
$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
File: 56C4B5083DF511ED98215F18C4F9AE02.roa (raw, json)
Hash identifier: +v8nyn/Oe9RWJ3ghxJ4j4ajNn0CAMG8XWMdrSVotxhY=
Subject key identifier: 5A:AD:FC:B2:88:D7:E6:50:BA:7B:94:D7:43:B8:C1:06:B3:52:FF:92
Certificate issuer: /CN=A91534B8/serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Certificate serial: 02DC
Authority key identifier: DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
Signing time: Sun 05 Oct 2025 01:56:48 +0000
ROA not before: Sun 05 Oct 2025 01:56:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9443
IP address blocks: 146.144.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732 (0x2dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91534B8, serialNumber=DFA860450A6FCEB1C6E7B8D4FF54B1541A1B69B3
Validity
Not Before: Oct 5 01:56:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e1d05f-ed03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:fa:da:d3:ad:e9:a7:c0:6e:3e:d7:f9:6a:
10:cd:51:9d:7b:2e:53:42:0d:63:64:38:80:f7:e3:
14:67:d1:d0:fe:cb:b2:bd:28:1b:30:35:a8:27:0b:
86:08:68:bc:a2:e8:85:2a:55:70:47:93:bd:03:e1:
12:f8:25:98:03:41:22:6e:ff:10:50:10:f9:5e:cf:
3f:ba:61:fa:74:1c:90:3c:be:39:18:89:b7:47:47:
7c:00:f6:4a:55:66:35:4f:a5:42:57:12:d8:73:e5:
ca:5f:a1:6d:61:26:f2:04:97:37:eb:c9:4c:05:fd:
ad:57:71:05:8a:4b:c4:61:24:ac:d8:a3:36:5d:56:
2a:7c:3e:11:3c:c3:e6:1c:fb:0c:15:cc:37:a5:59:
0e:9e:f9:ab:77:df:5b:e0:b1:03:1c:0c:a6:8a:03:
1c:95:20:ea:56:3f:b1:5d:66:25:2b:d7:36:5f:a3:
74:8d:35:dd:80:f8:14:4c:d2:eb:2d:16:e6:6d:7a:
ea:fb:30:bb:03:b6:91:f8:8d:6c:81:e5:ad:31:a5:
94:11:12:38:10:ba:a8:7a:81:75:5d:64:ba:dd:d0:
96:05:9f:86:5b:f6:db:6c:14:8d:53:8d:59:6d:fd:
dc:50:f3:b3:da:98:3c:d2:96:3f:f7:a0:d6:8c:fb:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:FC:B2:88:D7:E6:50:BA:7B:94:D7:43:B8:C1:06:B3:52:FF:92
X509v3 Authority Key Identifier:
keyid:DF:A8:60:45:0A:6F:CE:B1:C6:E7:B8:D4:FF:54:B1:54:1A:1B:69:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/36hgRQpvzrHG57jU_1SxVBobabM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/36hgRQpvzrHG57jU_1SxVBobabM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9F03BB60094411ED8DD10971C4F9AE02/56C4B5083DF511ED98215F18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.144.8.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:18:26:da:34:3c:74:16:94:52:6b:b2:c0:59:25:3f:c5:91:
73:a6:61:d4:3c:ae:d8:de:30:30:c5:66:02:ba:88:e6:4c:44:
df:f1:37:ab:78:f9:9a:19:cd:bc:59:a6:c3:02:b4:b9:12:5a:
ac:a6:a9:b7:d3:4b:44:76:39:5b:4c:0c:16:38:be:f4:b2:20:
b5:76:cf:3b:32:7d:37:72:0f:cb:43:fd:5a:7b:3f:d9:c9:e8:
d6:7c:b2:17:23:6e:5e:e4:e3:2f:c0:b9:87:ce:10:e2:b5:6f:
41:af:60:46:95:95:3c:6f:dd:dc:bf:8e:e1:95:ae:57:73:23:
04:e0:55:e5:a4:c5:4b:fe:e3:c2:fb:91:98:25:1a:d7:da:f4:
c3:20:f4:d6:3a:98:76:f9:c3:48:ae:f8:b7:1b:ba:05:45:d6:
c6:dd:5f:1d:2d:e5:d3:67:56:18:4e:82:26:76:3c:32:a5:72:
3d:81:f0:db:2d:5c:81:91:58:a3:ce:ae:0f:1c:c4:65:b6:b2:
18:06:ed:d2:cf:f6:03:b5:71:b3:e8:6c:2c:f7:e3:4a:2b:e4:
1e:3b:0f:8d:3b:ee:43:4d:79:02:c0:fa:03:f6:68:f4:c7:ac:
27:cd:a0:13:fd:43:3b:19:c2:d7:71:ea:3c:f2:05:a5:d6:95:
d0:43:71:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0QjgxMTAvBgNVBAUTKERGQTg2MDQ1MEE2RkNFQjFDNkU3QjhENEZGNTRCMTU0
MUExQjY5QjMwHhcNMjUxMDA1MDE1NjQ4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGUxZDA1Zi1lZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApcH62tOt6afAbj7X+WoQzVGdey5TQg1jZDiA9+MUZ9HQ/suyvSgbMDWoJwuG
CGi8ouiFKlVwR5O9A+ES+CWYA0Eibv8QUBD5Xs8/umH6dByQPL45GIm3R0d8APZK
VWY1T6VCVxLYc+XKX6FtYSbyBJc368lMBf2tV3EFikvEYSSs2KM2XVYqfD4RPMPm
HPsMFcw3pVkOnvmrd99b4LEDHAymigMclSDqVj+xXWYlK9c2X6N0jTXdgPgUTNLr
LRbmbXrq+zC7A7aR+I1sgeWtMaWUERI4ELqoeoF1XWS63dCWBZ+GW/bbbBSNU41Z
bf3cUPOz2pg80pY/96DWjPs0uwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFqt/LKI
1+ZQunuU10O4wQazUv+SMB8GA1UdIwQYMBaAFN+oYEUKb86xxue41P9UsVQaG2mz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85RjAzQkI2MDA5
NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8zNmhnUlFwdnpySEc1N2pVXzFTeFZCb2Jh
Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzM2aGdSUXB2enJIRzU3alVfMVN4VkJvYmFiTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM0QjgvOUYwM0JCNjAwOTQ0MTFFRDhERDEwOTcxQzRGOUFFMDIvNTZDNEI1MDgz
REY1MTFFRDk4MjE1RjE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACSkAgwDQYJKoZIhvcNAQELBQADggEBAMUYJto0PHQWlFJr
ssBZJT/FkXOmYdQ8rtjeMDDFZgK6iOZMRN/xN6t4+ZoZzbxZpsMCtLkSWqymqbfT
S0R2OVtMDBY4vvSyILV2zzsyfTdyD8tD/Vp7P9nJ6NZ8shcjbl7k4y/AuYfOEOK1
b0GvYEaVlTxv3dy/juGVrldzIwTgVeWkxUv+48L7kZglGtfa9MMg9NY6mHb5w0iu
+LcbugVF1sbdXx0t5dNnVhhOgiZ2PDKlcj2B8NstXIGRWKPOrg8cxGW2shgG7dLP
9gO1cbPobCz340or5B47D4077kNNeQLA+gP2aPTHrCfNoBP9QzsZwtdx6jzyBaXW
ldBDcas=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:18:39 2025 by rpki-client