
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
File: 65A65112AFAD11F085B80A52C4F9AE02.roa (raw, json)
Hash identifier: CRSFobmrw7eSMdAPCnZsOqmV8UeoBpCtqIXoXWjieeg=
Subject key identifier: 71:D2:BF:74:6D:C5:6E:F9:E5:0E:FE:5B:C8:1F:E8:E5:02:AE:76:CD
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3AAB
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
Signing time: Thu 23 Oct 2025 01:12:52 +0000
ROA not before: Thu 23 Oct 2025 01:12:52 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131646
IP address blocks: 49.128.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15019 (0x3aab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Oct 23 01:12:52 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68f98114-cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:72:c4:16:f6:c2:73:44:29:12:04:ce:8f:
6c:04:4e:f8:a4:a3:60:29:32:d2:92:bf:3c:4c:9e:
53:19:94:97:09:72:bb:3f:51:4e:6c:61:d7:cd:83:
a4:37:dd:29:42:00:c7:da:87:28:da:b2:2b:15:ea:
5b:a0:a4:7a:2e:11:76:9c:1b:cd:ec:ba:83:4e:c2:
c8:00:87:3e:35:1e:95:9b:d6:9e:20:20:c2:db:aa:
7c:c2:41:8c:39:7f:3c:3c:53:79:62:b2:d6:40:e9:
b9:5d:eb:af:6b:0f:cc:0d:59:69:d9:77:2e:c9:00:
7e:75:d3:84:27:b0:da:2a:d2:f6:76:e4:c9:91:ad:
6d:66:e1:68:4f:f4:e6:5d:01:c6:e9:97:83:2e:a2:
79:5f:36:7b:ba:81:fc:b6:13:04:e9:90:11:78:de:
04:0b:24:b8:ed:bd:97:16:30:39:0a:11:78:76:7d:
5d:7e:6e:41:32:86:87:24:19:4c:b3:1f:42:56:fd:
47:99:5d:6d:47:3f:19:f7:f5:0d:b1:f7:30:92:de:
a6:36:2e:9f:ff:56:41:ea:5a:5a:b5:60:88:43:36:
fc:e0:ef:6a:90:3c:d1:a8:02:02:23:9d:6d:ea:1f:
e1:8c:84:e6:12:4c:d6:ac:1a:ab:6e:db:15:bb:d5:
71:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D2:BF:74:6D:C5:6E:F9:E5:0E:FE:5B:C8:1F:E8:E5:02:AE:76:CD
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.128.203.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fb:c5:90:7a:79:4a:c8:24:15:54:34:ca:a7:78:fc:44:cb:
99:97:78:52:16:75:e7:df:9c:26:e9:af:39:d6:a1:ee:a4:10:
06:22:62:3a:88:e8:d1:2d:a6:fe:4b:fa:98:1c:10:3b:8b:53:
00:10:6e:bf:0a:97:13:bd:ee:7b:9d:bd:f3:b4:93:99:85:f0:
bd:27:fb:a3:70:7d:a7:cd:b0:74:35:85:61:aa:5c:a9:90:fe:
a2:ef:3f:6b:6d:95:04:59:01:52:0f:db:e8:75:1e:98:e7:84:
f8:74:19:35:b9:d8:47:43:d6:96:ea:59:e6:5f:9c:b5:17:09:
d6:3b:ce:2d:6b:1c:84:ee:df:01:bd:d7:8e:6c:91:f3:76:d1:
d6:db:c5:03:e8:da:67:07:7d:2f:27:b4:25:52:74:bc:b8:2c:
64:a1:e0:da:36:45:f2:02:19:c0:11:33:73:c2:48:62:4b:16:
ba:be:53:6f:10:d7:3d:57:04:db:08:f0:0f:77:7c:8f:3b:2c:
b0:c3:44:35:92:f0:11:9c:a1:4a:72:88:6a:57:18:aa:df:08:
8e:84:e3:c2:97:0c:b7:e2:a0:94:bb:0c:d6:89:c9:24:e7:1a:
7e:58:94:a3:42:79:70:ac:83:60:f8:9e:7d:83:ef:cb:33:13:
de:55:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:29 2025 by rpki-client