
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F5B752E4AC6411EF85E4707CC4F9AE02.roa
File: F5B752E4AC6411EF85E4707CC4F9AE02.roa (raw, json)
Hash identifier: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g=
Subject key identifier: 94:E2:08:FC:14:F9:03:C2:56:F4:D9:EF:2C:B5:7C:A8:0E:C3:C0:26
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 36
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F5B752E4AC6411EF85E4707CC4F9AE02.roa
Signing time: Thu 27 Feb 2025 09:32:07 +0000
ROA not before: Thu 27 Feb 2025 09:32:07 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 14618
IP address blocks: 146.116.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Feb 27 09:32:07 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c03117-dbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:6c:ec:03:b6:25:c3:10:aa:44:a9:99:7e:
8d:10:5f:3d:79:31:67:10:e3:1a:69:3f:17:59:92:
a7:54:7f:df:da:89:3b:be:6f:26:0c:06:a4:64:3a:
5c:e6:2b:df:2f:97:b9:3e:3c:e4:8c:33:a5:02:10:
94:3e:eb:bc:e1:df:01:5c:b8:40:1a:e7:09:79:6c:
30:67:65:fb:90:a6:2a:43:3d:39:70:49:05:c2:81:
53:e3:42:7e:a4:98:59:9f:5d:54:e2:98:ed:46:ef:
0a:09:d1:3f:1f:2b:a4:59:5a:fe:e6:33:72:47:5f:
a4:b1:63:70:cb:8b:47:71:85:5b:9f:e5:8f:99:00:
eb:e2:ed:39:b2:d2:3d:27:13:e5:b5:35:94:6f:63:
ee:9b:f6:a3:ce:79:4c:2c:8c:89:96:20:57:7e:96:
2c:57:ba:d6:8e:e2:69:7e:e4:83:3b:67:43:1f:13:
39:78:d2:14:68:66:c8:be:51:6f:da:79:9c:60:10:
83:80:51:84:1b:0b:da:b3:6b:fc:99:74:0b:27:a8:
4e:dd:f5:f6:f4:0d:5e:37:42:99:b6:74:7f:df:e3:
9c:cd:a7:71:83:2e:ad:f8:09:f6:3b:de:04:61:64:
6a:7a:b9:22:76:a6:28:b2:7b:b2:53:d0:22:d8:ce:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:08:FC:14:F9:03:C2:56:F4:D9:EF:2C:B5:7C:A8:0E:C3:C0:26
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F5B752E4AC6411EF85E4707CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.116.248.0/24
Signature Algorithm: sha256WithRSAEncryption
77:93:ae:16:e8:64:fd:db:6e:08:b5:cf:b7:ad:a0:20:bd:18:
80:d8:00:31:6c:d6:fb:58:25:21:54:32:5d:31:ab:69:31:68:
45:24:b4:a3:07:e4:10:d0:0a:06:6d:e2:35:6c:9b:12:a7:cf:
aa:5e:e7:1c:7d:c9:4a:f8:f9:a2:6b:9d:9e:96:f4:39:b4:ff:
87:49:e3:45:b3:f3:ba:52:98:a7:ff:a8:a3:aa:b9:49:c2:e7:
cb:7c:14:66:ba:79:de:65:f2:b6:b0:7d:a2:b8:30:6c:d5:1f:
c5:7f:5a:25:9e:cd:79:9d:c5:28:23:0f:63:89:66:05:32:52:
bd:86:f0:9b:5b:b9:88:3a:ea:15:9e:f2:9d:64:d9:78:a0:ae:
e0:20:45:40:90:84:47:6b:39:ee:8b:9d:9f:64:e8:bb:46:e5:
36:05:ed:78:10:45:1b:b9:78:2e:5d:b3:6c:97:94:e5:62:fd:
5b:2d:8e:44:ea:ed:33:e2:eb:7c:79:45:5e:bf:b0:5d:ce:4a:
6e:a4:31:fe:ea:33:57:da:e6:31:59:8f:85:4f:ca:71:58:09:
dc:69:52:0a:27:c5:2a:fb:68:55:fd:9d:f2:45:6c:6b:78:35:
5b:ee:38:81:cc:bd:1d:db:59:b2:c4:80:13:cf:b5:d9:6d:e8:
ad:90:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:21:24 2025 by rpki-client