
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/793E79A68D1811EF92E90C51C4F9AE02.roa
File: 793E79A68D1811EF92E90C51C4F9AE02.roa (raw, json)
Hash identifier: omrZAUzqP7gMHmT5OJsVyadDZTS200Mcd28sOHG7NiM=
Subject key identifier: 76:DC:AF:61:F6:2D:9A:D5:CA:FF:97:6F:63:70:F7:88:BB:50:40:7C
Certificate issuer: /CN=A914D0E3/serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Certificate serial: C6
Authority key identifier: E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/793E79A68D1811EF92E90C51C4F9AE02.roa
Signing time: Fri 31 Oct 2025 06:20:25 +0000
ROA not before: Fri 31 Oct 2025 06:20:25 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136607
IP address blocks: 160.187.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0E3, serialNumber=E0E808306595FE68D5F281A962AF6DF51E86F932
Validity
Not Before: Oct 31 06:20:25 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69045529-4d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:b3:d2:45:2c:c6:b3:07:17:90:ca:19:a7:
dc:91:57:93:cb:14:83:eb:55:f4:c1:b8:71:dd:e5:
bc:b7:44:2f:e7:de:06:54:db:56:07:f6:4e:df:ab:
d6:0a:c1:10:df:9f:25:e1:83:46:06:34:82:40:50:
36:cb:e0:50:b2:88:82:32:80:7a:97:76:bf:be:94:
35:19:47:68:c5:7d:0f:f1:2f:3f:15:72:92:63:e6:
99:bc:cf:af:96:82:04:73:36:a5:66:47:4a:48:06:
8e:9c:a2:d5:7e:6a:64:19:72:fe:d2:fd:b6:3a:21:
ae:6e:8e:33:b3:ce:6b:0a:22:e2:15:e5:59:1b:23:
c8:2e:95:84:10:89:b6:6b:fd:c5:12:6e:1d:19:24:
53:84:45:05:a3:bd:64:34:31:b3:8b:9d:9a:b9:3c:
ce:cf:d4:68:b3:ff:19:2a:42:f4:a5:22:f7:d2:57:
88:90:e6:b2:ee:16:c8:c1:17:65:ba:78:29:34:64:
b4:17:f6:27:a2:b6:7b:11:fe:d6:72:a9:23:05:c0:
db:11:13:94:44:a4:0c:59:ce:4f:02:63:87:d5:8c:
4b:36:c2:27:c2:21:d8:79:3d:fe:88:c2:14:ea:c9:
c5:25:12:a7:ab:ff:93:5a:29:cb:47:93:95:18:11:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DC:AF:61:F6:2D:9A:D5:CA:FF:97:6F:63:70:F7:88:BB:50:40:7C
X509v3 Authority Key Identifier:
keyid:E0:E8:08:30:65:95:FE:68:D5:F2:81:A9:62:AF:6D:F5:1E:86:F9:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/4OgIMGWV_mjV8oGpYq9t9R6G-TI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OgIMGWV_mjV8oGpYq9t9R6G-TI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0E3/AA9859F88C7E11EF8E92E71BC4F9AE02/793E79A68D1811EF92E90C51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.4.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e5:ce:9c:c4:ce:80:70:2b:0d:59:c8:22:ef:e2:c6:56:be:
7e:f1:6c:ed:21:5d:fb:94:6b:6b:57:f5:80:2e:26:c6:24:44:
9c:05:85:11:31:2f:90:2b:c4:42:4d:16:7b:e8:f6:e5:f4:73:
c2:86:dc:4b:35:4f:d1:ba:59:ec:8a:a7:28:cc:98:99:9d:24:
dc:7d:68:aa:23:83:03:8b:9e:fc:7a:28:98:55:79:e2:b5:16:
15:aa:99:b1:9b:56:98:38:f6:36:62:41:db:62:a8:ad:c4:92:
75:f7:63:03:ce:6f:10:cf:7f:50:3e:78:f9:36:fd:fc:7d:3b:
d6:ba:95:6c:74:75:c0:e2:ca:8d:4c:c5:e0:4f:2c:c2:e0:07:
7e:9e:06:c1:f7:13:66:88:7a:d4:69:03:0b:48:89:75:40:36:
30:42:5e:4b:b1:35:45:cc:ef:ce:8a:2d:da:65:8c:78:9f:fd:
1c:42:cd:d5:8a:34:ec:93:13:b1:d1:6f:54:f2:f6:23:cb:0a:
f7:32:b0:24:30:de:29:c4:99:24:32:2c:cd:47:45:27:d0:08:
33:87:f3:b4:b5:df:18:6c:b9:f3:1b:af:a9:b9:81:1d:a6:db:
8c:b5:87:b3:96:b7:06:90:d0:60:07:25:0b:a7:95:fa:f9:ce:
96:49:06:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:06:46 2025 by rpki-client