
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/E0161160B62611F09361D512C4F9AE02.roa
File: E0161160B62611F09361D512C4F9AE02.roa (raw, json)
Hash identifier: oqAcxNJdUwMfW9QrHvtcdri8qImgUr71bAKxLPHs2hk=
Subject key identifier: 21:5E:75:5D:82:7F:A4:7A:07:A1:45:85:60:69:F6:5E:A4:CD:47:23
Certificate issuer: /CN=A914E1A8/serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729
Certificate serial: 020A
Authority key identifier: 8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/E0161160B62611F09361D512C4F9AE02.roa
Signing time: Fri 31 Oct 2025 06:57:33 +0000
ROA not before: Fri 31 Oct 2025 06:57:33 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 18187
IP address blocks: 2401:8e80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl
rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1A8, serialNumber=8BECC3638070A6B79F6DCE22A0E65BB21E0D7729
Validity
Not Before: Oct 31 06:57:33 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=69045ddd-39cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:52:92:67:5f:30:a3:3b:71:33:20:3b:92:
93:de:36:11:97:cd:38:52:81:7d:dc:f5:91:5f:ae:
4f:69:5b:28:eb:7a:fc:9a:8d:d0:af:3b:b4:51:1d:
5d:e3:dc:8e:46:cb:8f:27:e1:75:f2:75:a0:a6:92:
99:88:d1:1d:78:1d:bc:00:80:c2:94:56:5e:bc:bc:
c2:76:0f:13:80:19:cc:09:c2:83:72:2d:6c:82:1e:
43:15:3a:5f:31:d6:2a:7e:95:ca:75:bc:26:50:62:
c6:e0:a0:6a:43:d2:75:50:16:86:60:77:ab:91:bd:
dd:03:f9:fa:d6:11:90:af:b8:71:be:16:0e:a1:7f:
f7:09:a5:a3:19:7c:34:4c:a2:fa:22:47:29:9e:18:
96:d1:1b:09:6b:d9:7d:6a:00:2c:a4:78:78:a8:42:
0c:20:6a:8e:cd:bf:b5:92:49:d4:4f:a6:25:77:5b:
2c:61:d8:0e:c8:c9:fb:8d:83:99:92:bb:b8:42:6d:
33:1e:8e:f3:68:2b:d5:72:1b:64:3e:ea:b1:43:69:
5c:9b:96:ea:99:e2:84:b5:c1:4c:74:81:e7:d2:8b:
d5:a0:96:bc:77:6a:ab:50:91:19:4b:6f:7c:01:0b:
c6:cc:48:aa:c8:73:bc:45:94:85:8f:d1:d7:fa:86:
01:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:75:5D:82:7F:A4:7A:07:A1:45:85:60:69:F6:5E:A4:CD:47:23
X509v3 Authority Key Identifier:
keyid:8B:EC:C3:63:80:70:A6:B7:9F:6D:CE:22:A0:E6:5B:B2:1E:0D:77:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/i-zDY4Bwprefbc4ioOZbsh4Ndyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i-zDY4Bwprefbc4ioOZbsh4Ndyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1A8/A40A724AB13011ED847D4981C4F9AE02/E0161160B62611F09361D512C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:8e80::/32
Signature Algorithm: sha256WithRSAEncryption
13:62:29:91:8f:06:31:af:01:b9:e2:f6:e0:fe:8d:23:33:ae:
b7:6f:d4:bf:43:ef:0f:7a:54:54:95:93:c2:d8:51:2a:b4:e6:
e2:d2:f4:6f:dd:a5:8f:5f:08:49:eb:34:14:bd:a7:7a:97:aa:
33:95:ce:32:71:b5:2f:d2:b6:22:be:2c:fd:cf:65:ab:2a:2d:
db:bd:ca:2f:26:ff:45:e5:2b:fb:1a:f7:5b:dc:7d:5a:fe:f3:
9f:17:ed:71:92:a1:f4:45:5e:c5:26:e3:ed:a1:4f:4c:1f:43:
5b:42:20:13:21:1e:f5:b7:22:80:c8:0a:9b:da:22:5b:62:ab:
b5:f8:51:68:6a:29:2f:df:36:71:16:c1:75:c0:76:cd:b7:1c:
ae:d1:9a:6e:3c:a2:4b:43:43:13:e4:ae:8e:64:92:48:3f:83:
0f:20:6b:a1:b8:01:51:96:92:0a:41:39:88:97:23:4c:19:64:
01:ff:7b:d8:35:9c:66:47:a7:04:c2:92:da:ce:56:be:55:56:
df:12:12:8a:da:4e:52:00:d2:d8:2e:cf:ed:4f:b7:50:ff:62:
f2:e9:d8:ca:78:90:b3:65:15:9c:76:4a:56:56:3c:7a:4f:42:
c5:d8:ec:a4:56:7e:1e:52:d8:d5:9e:64:df:df:e9:d6:d3:2d:
04:eb:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:05:16 2025 by rpki-client