
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
File: 65037DC0F72B11EE94855861C4F9AE02.roa (raw, json)
Hash identifier: K0wdfReRfbDzEfApgzLkMcvB6QS8n53WdiCIO+FGuns=
Subject key identifier: 82:E8:72:43:FB:16:F9:FE:EF:2E:64:2B:CD:3F:C8:F3:C4:16:3C:3D
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 36CB
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
Signing time: Wed 08 Oct 2025 14:40:56 +0000
ROA not before: Wed 08 Oct 2025 14:40:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7018
IP address blocks: 175.29.4.0/22 maxlen: 24
175.29.128.0/21 maxlen: 24
203.76.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14027 (0x36cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 8 14:40:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68e677f8-f0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:33:c5:29:2d:52:5a:91:d5:64:00:55:f7:
a6:13:03:4e:af:d1:54:00:09:53:a7:52:c4:6a:9f:
dc:75:59:36:b3:80:d1:94:a3:66:56:87:3c:bc:d3:
3d:a5:ae:b4:e0:48:51:eb:97:69:43:eb:9c:aa:09:
7b:3d:f3:87:82:b5:3e:f6:88:4e:2d:bd:40:76:2b:
f6:7e:30:52:60:7e:88:06:55:14:d1:c6:e1:50:24:
a0:f3:ee:22:58:60:44:d9:d7:6b:7e:c9:04:73:8d:
fa:ac:c6:4c:85:59:49:4f:be:f3:b6:3f:30:76:00:
22:56:6c:fa:4d:b2:02:72:0d:60:44:5e:ca:f7:3e:
b4:90:6d:56:da:0e:97:e9:c3:7a:5c:6f:02:56:33:
b6:8f:83:ae:e9:c4:b1:7e:8f:a2:8d:ad:c5:e9:f7:
c1:45:1b:2d:c4:4c:02:72:36:f7:89:99:00:ee:fe:
85:25:96:8c:29:6c:ae:79:fb:79:ef:8c:bc:57:30:
28:2e:a6:8e:1a:11:f0:07:1b:32:3a:a3:da:35:6a:
04:66:1c:b2:89:3c:b1:6c:0a:75:2e:a6:40:b2:c9:
97:61:41:16:2c:a1:0f:53:45:7f:78:3a:45:f6:6d:
38:62:fa:f9:3b:79:de:b9:dd:0e:80:7d:0b:f9:0c:
a2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:72:43:FB:16:F9:FE:EF:2E:64:2B:CD:3F:C8:F3:C4:16:3C:3D
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65037DC0F72B11EE94855861C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
175.29.4.0/22
175.29.128.0/21
203.76.152.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:cc:57:a2:2f:32:0f:d0:f9:66:ff:62:11:ce:1f:6e:08:02:
ec:13:39:27:b2:23:4a:f3:a9:68:7c:c5:37:20:d0:40:3d:54:
36:7b:a6:e5:15:4e:df:b4:3e:b9:4f:19:27:17:43:32:83:9c:
a2:52:82:b3:1e:bf:b0:fd:7b:ba:bb:1a:c4:d7:24:e7:9d:31:
13:81:39:42:40:d5:3d:ab:7a:b2:15:e1:af:81:8a:38:8c:8b:
b9:a8:26:eb:dc:cc:90:29:ee:d9:80:19:fd:96:d5:ec:0c:52:
0d:60:99:20:3d:47:20:d2:5c:0b:e2:5c:09:05:e6:9a:ac:24:
a1:7f:8b:7b:03:d8:0b:be:26:39:8d:05:b0:42:09:08:d9:54:
c6:08:c2:03:f3:52:40:29:3e:d2:15:34:39:05:26:56:47:ce:
92:5a:1d:9d:a8:27:27:9b:44:3f:fc:d3:52:9f:2e:fa:ce:04:
b8:5b:bc:5b:52:98:25:f1:aa:f5:89:29:6c:aa:45:09:f1:a6:
82:82:d2:c6:65:2c:d0:63:83:cd:cd:0b:2e:8c:bb:0b:27:6c:
0c:5e:a8:d4:b4:36:b6:d3:f8:d4:d0:39:3a:3e:19:ec:38:15:
3d:f1:1e:1f:62:76:10:88:a5:22:c0:c3:d3:23:66:5b:a4:35:
72:7c:26:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:42 2025 by rpki-client