
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
File: EDADA2842BD911F0BD5FC622C4F9AE02.roa (raw, json)
Hash identifier: EbKDh3m7E8KIWacScwgzzTIeUCwyZGPRJhI5B+4pFX0=
Subject key identifier: E6:B0:82:F8:08:D2:A8:84:55:13:98:E5:1E:37:4F:F2:BF:99:A7:17
Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial: 02
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
Signing time: Thu 08 May 2025 06:59:04 +0000
ROA not before: Thu 08 May 2025 06:59:04 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153548
IP address blocks: 161.248.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:18:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Validity
Not Before: May 8 06:59:04 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=681c5638-5606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:9d:e6:1b:c7:64:4e:fa:43:79:7c:ce:b0:
96:b5:bf:9e:0e:eb:4f:54:0b:68:4d:87:1a:4c:bb:
68:10:ef:0a:b7:11:b6:cc:f9:fa:6d:2c:dd:19:33:
2c:3f:89:e2:8d:f9:8e:d1:56:a6:91:b9:42:1e:1a:
02:4a:ca:07:47:76:13:45:01:cb:0a:1e:f4:23:8c:
b7:e6:28:45:69:77:ed:b1:91:4d:87:0d:36:74:6a:
f3:3b:5d:e0:bf:5e:a7:5d:dc:39:91:f8:57:f8:7e:
ef:9d:90:1e:d0:ed:23:f1:40:3a:93:d1:14:d8:35:
3a:d6:cd:65:88:a9:0b:25:0e:41:28:97:6f:4e:29:
d3:58:f1:f5:01:43:e9:9e:b3:e8:2e:4a:7e:36:f8:
dd:1a:fd:98:42:44:6a:89:b6:c3:eb:b8:72:a9:82:
8b:ba:ff:b4:ba:9c:65:0c:bb:55:8d:30:e0:e5:2c:
39:ce:2b:57:e0:9b:00:1c:b9:5c:d1:cb:01:b1:c7:
cc:39:6d:8e:83:c5:5c:df:ed:5e:cc:6e:ea:4c:9b:
27:67:a3:ed:c8:d7:93:a5:42:82:02:36:87:c9:83:
52:ea:99:08:2a:2a:9a:bd:1e:d4:f4:ce:9d:ee:ea:
af:1d:07:6c:97:5a:ac:f5:82:58:51:9e:cf:15:90:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B0:82:F8:08:D2:A8:84:55:13:98:E5:1E:37:4F:F2:BF:99:A7:17
X509v3 Authority Key Identifier:
keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ef:79:08:32:4c:96:c5:46:98:18:a1:5f:b9:1a:87:69:19:
64:d1:4f:67:86:5c:8e:b2:ef:19:55:c2:20:02:85:22:16:21:
ee:fb:2f:56:0c:92:a8:9a:0f:26:13:83:8f:a3:34:90:c2:24:
4b:33:5d:82:b2:98:85:d1:c2:16:d4:1c:35:21:66:10:5e:eb:
d8:4f:92:ef:2e:7c:af:76:85:cd:f1:8a:33:3f:d2:cf:66:27:
b5:d9:85:5f:17:8c:9a:5f:27:4a:79:8d:f1:eb:b6:0a:42:f1:
64:86:0c:ae:9f:02:7e:47:f0:fb:fa:98:e4:4f:06:f5:da:ae:
5c:ab:fa:f6:5e:d7:ae:1d:d7:26:fb:39:f8:59:58:d4:fb:4c:
f4:f1:70:8b:5e:61:b8:dd:b0:e9:51:00:ad:c3:a6:e6:13:e3:
93:41:9a:b5:dc:19:05:1b:fc:0e:53:65:59:54:1c:af:06:5b:
26:0d:cc:92:11:b4:bf:49:0d:69:7a:91:02:86:55:9f:b9:b4:
15:b1:ea:9b:17:bd:ea:9e:5f:1e:9d:f2:94:3a:25:60:1a:54:
40:38:cf:dd:6f:64:bc:88:f8:14:2f:0b:dd:6a:c3:98:cc:1d:
7a:4c:03:0e:e4:02:bf:f9:a9:2e:82:bb:63:7c:3b:ff:f8:60:
cf:8b:a7:6c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MUE5NTExMC8GA1UEBRMoQjZBQzU4N0VDMjdENTM1RUNGNEQ4RkRFMTcxMTc2NTc5
REFGNEQ0RjAeFw0yNTA1MDgwNjU5MDRaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MWM1NjM4LTU2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw4p3mG8dkTvpDeXzOsJa1v54O609UC2hNhxpMu2gQ7wq3EbbM+fptLN0ZMyw/
ieKN+Y7RVqaRuUIeGgJKygdHdhNFAcsKHvQjjLfmKEVpd+2xkU2HDTZ0avM7XeC/
Xqdd3DmR+Ff4fu+dkB7Q7SPxQDqT0RTYNTrWzWWIqQslDkEol29OKdNY8fUBQ+me
s+guSn42+N0a/ZhCRGqJtsPruHKpgou6/7S6nGUMu1WNMODlLDnOK1fgmwAcuVzR
ywGxx8w5bY6DxVzf7V7MbupMmydno+3I15OlQoICNofJg1LqmQgqKpq9HtT0zp3u
6q8dB2yXWqz1glhRns8VkJ+dAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5rCC+AjS
qIRVE5jlHjdP8r+ZpxcwHwYDVR0jBBgwFoAUtqxYfsJ9U17PTY/eFxF2V52vTU8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQTk1LzhDNDRBOTM0MkJE
OTExRjBBQjQ0MzEyMkM0RjlBRTAyL3RxeFlmc0o5VTE3UFRZX2VGeEYyVjUydlRV
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdHF4WWZzSjlVMTdQVFlfZUZ4RjJWNTJ2VFU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUE5NS84QzQ0QTkzNDJCRDkxMUYwQUI0NDMxMjJDNEY5QUUwMi9FREFEQTI4NDJC
RDkxMUYwQkQ1RkM2MjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKH46DANBgkqhkiG9w0BAQsFAAOCAQEAfO95CDJMlsVGmBih
X7kah2kZZNFPZ4ZcjrLvGVXCIAKFIhYh7vsvVgySqJoPJhODj6M0kMIkSzNdgrKY
hdHCFtQcNSFmEF7r2E+S7y58r3aFzfGKMz/Sz2YntdmFXxeMml8nSnmN8eu2CkLx
ZIYMrp8Cfkfw+/qY5E8G9dquXKv69l7Xrh3XJvs5+FlY1PtM9PFwi15huN2w6VEA
rcOm5hPjk0GatdwZBRv8DlNlWVQcrwZbJg3MkhG0v0kNaXqRAoZVn7m0FbHqmxe9
6p5fHp3ylDolYBpUQDjP3W9kvIj4FC8L3WrDmMwdekwDDuQCv/mpLoK7Y3w7//hg
z4unbA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:11 2025 by rpki-client