
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
File: 095798588ABA11EAB5EDDE54C4F9AE02.roa (raw, json)
Hash identifier: ry57bqRwnAlEf+uhF7YD9dV4dZUL+Moi6864EjQ+jQs=
Subject key identifier: 18:CD:43:19:52:39:CD:21:02:4C:04:6D:9F:43:9C:3E:4C:E4:CC:E7
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D35
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
Signing time: Tue 04 Nov 2025 15:00:31 +0000
ROA not before: Tue 04 Nov 2025 15:00:31 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 18212
IP address blocks: 210.2.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7477 (0x1d35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Nov 4 15:00:31 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a150e-777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:a1:31:25:d0:1f:72:e0:6f:94:73:2b:4b:
b5:9a:f0:a2:4a:45:33:c8:1f:7c:3c:e8:86:dc:95:
8c:b4:b8:20:c4:6f:d7:fd:4e:1f:fa:7c:f1:08:98:
76:d5:65:0c:ed:2a:0e:30:ed:e9:f8:29:b9:bc:b9:
13:2e:46:2b:d6:73:8e:68:29:e0:64:39:68:f3:0e:
0d:da:f0:a5:c4:ae:9a:c5:3f:1d:a6:8a:2f:1d:14:
dc:b6:45:79:dc:ff:e0:de:18:5e:2c:03:e4:cb:75:
3d:6d:a2:fe:83:d1:06:a3:f9:56:9b:06:44:dd:1a:
17:d7:56:88:da:8d:6c:45:72:97:c6:bc:7c:70:0f:
a3:cf:89:61:19:80:cd:ec:97:bf:5f:47:9b:59:20:
9b:2f:47:10:0a:48:c4:16:16:8c:61:2a:42:cb:5a:
4a:33:67:2b:fe:a0:e0:d5:a6:df:be:27:5c:4d:20:
60:8c:ae:b7:2f:b9:64:dc:01:da:bd:40:6d:98:b4:
56:88:9e:72:38:c2:0b:a2:f5:58:53:87:58:11:81:
ee:1f:bc:1f:f6:c3:e9:94:e1:d7:61:66:00:d4:e4:
0b:d1:36:a7:6b:4c:86:b0:01:19:e4:8e:07:37:35:
78:99:c7:fc:65:90:e2:70:66:91:9f:4a:54:61:5b:
89:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CD:43:19:52:39:CD:21:02:4C:04:6D:9F:43:9C:3E:4C:E4:CC:E7
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.2.130.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:36:87:b5:2a:1b:08:be:39:66:60:dc:84:a6:de:3e:a2:ea:
e2:f2:d2:88:f4:02:59:7d:30:85:dc:8f:d3:28:e0:7c:93:3c:
64:7a:98:3e:09:ee:c5:9d:f5:5c:c6:82:5e:09:28:fe:0c:55:
60:2a:48:63:ba:61:b8:ed:66:70:cd:1c:55:0c:cc:fb:2e:cd:
9a:bd:37:84:77:fd:dd:d0:e0:35:3c:c1:0b:00:41:c7:1c:68:
f5:5d:ff:97:b3:15:13:99:4c:5f:b8:22:e9:0c:b9:dc:6b:c5:
c4:63:b5:6f:e2:e8:b1:75:94:8e:6f:61:8d:95:c2:e8:67:10:
a2:90:4d:94:38:c1:39:b9:d1:5e:e2:67:6d:34:af:32:e4:42:
2e:dd:d5:41:f4:c6:a6:0a:7f:12:86:6c:b4:78:8b:52:fc:51:
4a:84:1c:55:c7:95:c2:80:77:e3:6d:3b:ef:30:68:75:67:d7:
a3:b4:aa:cf:ea:56:ec:1d:7e:32:f4:97:61:4e:81:1b:75:a6:
17:eb:89:a3:ea:fb:75:2e:35:06:18:d9:ac:20:e0:22:86:a1:
e0:23:de:62:c5:f5:06:2d:7d:30:9f:bf:af:67:5b:fd:63:ce:
6c:f3:eb:39:ec:ff:a0:30:c9:70:e5:1b:44:f7:84:a4:5b:a9:
65:fc:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:24 2025 by rpki-client