
$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/2A162D644EE411EFB8076138C4F9AE02.roa
File: 2A162D644EE411EFB8076138C4F9AE02.roa (raw, json)
Hash identifier: CASKMKD1PnprwkuEK2EBDFm70EKC4cCUcvjuCxGca94=
Subject key identifier: 8C:E6:E9:08:36:C4:7A:BD:C5:15:75:DB:3E:61:D7:70:B5:C0:44:30
Certificate issuer: /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial: 1348
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/2A162D644EE411EFB8076138C4F9AE02.roa
Signing time: Thu 14 Aug 2025 17:26:47 +0000
ROA not before: Thu 14 Aug 2025 17:26:47 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 19905
IP address blocks: 203.116.108.0/24 maxlen: 24
203.117.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4936 (0x1348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Validity
Not Before: Aug 14 17:26:47 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=689e1c57-3e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:c7:b4:9f:c9:c2:07:3b:21:6a:04:1f:19:
d4:4d:e8:85:73:91:2f:30:19:fd:8a:82:25:8e:0a:
f0:e1:ac:1d:6a:f5:58:34:ea:be:75:07:fc:2b:ba:
31:6d:26:c7:26:40:07:3b:bf:48:25:2d:68:5e:f3:
d4:48:d7:8b:ec:ff:d3:97:38:d7:bd:b8:48:fa:61:
91:f3:1f:bd:de:88:af:f4:1d:ae:9a:a8:ac:f3:ea:
0c:3d:e7:7f:fc:f1:79:5f:27:1e:5b:79:8a:08:f3:
ca:b7:03:40:43:d6:04:da:1c:95:1b:6f:54:2c:7d:
9f:29:35:09:3e:e7:9f:3e:76:91:49:63:d9:89:6b:
97:50:8a:f6:61:da:f7:66:07:dd:1f:66:40:22:3b:
90:8a:ce:7e:36:b3:00:11:d1:19:34:91:31:20:83:
24:0d:74:91:67:41:d7:5c:d1:31:a1:e1:f7:84:f5:
db:f8:e8:34:ec:c2:88:c2:1b:5c:8a:53:c8:99:5f:
45:2e:a3:35:5d:cb:fc:b8:b2:8c:73:a9:f2:a8:fe:
36:11:6a:35:a3:2b:6f:7e:c0:91:59:e4:99:d2:10:
29:5d:0b:5c:72:81:42:da:c3:3a:9d:b4:0d:63:03:
91:31:bd:ab:fc:cf:5b:6e:d0:d8:07:c3:5e:40:88:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:E9:08:36:C4:7A:BD:C5:15:75:DB:3E:61:D7:70:B5:C0:44:30
X509v3 Authority Key Identifier:
keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/2A162D644EE411EFB8076138C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.116.108.0/24
203.117.8.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8a:e9:34:64:43:ba:8a:f9:e5:8c:fc:ae:ce:8e:b6:21:09:
2f:07:fd:22:fb:71:7a:9e:f9:13:de:1f:60:6e:d6:18:73:56:
e9:ea:fd:5d:8e:c8:60:25:84:c7:59:90:76:3e:22:58:a5:75:
81:5e:37:d3:31:47:c8:62:4e:a4:7a:b4:0f:37:4f:de:18:cb:
85:24:d9:1a:5e:55:1c:e9:a4:4d:6e:56:3f:b0:22:bf:b5:7b:
2d:80:9a:bc:27:34:17:0f:6c:aa:35:b4:e5:24:f3:b5:08:7f:
45:72:ba:ba:d1:aa:f8:ac:6e:4d:b6:e8:11:b5:7c:75:e6:57:
a7:ad:44:ed:78:15:eb:bf:69:86:fa:e0:0d:ff:e8:d1:12:a2:
6f:21:fc:15:6e:cb:4f:de:f0:40:52:34:c6:aa:9c:f0:88:29:
b4:ab:26:ee:94:4e:2d:2d:cc:fc:01:66:2f:e1:12:22:fd:00:
d8:8b:d0:91:fb:10:d0:1e:39:38:3e:ae:bf:3f:88:45:4e:6e:
44:ce:42:f2:e0:7b:e1:17:61:96:33:c0:a3:b3:ab:4a:12:b6:
91:73:18:02:d5:06:38:c8:06:27:a5:b4:ac:61:92:58:d1:19:
df:e1:72:6c:69:07:5a:08:c8:55:81:1d:43:90:3f:aa:54:f5:
79:70:bc:9e
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICE0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDAyREMxMTAvBgNVBAUTKEMyQjlGNUYzQzY4QzU3NjcyNzIzOUI5MkE5M0IzNjI5
N0QxQjE2NTMwHhcNMjUwODE0MTcyNjQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODllMWM1Ny0zZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzR3HtJ/Jwgc7IWoEHxnUTeiFc5EvMBn9ioIljgrw4awdavVYNOq+dQf8K7ox
bSbHJkAHO79IJS1oXvPUSNeL7P/TlzjXvbhI+mGR8x+93oiv9B2umqis8+oMPed/
/PF5XyceW3mKCPPKtwNAQ9YE2hyVG29ULH2fKTUJPuefPnaRSWPZiWuXUIr2Ydr3
ZgfdH2ZAIjuQis5+NrMAEdEZNJExIIMkDXSRZ0HXXNExoeH3hPXb+Og07MKIwhtc
ilPImV9FLqM1Xcv8uLKMc6nyqP42EWo1oytvfsCRWeSZ0hApXQtccoFC2sM6nbQN
YwORMb2r/M9bbtDYB8NeQIg/IwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIzm6Qg2
xHq9xRV12z5h13C1wEQwMB8GA1UdIwQYMBaAFMK59fPGjFdnJyObkqk7Nil9GxZT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDJEQy8yRDUxQUY0MkZE
M0UxMUU4ODhDNTM5NDRDNEY5QUUwMi93cm4xODhhTVYyY25JNXVTcVRzMktYMGJG
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dybjE4OGFNVjJjbkk1dVNxVHMyS1gwYkZsTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDAyREMvMkQ1MUFGNDJGRDNFMTFFODg4QzUzOTQ0QzRGOUFFMDIvMkExNjJENjQ0
RUU0MTFFRkI4MDc2MTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADLdGwDBADLdQgwDQYJKoZIhvcNAQELBQADggEBAFGK6TRk
Q7qK+eWM/K7OjrYhCS8H/SL7cXqe+RPeH2Bu1hhzVunq/V2OyGAlhMdZkHY+Ilil
dYFeN9MxR8hiTqR6tA83T94Yy4Uk2RpeVRzppE1uVj+wIr+1ey2AmrwnNBcPbKo1
tOUk87UIf0VyurrRqvisbk226BG1fHXmV6etRO14Feu/aYb64A3/6NESom8h/BVu
y0/e8EBSNMaqnPCIKbSrJu6UTi0tzPwBZi/hEiL9ANiL0JH7ENAeOTg+rr8/iEVO
bkTOQvLge+EXYZYzwKOzq0oStpFzGALVBjjIBieltKxhkljRGd/hcmxpB1oIyFWB
HUOQP6pU9XlwvJ4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:02:11 2025 by rpki-client