
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9765FB988A5D11EE9E6AA223C4F9AE02.roa
File: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (raw, json)
Hash identifier: VzbPsPGLDl5f/oFOZ9NpXnSyLExyEIRw6V+vhyTevuk=
Subject key identifier: 16:2C:22:B0:F6:60:63:67:3F:92:1F:2A:0C:4D:44:80:02:E8:B7:EF
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 08EE
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9765FB988A5D11EE9E6AA223C4F9AE02.roa
Signing time: Tue 04 Nov 2025 21:40:35 +0000
ROA not before: Tue 04 Nov 2025 21:40:35 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 394869
IP address blocks: 61.245.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Nov 4 21:40:35 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690a72d3-9e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:b3:69:22:b2:2e:2c:3c:85:07:73:83:30:
ae:2f:0b:bb:8c:dc:21:f4:ac:9f:52:83:f7:12:c0:
f0:68:cd:1f:34:f7:15:b1:88:ba:9b:25:40:80:95:
3d:eb:f1:1d:5b:7b:f5:65:dc:c9:e9:54:1b:56:91:
69:1a:54:2b:43:86:6d:e2:d7:ee:b4:f2:e1:03:34:
c4:9c:bb:12:4e:1e:19:6b:1a:2e:47:5f:ca:23:6d:
b1:23:3e:33:af:84:5f:54:34:b9:48:8e:28:7e:17:
10:33:c7:2d:9f:b1:3c:0a:b1:4d:da:8f:82:1a:fc:
81:90:08:57:6e:b4:b3:5b:e3:e8:31:f3:3c:00:eb:
47:7c:48:d0:7c:cf:54:c0:59:1c:30:e5:8a:b1:9e:
d4:f2:02:21:1e:8c:c3:03:e0:8e:01:10:84:5e:94:
0e:5d:87:43:a3:d9:6d:8b:c6:2c:da:99:90:00:8f:
15:69:48:97:c6:35:81:55:0e:d8:84:c6:1f:e5:7e:
9b:c0:9f:87:74:fa:3a:86:b3:fd:38:76:a6:98:3f:
e9:b1:b2:5d:7d:34:a0:07:ed:f5:aa:6f:55:85:7d:
6a:b6:75:a0:48:de:e8:68:dd:7c:5f:ae:c7:b7:73:
42:35:48:5a:2f:11:7e:4a:37:d1:35:fd:28:05:11:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2C:22:B0:F6:60:63:67:3F:92:1F:2A:0C:4D:44:80:02:E8:B7:EF
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9765FB988A5D11EE9E6AA223C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.31.0/24
Signature Algorithm: sha256WithRSAEncryption
86:71:4a:91:e0:88:48:3c:24:8c:03:27:b6:c4:23:fc:33:01:
ad:ff:50:fc:d3:3b:16:bb:98:cf:9c:51:c8:f7:84:ba:c7:a8:
ec:54:bc:75:f7:ab:15:4d:0a:8a:65:4e:e8:90:ce:32:3c:78:
e5:a8:40:76:cc:3b:13:ba:4e:ab:f1:a1:f2:7b:88:ce:6d:a0:
55:7b:c5:b5:78:ca:db:72:1e:86:21:09:bb:46:47:b9:15:27:
da:6f:83:a8:d1:13:a4:4c:b7:2f:77:59:c6:6d:40:e7:6e:f3:
98:48:4e:26:9f:d4:8c:56:15:4b:e4:b5:4c:54:b2:a9:99:46:
97:31:23:2b:a4:42:64:cd:24:d1:5d:53:4c:b3:e0:cc:d5:9b:
a1:cc:e0:86:19:9b:83:e1:29:c4:d4:a1:1e:f4:6d:88:1f:db:
eb:62:c5:0d:8b:c8:63:56:a3:06:46:42:7b:71:80:b9:2d:45:
6c:59:76:f2:23:ca:11:a1:30:43:01:2f:9c:33:7f:a9:5b:b5:
2c:35:10:ff:be:8a:09:3d:35:9e:d1:c5:ba:6f:6e:b4:90:c5:
f6:b8:17:17:e9:73:42:ef:10:06:4b:4f:ee:33:0c:58:dd:e7:
6e:cc:77:60:67:7e:51:3c:33:4d:76:c2:f9:aa:01:e5:c5:36:
d8:e5:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:37 2025 by rpki-client