
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
File: 4DAFC184ADC011ED897A4050C4F9AE02.roa (raw, json)
Hash identifier: Za3bISDsY9jXSiAUyE8K8a9BeVgovmO/YNcIsWrBq60=
Subject key identifier: 9B:9B:47:0B:23:D4:24:72:2B:B6:04:E8:87:BD:08:9B:96:9F:E7:47
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0A64
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
Signing time: Thu 30 Oct 2025 20:09:09 +0000
ROA not before: Thu 30 Oct 2025 20:09:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58877
IP address blocks: 137.166.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2660 (0xa64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: Oct 30 20:09:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6903c5e4-6a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:08:46:f8:1b:c6:90:52:c1:02:52:ee:be:
5a:af:22:95:49:ff:34:b5:d0:b2:ca:4a:23:fc:e3:
6a:b7:3c:b3:ed:5e:07:21:8b:3d:29:8b:1f:c3:be:
fa:e6:12:a9:8a:7c:c0:e8:90:74:c7:9c:62:0a:20:
cb:21:93:dc:61:e3:ae:70:cc:dc:a2:2c:dd:a1:7f:
f9:bd:c1:e6:e9:e0:de:fc:db:34:44:07:3c:81:e0:
e4:1a:ae:4b:5f:31:29:9e:d8:21:79:16:6b:2b:1d:
9d:20:10:cc:0b:76:d3:60:44:49:5e:f5:70:4a:68:
c6:02:49:59:71:c5:eb:fc:69:17:cd:b5:c1:14:ff:
62:fd:6c:55:80:96:00:f6:36:ba:6c:a7:8f:31:a7:
05:db:b3:36:18:94:0a:ec:ea:c5:35:37:b0:4f:81:
d9:c9:a8:57:f4:7c:d2:d0:cd:fe:67:f4:18:ba:95:
b7:75:56:af:1f:2c:ac:74:35:16:99:6a:45:8a:d1:
f3:8a:60:3b:18:66:c5:91:97:2b:9a:ef:d3:ee:68:
c6:56:30:3d:24:83:4c:47:89:55:4e:96:6c:dc:43:
5f:30:cb:e2:58:41:31:fd:cd:82:0e:29:e5:86:8d:
50:ed:a8:ba:e4:f4:5a:44:45:d3:d6:48:6b:3a:2a:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9B:47:0B:23:D4:24:72:2B:B6:04:E8:87:BD:08:9B:96:9F:E7:47
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/4DAFC184ADC011ED897A4050C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:6d:d1:96:de:c8:b7:a1:15:36:f2:87:74:bd:a6:32:77:fe:
cd:d8:6f:d7:e5:f6:29:2a:4a:6b:bd:27:d0:b8:fe:ee:4f:a5:
3e:95:0b:42:9f:a1:9f:0d:96:6f:6e:a8:98:9d:87:3e:37:dc:
1c:53:28:fa:43:e8:13:ec:ac:ae:4c:f3:04:d5:5c:08:60:8d:
79:ef:56:60:05:13:44:a1:91:df:42:09:63:e7:78:67:34:e4:
92:49:43:95:a1:20:d1:49:85:46:1c:67:35:90:d1:b9:fa:84:
e5:da:4d:02:f2:24:5a:85:c6:7c:9d:2f:e1:46:06:3d:10:76:
0d:75:43:ca:a3:1e:fc:41:f6:f7:b2:cf:51:3f:68:76:08:5e:
1e:e1:60:25:ac:45:77:87:41:06:08:92:69:94:eb:9b:bf:13:
3d:c9:1b:24:c5:b1:8e:06:da:5a:8b:cb:e5:93:a2:b0:53:45:
16:b8:c5:04:b5:55:ea:84:6c:d7:2a:8e:33:a9:1c:a3:42:8a:
17:63:64:45:17:27:32:9e:24:5d:12:93:90:84:c0:7e:7a:93:
eb:72:a5:b4:f5:67:6c:a3:0e:7e:49:eb:47:0a:8e:81:3d:c1:
26:8e:05:e2:77:23:ff:8c:2c:70:ec:a0:5e:f4:b4:50:c3:d4:
91:b6:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:45:09 2025 by rpki-client