
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/94FA2A66174B11EF84A2715AC4F9AE02.roa
File: 94FA2A66174B11EF84A2715AC4F9AE02.roa (raw, json)
Hash identifier: eatKOCejKXvfU8SPSsA1QwT7IjJRshkBsQk4DWD5N0U=
Subject key identifier: 6B:C9:0C:55:B3:C2:48:73:F8:2A:7A:6A:36:0F:C3:34:36:8A:87:5F
Certificate issuer: /CN=A9147016/serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Certificate serial: 03F0
Authority key identifier: 59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/94FA2A66174B11EF84A2715AC4F9AE02.roa
Signing time: Thu 05 Dec 2024 00:33:07 +0000
ROA not before: Thu 05 Dec 2024 00:33:07 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45946
IP address blocks: 162.112.25.0/24 maxlen: 24
162.112.39.0/24 maxlen: 24
162.112.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147016, serialNumber=595759D17F8ACF44CC54D906046C02F4B1D9DAA2
Validity
Not Before: Dec 5 00:33:07 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6750f4c3-5ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:dc:d8:7e:c3:82:b0:5f:49:f1:33:0e:24:
92:94:63:86:49:c4:0e:4a:23:bd:a0:d9:35:f9:00:
91:ef:89:61:97:c0:59:66:86:ab:24:2e:d4:9a:9a:
a5:be:ba:b2:ba:de:27:1b:f1:47:38:04:cd:a1:47:
f4:8c:32:27:3d:c2:2e:93:9b:fb:46:fe:95:6d:94:
58:50:d1:08:5a:50:74:21:0f:9d:ec:eb:27:60:a1:
57:00:11:1d:9d:8e:1a:44:3e:ec:e2:16:aa:da:b7:
6d:8e:65:ad:79:30:d3:9b:66:27:03:f8:51:da:ff:
f6:97:a3:f5:e4:ac:ba:50:fe:46:dc:2f:c6:3e:b2:
f7:0d:d0:2a:4e:90:94:f3:5b:26:64:17:e4:90:3f:
ce:59:69:f3:48:77:ee:91:3e:2f:72:a6:e7:f1:4e:
e8:e7:42:c4:25:ec:e9:b6:ed:d6:1a:20:5d:10:42:
2b:27:18:1d:17:56:25:ff:b4:8f:ac:f5:d8:6c:05:
95:0b:6a:e1:14:05:71:74:82:77:5f:df:ca:05:98:
fc:b6:60:3e:e0:ac:e9:7b:a2:0b:21:85:a7:8a:0f:
46:0f:84:63:69:eb:bd:bb:07:19:71:24:80:30:90:
20:97:42:29:bc:25:bd:f6:6d:9c:df:03:5a:fb:55:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:0C:55:B3:C2:48:73:F8:2A:7A:6A:36:0F:C3:34:36:8A:87:5F
X509v3 Authority Key Identifier:
keyid:59:57:59:D1:7F:8A:CF:44:CC:54:D9:06:04:6C:02:F4:B1:D9:DA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WVdZ0X-Kz0TMVNkGBGwC9LHZ2qI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147016/2D791D4C563D11EC95F3DC16C4F9AE02/94FA2A66174B11EF84A2715AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
162.112.25.0/24
162.112.39.0-162.112.40.255
Signature Algorithm: sha256WithRSAEncryption
80:46:3f:05:fc:df:0f:d2:8d:3d:19:fd:7d:10:c3:94:29:59:
9d:a1:9e:86:74:93:2b:d1:cb:6c:90:ce:ba:4a:89:18:8c:a0:
1b:6f:da:9e:35:b4:a8:22:6e:6d:c7:21:de:7b:fe:d2:86:0b:
71:da:72:2d:8b:4d:e8:3d:28:98:98:c0:cd:e1:37:ef:1a:93:
91:ae:a5:1c:4e:bb:ec:b5:f9:3b:9b:cf:25:ff:41:45:d3:63:
02:3b:45:51:47:31:25:20:4f:90:4f:06:2d:58:b4:e7:0f:8b:
0c:a9:bf:f1:ce:ed:d4:37:ac:fc:4d:2a:21:16:d5:6b:90:28:
9d:db:03:6e:a8:6f:97:12:52:01:7e:14:3f:0c:58:fd:8e:d5:
83:05:32:a6:81:b1:d0:d5:21:f5:68:54:84:21:c2:4f:fe:e1:
a9:6e:35:c0:6f:00:06:03:b9:ba:95:8c:1f:a8:d3:f7:0c:7e:
8b:f9:63:c4:09:bc:36:a3:05:f0:a6:21:ac:39:8f:a0:4b:ed:
38:b0:07:f1:36:d7:fa:5f:04:b6:25:eb:01:b9:d4:3f:ae:22:
3a:cb:f8:17:d0:d2:a3:ae:ed:57:c4:aa:99:03:5b:ba:d7:7f:
d0:99:74:00:75:df:67:f0:00:9a:93:97:96:4b:a3:88:70:c5:
4a:f2:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:07:03 2025 by rpki-client