
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/41E7BB1C0BA211F08457541BC4F9AE02.roa
File: 41E7BB1C0BA211F08457541BC4F9AE02.roa (raw, json)
Hash identifier: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04=
Subject key identifier: 7D:E8:02:87:FD:6A:2B:01:2D:B7:7E:B3:BA:28:09:6D:5F:94:71:69
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: 05
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/41E7BB1C0BA211F08457541BC4F9AE02.roa
Signing time: Fri 28 Mar 2025 07:02:11 +0000
ROA not before: Fri 28 Mar 2025 07:02:11 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 136897
IP address blocks: 117.18.109.0/24 maxlen: 24
202.181.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Mar 28 07:02:11 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67e64972-bbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:d3:5b:4b:89:dc:ec:aa:2d:f7:5e:16:99:
ae:1a:2a:c2:23:61:8b:5a:08:5f:0e:d1:ac:7f:13:
33:a8:02:70:88:3c:33:19:f5:b6:32:46:2c:f4:04:
ff:4a:de:9f:3e:02:7c:13:dd:09:8c:18:b1:56:2a:
8f:62:5f:b4:c6:4e:98:68:34:42:eb:bf:2a:35:44:
58:45:fb:5f:9e:1d:d7:37:6b:f9:a0:ea:c0:e4:f0:
75:8a:21:87:50:99:6e:3e:7c:83:52:0a:13:5b:e5:
30:1d:30:15:34:a0:83:c1:51:53:a5:c7:e3:47:a3:
bc:c5:a2:bf:d7:c5:f4:0e:70:ba:d6:58:d9:b4:a2:
c7:4e:77:71:07:21:15:7d:d5:97:73:a0:52:cb:fc:
57:66:fb:41:e1:ee:43:d1:42:98:20:9a:b8:46:a9:
4d:1e:2e:0d:d2:fb:fa:25:94:c3:01:05:88:7d:4e:
29:c8:1e:a9:1e:97:bf:25:21:d4:c4:15:7d:0f:63:
c9:a7:c5:fb:9b:93:af:7f:d7:9a:12:b8:97:47:ce:
f9:77:10:6f:f9:33:3a:c2:4e:3e:7d:66:f5:6b:66:
0f:15:15:c4:bf:c4:18:26:5d:ea:eb:f9:95:cb:96:
b2:00:6a:8a:04:b7:8d:70:ae:b2:aa:f5:88:4a:18:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:02:87:FD:6A:2B:01:2D:B7:7E:B3:BA:28:09:6D:5F:94:71:69
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/41E7BB1C0BA211F08457541BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.109.0/24
202.181.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:36:44:79:31:08:39:2d:35:0a:03:8f:f9:6c:f2:c0:d5:0a:
e2:18:f2:6f:8a:0d:15:42:2f:b2:8b:28:b9:3a:6e:a2:d8:64:
af:75:fe:42:2e:0d:fd:79:0b:36:35:70:bd:76:2f:c8:75:6b:
3e:ab:c4:1a:79:a4:bf:25:31:c1:09:d3:86:34:fc:8e:41:51:
e5:65:46:89:15:3d:45:04:4e:e6:34:54:c7:83:b6:96:3e:52:
60:aa:25:8a:69:98:2b:74:e9:0f:45:45:a5:0d:24:d7:ec:a3:
e8:d4:26:a3:b5:ce:81:9c:67:66:e4:4d:4b:71:92:dc:3b:4a:
5a:07:62:87:fa:45:8d:8b:16:2c:13:eb:78:82:22:20:4d:a1:
91:eb:8b:1b:3c:36:a7:3c:68:17:ea:f1:b2:fd:82:a8:2b:34:
4e:49:e6:fd:c4:98:15:9f:cd:a6:95:33:cb:09:83:2e:1a:bb:
6f:6d:f5:a6:d1:41:9f:89:0b:8b:ad:c3:e0:fc:8b:2a:14:6d:
d0:46:4c:cb:15:f7:ed:47:f8:40:21:4c:64:79:db:52:ce:f2:
b3:3e:59:78:79:47:44:06:01:c2:9b:a6:b7:20:7b:5a:12:6b:
7b:9c:a4:50:c8:8a:05:43:86:85:ce:6d:09:36:fd:50:0e:24:
7e:53:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:03:45 2025 by rpki-client