
$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/F4757B1018C811EB94A5327AC4F9AE02.roa
File: F4757B1018C811EB94A5327AC4F9AE02.roa (raw, json)
Hash identifier: j+7FuDdUw+7PzuykOYS3riW81hh3FFiLyNobRrPETRw=
Subject key identifier: 0B:A4:C9:08:F8:A7:0D:CA:0B:E3:E5:AD:8D:85:56:B6:14:61:87:63
Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial: 08EE
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/F4757B1018C811EB94A5327AC4F9AE02.roa
Signing time: Mon 02 Jun 2025 21:06:02 +0000
ROA not before: Mon 02 Jun 2025 21:06:02 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 139727
IP address blocks: 2001:df5:2d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Validity
Not Before: Jun 2 21:06:02 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=683e123a-ca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:72:28:76:d8:a8:7f:37:89:d2:72:c1:00:
6a:41:6b:d3:2f:7e:c8:da:85:db:83:bb:32:58:7a:
55:f1:6d:1d:cb:a9:db:aa:05:51:70:10:6a:2a:1f:
c3:ca:02:92:fb:dd:67:3a:b3:d3:8a:22:60:df:41:
1f:c0:b6:8f:78:80:ce:0a:bd:c1:40:08:fe:16:83:
64:41:0f:59:f3:a3:1b:b9:aa:7a:25:ff:47:62:c4:
b4:93:82:c6:2c:a0:88:0a:c7:d8:81:12:f6:bf:45:
7f:6a:11:da:a2:77:1c:d1:c1:e5:25:1f:40:db:4c:
d4:4d:09:60:d7:2a:6b:00:11:2c:05:bb:eb:a8:db:
e3:5c:4d:18:f0:1e:91:de:b3:bd:ab:e6:6c:ce:21:
ed:45:1c:94:ed:be:6f:dc:03:4c:7d:42:bf:fa:a3:
da:fc:bb:64:63:ae:de:9a:6f:78:48:2c:65:4e:af:
57:d8:1d:61:4d:00:ce:94:83:50:4d:31:58:20:3b:
26:70:8f:20:9f:4c:c3:4a:9a:18:ba:6e:13:0d:9d:
f0:ca:27:88:8d:8e:ca:36:ad:77:ba:3f:76:5f:a4:
a8:26:da:a3:ab:83:fc:6f:e3:f7:10:04:ad:e4:67:
d5:86:1e:cb:bb:34:0c:99:25:f5:f5:d6:9d:f3:cf:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:C9:08:F8:A7:0D:CA:0B:E3:E5:AD:8D:85:56:B6:14:61:87:63
X509v3 Authority Key Identifier:
keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/F4757B1018C811EB94A5327AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df5:2d80::/48
Signature Algorithm: sha256WithRSAEncryption
36:4b:f0:f5:f0:99:ad:e3:f5:18:07:ab:25:51:55:1d:1d:62:
e4:d1:45:14:51:db:84:c1:9a:04:00:38:17:8b:14:73:89:bb:
de:d0:57:e6:47:9b:34:e0:b2:79:51:70:34:2c:10:25:3b:90:
51:5f:c5:3f:b2:e3:5d:31:77:b4:92:59:15:6e:59:0d:d7:49:
e3:2c:9d:01:99:28:21:39:fd:9f:da:39:48:b5:3a:09:e1:dd:
8e:5d:5e:73:d8:63:da:d1:46:7f:fa:38:b8:44:ec:a1:f9:8c:
26:5d:f2:e5:77:4a:f9:15:b7:d1:26:19:eb:bf:ac:00:18:4e:
6d:97:70:eb:7a:06:18:07:44:ec:74:c2:a2:94:e2:a3:b6:dc:
77:f0:91:c8:85:71:cd:34:93:29:bc:16:6f:46:c1:b5:71:81:
6c:e7:e8:f6:7d:15:89:81:a0:46:0e:bc:32:46:65:e7:88:6f:
77:e2:0b:4b:99:3a:05:70:4c:b3:43:c2:fd:1a:2a:5c:50:85:
ea:0f:c2:61:c4:e5:20:2f:65:96:f6:29:f4:b2:88:8a:8a:e9:
1a:5d:02:2a:d0:12:21:ee:0d:20:61:05:4e:55:3d:96:0a:1a:
60:a1:e9:91:c9:9e:b9:51:86:cd:33:a7:7f:0c:a1:10:cb:fe:
4a:7a:8f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:24:23 2025 by rpki-client