
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
File: B8B02658C16B11EEA7D01A7DC4F9AE02.roa (raw, json)
Hash identifier: inEKK4l1A/n9MCoAdqgbUu3ySJUn1ofzfsmCuXBMLoQ=
Subject key identifier: 90:F7:C9:C6:E2:36:F2:96:9A:69:7F:3E:79:2D:AA:E2:E8:18:F3:AB
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 30A0
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
Signing time: Sat 02 Aug 2025 15:52:07 +0000
ROA not before: Sat 02 Aug 2025 15:52:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24434
IP address blocks: 202.6.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12448 (0x30a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Aug 2 15:52:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688e3427-45a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:ef:13:03:d6:bc:f7:82:2c:93:a9:dc:e9:
8e:30:98:2e:ce:da:3d:78:46:8e:7a:d7:63:60:2e:
30:9d:de:4f:77:09:45:3b:a9:ee:fc:d6:8f:71:cd:
d9:7b:76:19:28:d6:77:3e:48:7c:b7:0e:2f:a1:77:
09:42:fc:2b:fd:ff:d3:82:7f:9a:a8:f1:7b:9e:65:
1d:6c:97:0f:63:c4:68:dc:b6:ad:97:62:48:1c:32:
ff:12:e7:c9:27:d1:cf:52:70:0d:9b:0d:c1:44:08:
df:d7:ed:ab:ec:ee:54:86:b7:df:3a:f7:e9:bb:3b:
c2:da:ea:cc:44:f3:4e:60:30:c9:03:ef:8e:fc:bb:
9e:a4:dc:a7:a3:1f:fe:04:06:22:19:c6:03:64:67:
14:a7:6c:80:90:fd:15:27:79:9a:0e:b1:fe:90:ed:
e7:ae:de:1f:d5:0c:4b:05:45:6a:20:b3:74:41:29:
71:1d:62:55:10:e9:08:bc:57:3f:a5:31:ae:51:81:
ae:98:49:da:08:3a:28:59:70:a3:31:1b:e8:8b:82:
f7:f3:58:85:35:56:0e:22:32:35:55:87:8a:45:a5:
e4:c1:6a:70:b7:1a:bf:30:81:e0:38:82:4c:5b:a2:
c6:a6:be:fb:b9:0a:b4:84:b9:50:87:56:bf:97:13:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F7:C9:C6:E2:36:F2:96:9A:69:7F:3E:79:2D:AA:E2:E8:18:F3:AB
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:56:5b:88:a9:d6:c8:09:1e:96:a5:67:0b:c9:5f:73:40:50:
3e:5e:46:00:e7:9b:47:3a:4a:07:b3:be:3d:fa:c8:04:01:e6:
39:f4:a3:30:60:f6:f3:dd:68:d5:55:c9:e6:cb:ac:d2:e9:1f:
5d:96:fa:79:22:0a:4b:f7:b5:96:9a:73:b9:38:9d:7c:39:96:
13:98:ae:77:58:d0:cf:04:a7:23:d2:cb:ec:86:33:fc:a5:62:
b7:21:0b:83:38:18:a3:4b:c3:99:7d:6b:6c:8c:d1:04:8b:73:
e9:c7:84:a2:c7:62:5e:aa:cc:b4:3c:b1:6a:fe:36:63:74:1e:
d9:66:b4:81:e0:89:79:ca:9d:82:ed:9e:be:cd:32:03:cc:63:
8e:63:d2:2d:e9:f1:40:c2:47:77:90:91:86:72:4f:18:14:89:
4c:1e:98:00:d1:55:ac:d8:0a:16:b8:b0:63:22:d2:de:f6:b1:
7b:53:0c:20:f0:eb:20:88:50:f2:65:eb:0f:79:fa:6d:e1:71:
ae:29:3a:89:40:5e:1a:36:11:29:4d:5a:7a:15:9b:6b:14:7f:
32:90:85:f2:d5:06:ca:93:32:d6:45:33:be:b3:58:39:8a:8a:
a0:2b:c4:8b:43:27:b9:5c:91:f7:46:8d:fd:b6:09:41:18:c6:
8e:29:e4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:34:14 2025 by rpki-client