
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/C6047A6481A111F08CBC9741C4F9AE02.roa
File: C6047A6481A111F08CBC9741C4F9AE02.roa (raw, json)
Hash identifier: bgbW7xHV4YTAXMUDumTfB3UuK2rCir4YSQMN24IIGfM=
Subject key identifier: B6:62:84:FA:FA:43:6D:D8:2E:82:F6:FE:C7:36:3A:5D:83:1E:5D:F6
Certificate issuer: /CN=A9139661/serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
Certificate serial: 1F
Authority key identifier: B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/C6047A6481A111F08CBC9741C4F9AE02.roa
Signing time: Mon 25 Aug 2025 10:53:46 +0000
ROA not before: Mon 25 Aug 2025 10:53:46 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154020
IP address blocks: 2001:df6:2c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl
rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139661, serialNumber=B5549F6181FFA7AF25D8D23A6673054DC4566C0C
Validity
Not Before: Aug 25 10:53:46 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68ac40ba-7393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:6a:17:8f:bf:42:91:74:d7:76:65:f7:12:
46:69:82:f7:24:51:a7:e1:c9:36:07:a5:b3:dd:3e:
bf:78:f7:5c:57:b9:0c:2c:2c:b5:b5:1f:67:50:46:
3e:e1:41:bf:aa:68:a0:bd:ab:db:1b:2e:9c:05:ae:
b7:fa:de:1a:8d:38:ce:fa:af:90:61:38:3e:e5:1c:
43:99:54:12:02:e3:da:12:96:5d:00:1b:b8:29:8a:
e9:88:bd:52:59:94:86:8e:2c:b7:c0:b1:b6:59:3c:
8c:9b:6a:2b:d4:1a:6e:02:d9:9f:73:9c:5c:fb:34:
69:62:83:e6:3a:9a:32:68:5e:df:3c:8b:ae:4a:bd:
ff:99:24:cf:e3:1d:a4:e7:25:28:2c:c7:5f:ca:e2:
3f:1d:83:35:df:4e:f1:76:56:8a:3f:aa:d7:4b:d8:
a0:f8:e7:07:22:16:ff:c9:08:d3:c7:1d:57:07:62:
9e:0d:ca:4b:82:a0:d1:ca:c1:b5:6d:86:80:ff:8e:
3b:ec:d1:32:e0:76:7e:b1:8b:36:72:e0:2d:da:ce:
74:0f:22:3a:c4:b3:7d:e2:29:3e:c6:0d:bf:fd:b8:
6b:f3:7b:ba:ba:d7:e3:b2:a2:c6:9e:86:6a:6b:f0:
68:0b:e8:71:88:3d:7d:64:8a:bd:a8:3b:67:43:e1:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:84:FA:FA:43:6D:D8:2E:82:F6:FE:C7:36:3A:5D:83:1E:5D:F6
X509v3 Authority Key Identifier:
keyid:B5:54:9F:61:81:FF:A7:AF:25:D8:D2:3A:66:73:05:4D:C4:56:6C:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/tVSfYYH_p68l2NI6ZnMFTcRWbAw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVSfYYH_p68l2NI6ZnMFTcRWbAw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/198EE53E58E411F08726A57AC4F9AE02/C6047A6481A111F08CBC9741C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:2c0::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a2:45:a0:09:59:7a:55:4d:ec:5e:c3:c7:54:51:36:b5:d8:
a9:12:0f:47:81:b6:67:fa:2d:ab:d1:4d:2c:c9:a2:16:1b:a3:
35:ca:50:25:0f:a7:27:c7:7b:c0:e5:b8:9a:5d:b3:91:c3:56:
2b:ed:1f:c0:cd:6c:27:36:6f:1d:16:04:47:18:de:19:ac:38:
b4:7a:b3:cf:c3:26:50:6f:5d:e0:1e:99:be:75:48:1b:31:42:
e7:fb:c7:b7:11:1b:4e:b1:45:9e:1a:af:11:fe:b9:25:17:f2:
49:41:1d:a1:11:bd:4a:8d:0a:64:35:43:2f:fa:fe:be:93:e0:
d2:76:59:24:fd:68:7b:7a:e9:8e:e2:e6:92:c5:07:a5:29:81:
74:22:60:7f:9f:18:c7:29:28:b8:20:f3:73:93:c5:84:da:af:
71:d2:8e:90:96:f2:20:43:81:36:0e:a6:21:14:4f:97:c6:77:
07:ab:c7:86:fd:49:eb:c2:c3:3c:05:b8:a2:e8:ae:49:a2:e6:
74:25:2c:d3:fb:d3:43:10:fa:ca:58:5f:6d:95:92:ed:2f:43:
0e:c5:14:b1:93:81:fb:a6:68:6e:3b:38:10:1d:5d:bf:f5:d9:
14:76:d4:46:2e:2c:38:08:8a:50:da:ea:93:90:ae:37:4d:27:
5f:9b:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:18:22 2025 by rpki-client