85Kdf948lco41kaiL1rXw8BDozALuHQwzECI6qVQXbXv7ReByOgsnHTrLEyQO
8LbON26OrGXKpRcKnBVol1VlHoLd4XS3aVCdls9g/5ozZhctS5LswEitCfW2vBYu
52u3jPKNqSmbVxQhh1aRUumJPoFaTerZyoarPzz3cWPTiAWuclSDsm2iLDl8VDHD
a6fJKR9I
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:41:24 2025 by rpki-client