
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
File: 11763FC8648D11F0950AB94BC4F9AE02.roa (raw, json)
Hash identifier: 86Rvuv44s2BQaDBbytq/QrAOdGP+XaqCHubjdpDvCpU=
Subject key identifier: 40:29:EB:C8:45:4B:B8:82:F3:6B:2E:23:F2:01:00:C9:66:E5:25:E4
Certificate issuer: /CN=A9133BB0/serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Certificate serial: C7
Authority key identifier: 97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
Signing time: Mon 25 Aug 2025 06:13:47 +0000
ROA not before: Mon 25 Aug 2025 06:13:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 136461
IP address blocks: 2401:b6a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133BB0, serialNumber=9706BF1219354D018C15858CE97679FE43E6B312
Validity
Not Before: Aug 25 06:13:47 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68abff1a-95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:96:69:3e:40:e6:ee:05:8f:a0:a1:b3:62:
b6:22:08:90:00:1a:99:f2:de:5e:e5:21:7d:44:06:
1c:7b:6a:be:76:fa:01:ce:98:05:c9:46:e7:49:6a:
d1:fb:ea:e5:d4:ab:a7:73:0f:24:ac:0c:29:c1:aa:
9f:4c:bf:86:47:ac:38:9c:07:eb:cc:e1:49:91:c5:
1c:cd:2e:8f:81:c4:cc:a0:48:9b:ec:51:d1:a7:97:
3a:ed:c5:f9:c9:8a:4b:06:1b:55:1d:ad:ea:46:13:
07:d8:67:d7:0b:f1:49:bd:c1:0c:1d:f7:ae:f9:ab:
93:96:40:d4:28:e5:21:e4:ad:99:a1:36:48:ee:5d:
a3:aa:75:e0:75:16:45:5f:76:98:6e:81:49:d8:f1:
33:ba:a5:e8:0f:aa:93:3b:9f:dc:ba:ff:ad:c1:8a:
a0:42:87:8b:a6:11:0f:14:9a:fd:23:3f:d1:fd:27:
39:da:57:43:d1:19:c7:27:2b:44:09:73:85:d6:80:
55:e8:ed:f4:b4:aa:f1:a3:4c:55:ad:1e:1f:25:93:
bb:49:a1:12:d2:5d:e7:41:56:5a:39:a7:8c:df:02:
32:77:13:22:4e:15:65:0f:38:d3:1c:49:84:67:fd:
d6:9b:c6:9e:0a:44:ba:b0:45:14:c5:dd:d4:6a:a4:
c8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:EB:C8:45:4B:B8:82:F3:6B:2E:23:F2:01:00:C9:66:E5:25:E4
X509v3 Authority Key Identifier:
keyid:97:06:BF:12:19:35:4D:01:8C:15:85:8C:E9:76:79:FE:43:E6:B3:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lwa_Ehk1TQGMFYWM6XZ5_kPmsxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133BB0/C12E842C566811EF8E6A775DC4F9AE02/11763FC8648D11F0950AB94BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b6a0::/32
Signature Algorithm: sha256WithRSAEncryption
c0:60:79:2b:e9:de:71:3f:70:73:37:23:11:4f:f7:e4:58:1d:
d4:3b:f2:e9:fb:f4:35:a0:ff:1a:3e:01:c6:7e:2c:a3:d1:24:
be:5f:ca:b4:21:f4:5f:24:18:bd:31:6e:e8:e6:d5:3b:1d:34:
0b:4f:ce:64:ce:73:c9:47:99:db:31:72:e7:a0:dc:d8:91:da:
5c:7f:4f:dd:d9:f3:a8:b1:5a:9f:52:1e:b0:67:d4:aa:88:82:
3d:80:44:d4:e8:0f:4c:63:df:34:43:39:3d:b7:c1:4d:d3:40:
b6:dd:dc:35:01:de:11:37:26:58:d6:00:5d:ac:39:b7:d5:f8:
ce:ee:50:b9:9c:af:7f:fb:96:8a:a2:01:12:6b:87:31:36:3b:
45:d9:91:19:c2:85:ca:55:02:64:a9:31:12:4a:20:04:25:7c:
52:b0:d7:46:fe:3e:5b:3b:09:60:56:82:90:34:0c:39:9f:02:
a9:14:75:f5:ab:ee:8c:43:89:94:f1:2b:47:19:41:bf:ac:ad:
3a:86:e2:1e:84:91:36:45:5a:33:39:da:6e:e4:cb:a1:f8:59:
fb:c8:85:71:14:ca:35:3a:22:bc:9a:44:e7:ee:db:12:59:9d:
a6:d0:2b:2d:e0:5e:79:64:e9:77:b6:b3:75:bc:28:9f:26:33:
aa:8a:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:44 2025 by rpki-client