
$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/FAB0D026881F11F0AAA2086FC4F9AE02.roa
File: FAB0D026881F11F0AAA2086FC4F9AE02.roa (raw, json)
Hash identifier: p6QY5PVIvSx1qqEScHsp8RNr6LjcbKhzpMC+wNmfh+c=
Subject key identifier: 9F:06:75:28:2F:38:EA:96:5B:76:C0:FA:6E:E8:05:6B:B6:85:65:33
Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial: 51
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/FAB0D026881F11F0AAA2086FC4F9AE02.roa
Signing time: Sat 20 Sep 2025 13:10:23 +0000
ROA not before: Sat 20 Sep 2025 13:10:23 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 153523
IP address blocks: 165.99.62.0/24 maxlen: 24
165.99.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Validity
Not Before: Sep 20 13:10:23 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68cea7bf-13e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:a5:2b:35:b9:a0:1c:6f:2e:29:0e:46:c2:
8d:e3:05:4e:00:99:73:9e:1c:dc:cd:0c:d7:6c:72:
a4:29:9a:77:a9:b7:0e:7e:f6:6c:0c:be:29:96:19:
cc:69:9c:f7:a1:ed:cc:bc:e2:d5:f1:a4:46:76:5a:
ac:16:1b:8a:2f:af:5d:ec:e0:22:c0:1e:98:90:38:
ed:83:15:02:26:a7:d4:a3:b8:d0:31:04:0e:7c:19:
aa:7b:f4:3f:60:98:23:8e:44:ab:09:ec:db:3b:1e:
75:00:55:c5:f7:be:0c:d9:35:4d:ab:16:76:97:42:
4b:79:82:c4:fd:ef:5b:87:c2:92:44:98:d0:09:ba:
94:1c:5b:26:0d:ee:c6:c8:85:31:cf:2c:8a:f4:c7:
af:c3:1a:08:63:bb:7a:bc:51:c1:3c:44:31:72:4b:
8a:a8:87:12:11:ab:0d:88:ce:e7:47:c1:3c:ca:d4:
07:38:6f:a0:2b:18:5c:e2:c0:fd:f0:fb:e9:b0:06:
2f:c4:b1:dd:8b:c2:1d:6d:84:78:09:92:af:45:47:
9d:03:68:8e:70:39:86:94:d2:2c:6b:ff:9e:36:b0:
c5:70:9b:ca:af:bb:0a:c6:85:e8:10:0e:4d:01:5d:
80:39:17:10:50:12:fc:92:d2:46:82:09:43:ae:b4:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:75:28:2F:38:EA:96:5B:76:C0:FA:6E:E8:05:6B:B6:85:65:33
X509v3 Authority Key Identifier:
keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/FAB0D026881F11F0AAA2086FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.99.62.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b7:90:63:1e:3c:af:ca:2f:be:f7:bd:ac:62:fa:07:82:53:
5f:9f:01:d7:0c:41:bf:39:34:f4:24:85:ef:e2:71:51:87:7a:
b2:ed:da:c4:01:ef:e2:ac:a2:16:2f:80:de:56:c2:fa:d7:5b:
a7:4f:01:eb:a7:90:a1:4c:c4:0e:44:94:84:05:16:66:1d:8c:
b1:da:90:5f:f7:fb:f6:5b:e1:36:e4:07:a6:61:3f:bb:70:14:
c5:5c:8a:5c:97:ce:22:9b:ff:10:48:85:b9:de:45:60:89:12:
c1:4b:3f:42:07:5d:50:51:a4:64:07:0b:e5:19:7d:6d:bd:cc:
a7:7b:ee:31:7a:bc:e2:c2:aa:ab:dc:a1:32:18:2b:f0:47:5d:
0e:14:4f:3b:fd:1e:a9:8e:93:d3:be:57:4b:a0:72:b5:75:3f:
0f:9f:59:43:12:10:ac:17:28:a1:45:34:48:68:b7:e1:f3:a2:
fd:40:fe:5d:7f:b4:f4:05:5d:2d:6c:a3:2f:09:d1:2e:3a:a6:
15:e6:11:80:00:c2:0b:3c:df:e4:58:be:dc:12:bf:a8:54:92:
74:9b:db:f6:cb:5e:87:c5:57:16:1c:d0:8b:e7:bf:23:50:31:
0c:4c:d8:22:ca:36:5b:2e:93:39:e7:82:0d:13:1e:60:37:f1:
72:eb:57:4f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw
NDZGRUVBNzAeFw0yNTA5MjAxMzEwMjNaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4Y2VhN2JmLTEzZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDFj6UrNbmgHG8uKQ5Gwo3jBU4AmXOeHNzNDNdscqQpmneptw5+9mwMvimWGcxp
nPeh7cy84tXxpEZ2WqwWG4ovr13s4CLAHpiQOO2DFQImp9SjuNAxBA58Gap79D9g
mCOORKsJ7Ns7HnUAVcX3vgzZNU2rFnaXQkt5gsT971uHwpJEmNAJupQcWyYN7sbI
hTHPLIr0x6/DGghju3q8UcE8RDFyS4qohxIRqw2IzudHwTzK1Ac4b6ArGFziwP3w
++mwBi/Esd2Lwh1thHgJkq9FR50DaI5wOYaU0ixr/542sMVwm8qvuwrGhegQDk0B
XYA5FxBQEvyS0kaCCUOutB0RAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnwZ1KC84
6pZbdsD6bugFa7aFZTMwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2
RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDc1RS9ENzA4QUIxQTMxNkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9GQUIwRDAyNjg4
MUYxMUYwQUFBMjA4NkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaVjPjANBgkqhkiG9w0BAQsFAAOCAQEAULeQYx48r8ovvve9
rGL6B4JTX58B1wxBvzk09CSF7+JxUYd6su3axAHv4qyiFi+A3lbC+tdbp08B66eQ
oUzEDkSUhAUWZh2MsdqQX/f79lvhNuQHpmE/u3AUxVyKXJfOIpv/EEiFud5FYIkS
wUs/QgddUFGkZAcL5Rl9bb3Mp3vuMXq84sKqq9yhMhgr8EddDhRPO/0eqY6T075X
S6BytXU/D59ZQxIQrBcooUU0SGi34fOi/UD+XX+09AVdLWyjLwnRLjqmFeYRgADC
Czzf5Fi+3BK/qFSSdJvb9steh8VXFhzQi+e/I1AxDEzYIso2Wy6TOeeCDRMeYDfx
cutXTw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:55:27 2025 by rpki-client