
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/8483134EB3D211F0A8A4D05CC4F9AE02.roa
File: 8483134EB3D211F0A8A4D05CC4F9AE02.roa (raw, json)
Hash identifier: zZnDo53y65bsfaE1VKEk5cKNAHLKuPLAbEOb+OH2fmo=
Subject key identifier: D2:46:65:CD:2B:3C:87:68:6F:14:BC:96:E5:AE:C3:94:71:76:C4:99
Certificate issuer: /CN=A9150F54/serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F
Certificate serial: 02
Authority key identifier: 39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/8483134EB3D211F0A8A4D05CC4F9AE02.roa
Signing time: Tue 28 Oct 2025 07:48:39 +0000
ROA not before: Tue 28 Oct 2025 07:48:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 154009
IP address blocks: 2001:df5:cf40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl
rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 08:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150F54, serialNumber=394B04E93A4EAC9280F7EC1E8D9BFF9DE6C0A59F
Validity
Not Before: Oct 28 07:48:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69007557-789f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:f9:56:8f:fb:33:89:6f:c2:de:50:94:1e:
ca:17:01:85:c0:e0:74:f9:62:54:9b:2e:7e:56:59:
94:07:f4:1b:36:a9:0d:c9:80:fa:00:d7:fa:6f:0f:
da:74:58:86:8a:5c:5a:53:17:f2:63:55:c7:d6:00:
1f:eb:90:55:b4:3a:39:32:dd:f1:0f:13:44:df:b0:
96:43:9f:9c:3c:90:f0:f2:ae:94:06:bf:d8:50:0e:
c1:59:eb:96:80:dd:bd:2b:45:d8:c7:a0:b7:56:4f:
af:e2:0c:b0:8a:92:1a:a4:78:1d:e1:ac:c1:44:f7:
60:34:d1:0c:3b:c4:fe:ed:04:7a:4d:17:69:eb:96:
c3:a7:4a:ee:59:8c:6d:a2:8b:30:9a:1e:e8:98:a4:
91:60:b1:0d:2f:c2:79:49:31:9c:83:8e:9f:80:24:
e4:e1:13:2f:63:96:f9:0d:4b:89:f8:2b:9b:45:06:
72:94:e3:37:58:eb:bc:f4:8e:88:45:15:91:30:76:
fa:f9:8e:1d:ca:e5:04:eb:23:46:1c:cf:a9:4b:47:
ca:f2:42:ed:aa:b0:c0:e7:24:06:18:2e:cf:df:2a:
11:bd:a7:f2:20:db:5f:7a:d7:e2:3f:56:7e:10:fc:
bd:70:8a:1f:14:8b:c6:86:00:d5:3d:21:0e:70:17:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:65:CD:2B:3C:87:68:6F:14:BC:96:E5:AE:C3:94:71:76:C4:99
X509v3 Authority Key Identifier:
keyid:39:4B:04:E9:3A:4E:AC:92:80:F7:EC:1E:8D:9B:FF:9D:E6:C0:A5:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/OUsE6TpOrJKA9-wejZv_nebApZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OUsE6TpOrJKA9-wejZv_nebApZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/EA44B6C0B3D111F08886A75BC4F9AE02/8483134EB3D211F0A8A4D05CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:cf40::/48
Signature Algorithm: sha256WithRSAEncryption
01:71:38:35:90:38:b7:40:c4:ef:e9:10:05:be:9d:38:79:b5:
f4:10:71:8f:4c:e6:16:c1:09:47:e9:a3:70:46:8c:a4:d2:24:
46:27:bb:db:06:d9:50:be:c2:7d:f9:72:7f:e4:4c:19:e8:75:
ab:51:64:53:e6:01:37:5f:4d:78:b5:32:4a:c7:c6:41:0e:4c:
58:bd:be:56:36:02:ad:22:69:d6:4e:86:87:03:31:0a:62:ff:
cc:a4:a5:7e:94:47:c9:80:16:43:5e:96:5d:8b:76:9d:18:3a:
aa:1a:c0:cc:46:8a:1c:e1:0c:e6:39:01:ca:fd:30:4f:c6:0e:
7e:3f:5c:b5:61:17:10:0f:bf:88:60:2e:2b:d7:52:e1:f2:7a:
18:3b:83:af:d3:18:dd:0b:e1:67:2f:b3:51:9c:40:25:ec:af:
cc:81:37:7c:82:31:24:38:31:16:26:3b:75:44:3a:68:13:e9:
56:b9:1f:91:a0:0c:b3:d9:87:1b:d2:6a:d2:4a:60:ef:5c:5c:
23:d8:b1:d4:9a:e7:67:44:fe:df:04:a8:ba:a4:01:a6:13:cc:
46:7c:a8:9a:d3:df:89:2a:d5:1e:42:ee:9a:cd:6c:04:0b:f9:
ad:f9:60:21:25:19:fc:ef:9e:6b:ee:be:6f:6d:ec:9c:50:43:
8e:a4:3e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:39 2025 by rpki-client