
$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
File: 4567CDC2A0EE11F081D8CB27C4F9AE02.roa (raw, json)
Hash identifier: NZk8gPQKW1EfRq0UDEGtez/4CFQTjjGfw0ouBgNdDzQ=
Subject key identifier: B2:C8:38:70:44:26:74:BC:B9:DC:9D:29:63:87:1A:02:83:F8:8A:4B
Certificate issuer: /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial: 50
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
Signing time: Sat 04 Oct 2025 07:00:22 +0000
ROA not before: Sat 04 Oct 2025 07:00:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 153989
IP address blocks: 165.101.54.0/23 maxlen: 23
165.101.54.0/24 maxlen: 24
165.101.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Validity
Not Before: Oct 4 07:00:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68e0c606-9709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:3d:c0:18:a5:c6:2b:12:05:a3:ef:ec:ca:
a2:5f:0a:7c:f0:13:94:1d:a2:93:59:17:b9:70:5a:
dc:8c:ec:48:3d:ab:f0:98:4e:e1:26:4a:a5:1d:0b:
f1:5c:d7:5e:b1:e7:91:37:c5:a5:01:65:d2:76:5f:
06:c5:c1:35:47:33:1d:40:ad:df:b4:f1:8e:1b:a6:
5c:9a:d4:7a:d7:97:dc:04:b0:37:e4:06:c5:63:6e:
a9:7e:cf:d0:25:7d:9b:19:0c:db:47:da:1a:6a:f0:
3f:bc:6a:b1:98:7f:fe:17:70:27:1c:d2:b3:1a:72:
34:b7:f3:7b:28:75:a9:2b:86:4a:30:6f:ca:6e:79:
08:da:be:99:7e:db:30:0e:9b:16:eb:f2:d0:90:64:
60:dc:7d:a3:1d:c1:0f:07:f3:aa:bd:bf:2a:82:ff:
42:7b:25:48:d2:d7:56:6b:4a:23:f2:34:53:4c:19:
2a:f8:24:0a:a8:16:6d:39:db:da:fd:d0:59:87:03:
90:a4:37:24:51:39:72:fa:cc:50:47:51:8a:00:4a:
b9:1f:5f:4e:4c:91:67:cc:44:5d:58:f8:80:b3:83:
03:49:55:0d:38:ca:19:51:34:ae:35:6a:da:d2:a2:
b5:a3:5a:6e:66:66:4d:4c:be:ab:bc:cc:cc:1e:ce:
8f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C8:38:70:44:26:74:BC:B9:DC:9D:29:63:87:1A:02:83:F8:8A:4B
X509v3 Authority Key Identifier:
keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.54.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:c1:99:ee:11:22:aa:de:1e:d1:94:ab:4c:45:53:46:00:aa:
f3:c5:37:0e:d3:64:7b:42:43:85:f8:f1:82:2f:85:26:36:0b:
ac:f5:c3:14:c8:94:cc:d8:79:95:20:b3:4c:0b:89:a6:1a:bf:
a2:79:0d:f9:b3:1b:10:79:43:d1:de:ca:5a:3e:da:4b:6e:17:
18:b4:2d:53:b8:74:ff:ac:f2:c3:45:01:29:62:43:a6:61:3d:
2e:95:38:2d:65:fd:73:b2:48:dd:a4:31:78:3a:8c:18:fc:c7:
17:db:c0:a6:0a:d4:2b:7e:b4:d4:5b:e7:90:85:0b:28:6a:a3:
a0:3b:d5:a1:3c:cd:36:4a:5a:5d:8f:03:aa:81:13:81:7d:7c:
e8:53:6d:3f:b3:0e:71:9c:99:d9:02:77:dc:15:ec:17:85:5e:
9f:ce:82:81:e7:c2:08:9e:13:e9:4c:bc:ae:6f:94:f0:cb:c0:
80:48:91:a4:ab:73:2b:62:4e:41:5b:c1:30:e1:c4:ec:1e:da:
d8:54:04:dd:1a:9f:83:1b:f0:ce:36:f6:64:86:d7:4b:72:8a:
84:0f:9d:77:f1:9c:33:b4:26:db:bc:20:a6:34:fe:46:da:7f:
fb:c6:e1:ed:ca:67:9c:41:df:8f:c9:3d:2e:9e:f8:0b:32:77:
aa:b5:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:02:23 2025 by rpki-client