
$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/A90D181AC36C11EFAF838D35C4F9AE02.roa
File: A90D181AC36C11EFAF838D35C4F9AE02.roa (raw, json)
Hash identifier: 5yVwTXwHog4Q0IanZkL0bw8GxEJ/NReVj7nFHVmCcnE=
Subject key identifier: 50:EC:53:F2:22:32:96:F5:E3:9F:F1:8C:B4:5D:57:91:D1:3C:9D:0C
Certificate issuer: /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
Certificate serial: 62
Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/A90D181AC36C11EFAF838D35C4F9AE02.roa
Signing time: Fri 27 Jun 2025 07:21:10 +0000
ROA not before: Fri 27 Jun 2025 07:21:10 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 152903
IP address blocks: 160.20.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl
rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98 (0x62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A
Validity
Not Before: Jun 27 07:21:10 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=685e4666-c5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:79:46:04:f4:d4:76:01:13:8f:fb:b4:76:
36:8c:f9:68:3f:68:7f:8f:38:f3:fd:2f:4a:9b:cf:
25:66:7d:25:4e:c2:c4:d6:0d:f2:e2:c8:6e:23:c6:
6d:d3:62:09:e0:b7:d3:5f:94:55:f2:59:18:fa:3c:
13:d4:75:f4:de:4f:e9:e4:d8:5d:43:7e:a0:61:66:
8a:a2:48:05:e1:22:45:8d:66:bc:dc:7c:6b:da:f2:
2c:83:c7:7e:b7:a8:06:3a:42:a1:ce:cf:8c:13:d0:
4b:c0:e3:a9:7b:2b:91:24:06:cb:83:05:89:67:68:
5b:39:91:37:a3:df:40:d2:ad:00:23:56:66:cc:64:
df:a0:14:3d:ec:1d:07:6b:b4:9e:b9:09:8f:48:0f:
4f:0a:34:f0:48:63:2a:37:ba:54:0d:76:b5:79:c5:
c9:dc:a0:80:9a:69:b7:5b:b5:6c:f5:ab:36:e9:77:
38:b6:1d:b1:01:af:9c:1e:22:40:0f:5c:fd:b4:79:
c7:82:c3:83:79:80:55:23:1f:c0:6a:36:2f:06:80:
0d:0b:af:7b:11:8c:cc:c0:bc:f8:33:ed:cb:9b:34:
39:87:21:3b:41:47:44:80:7b:04:8b:d3:5a:2b:8d:
6a:4c:c0:14:f8:54:2a:dc:76:70:4e:f4:1f:7a:d9:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EC:53:F2:22:32:96:F5:E3:9F:F1:8C:B4:5D:57:91:D1:3C:9D:0C
X509v3 Authority Key Identifier:
keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/A90D181AC36C11EFAF838D35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.20.122.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:dc:28:d9:7d:3a:04:65:ad:7e:01:fb:be:64:22:58:fd:11:
fc:c0:e8:6a:a9:63:0b:ca:cd:f3:57:16:ff:01:0b:c8:2f:1f:
03:ab:ce:45:2c:85:b7:46:76:8d:02:7a:25:d1:dc:cd:f2:41:
28:46:f7:43:fe:b0:97:59:5f:fd:24:2a:87:c6:d9:ac:21:e5:
e5:4e:ce:12:81:06:9e:19:72:f0:2f:e9:26:11:ec:2e:67:04:
8e:2e:65:34:94:9b:1b:db:ad:64:fa:2a:5e:d5:72:f5:bb:b6:
ac:75:b4:7f:41:7f:eb:e9:f6:df:6e:f3:6e:52:12:33:7d:d7:
4a:de:f7:0f:9b:ba:ca:7e:1b:98:2a:6e:96:be:b6:c1:37:24:
92:9a:2e:f3:87:09:7e:4b:c9:4f:cf:46:1b:e7:4a:36:ea:b6:
dd:19:59:bb:3c:a0:85:09:0e:e2:6d:cc:f6:d6:b8:bd:40:d7:
8c:90:88:a4:dc:0f:17:9c:ec:5d:ae:a2:f1:77:bf:57:e8:76:
65:1b:00:aa:64:6b:1b:8d:cf:f7:76:b7:39:b5:ce:5c:eb:46:
3c:ed:ea:87:c3:58:65:ba:c1:90:0d:b9:78:7d:cd:13:c3:60:
a8:cf:25:d1:89:4f:e0:4c:4a:d2:fc:0c:6e:a8:21:41:ec:9b:
83:ab:45:75
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODU0RDExMC8GA1UEBRMoMTUzNUNBNzkwOUFFN0E0OEMwQkIzOEMwODI3QUVENzY2
RTMwRjgyQTAeFw0yNTA2MjcwNzIxMTBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NWU0NjY2LWM1ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDe4HlGBPTUdgETj/u0djaM+Wg/aH+POPP9L0qbzyVmfSVOwsTWDfLiyG4jxm3T
Ygngt9NflFXyWRj6PBPUdfTeT+nk2F1DfqBhZoqiSAXhIkWNZrzcfGva8iyDx363
qAY6QqHOz4wT0EvA46l7K5EkBsuDBYlnaFs5kTej30DSrQAjVmbMZN+gFD3sHQdr
tJ65CY9ID08KNPBIYyo3ulQNdrV5xcncoICaabdbtWz1qzbpdzi2HbEBr5weIkAP
XP20eceCw4N5gFUjH8BqNi8GgA0Lr3sRjMzAvPgz7cubNDmHITtBR0SAewSL01or
jWpMwBT4VCrcdnBO9B962b8rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUOxT8iIy
lvXjn/GMtF1XkdE8nQwwHwYDVR0jBBgwFoAUFTXKeQmuekjAuzjAgnrtdm4w+Cow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTREL0RGMzg5OERFQzM2
QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtqQXV6akFnbnJ0ZG00dy1D
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRlRYS2VRbXVla2pBdXpqQWducnRkbTR3LUNvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODU0RC9ERjM4OThERUMzNkIxMUVGQkNCQzVCMTZDNEY5QUUwMi9BOTBEMTgxQUMz
NkMxMUVGQUY4MzhEMzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKAUejANBgkqhkiG9w0BAQsFAAOCAQEADtwo2X06BGWtfgH7
vmQiWP0R/MDoaqljC8rN81cW/wELyC8fA6vORSyFt0Z2jQJ6JdHczfJBKEb3Q/6w
l1lf/SQqh8bZrCHl5U7OEoEGnhly8C/pJhHsLmcEji5lNJSbG9utZPoqXtVy9bu2
rHW0f0F/6+n2327zblISM33XSt73D5u6yn4bmCpulr62wTckkpou84cJfkvJT89G
G+dKNuq23RlZuzyghQkO4m3M9ta4vUDXjJCIpNwPF5zsXa6i8Xe/V+h2ZRsAqmRr
G43P93a3ObXOXOtGPO3qh8NYZbrBkA25eH3NE8NgqM8l0YlP4ExK0vwMbqghQeyb
g6tFdQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:08 2025 by rpki-client