
$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
File: D0680FF86AB211F0976F001AC4F9AE02.roa (raw, json)
Hash identifier: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=
Subject key identifier: AD:8C:D4:6C:E0:73:B1:3D:0D:BE:75:81:34:7C:37:57:05:9E:69:D9
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: 85
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
Signing time: Sun 27 Jul 2025 06:27:48 +0000
ROA not before: Sun 27 Jul 2025 06:27:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140119
IP address blocks: 2401:e920:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Jul 27 06:27:48 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6885c6e4-ef2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:f8:ea:b4:ae:1d:93:9b:ed:29:50:ac:9c:
c4:0d:88:bb:d4:25:0c:c7:39:2f:8d:b5:79:7d:00:
3d:4e:ba:7c:bb:c6:e0:78:00:8d:f5:38:34:ee:d2:
5a:28:d9:75:af:13:2f:0d:8e:38:fe:93:1f:2e:ce:
4b:a7:1e:2c:53:cd:73:b4:94:9d:e7:b0:af:09:9f:
61:b0:bf:9d:50:22:29:35:dc:f3:0b:fd:47:08:6c:
cb:b3:a2:17:2a:f6:08:71:8b:c3:b4:c6:62:88:89:
67:9f:0a:ca:c3:d1:d2:1b:72:dc:5d:dd:8f:87:2e:
e3:7d:df:06:a2:79:f8:50:03:cf:16:ab:07:7a:18:
df:d3:32:7f:95:0d:3f:fd:e1:07:3f:db:8a:61:15:
0b:8a:bd:31:df:70:a7:c9:8d:3f:30:b0:10:c1:df:
30:b5:11:e6:2c:6e:35:8c:7a:f4:38:ac:75:4d:4e:
03:7c:c2:78:2a:a6:94:f2:c9:fd:1b:26:10:8b:87:
07:39:43:1b:2a:36:0e:d1:b4:92:0c:cd:0c:b5:b5:
ff:05:f7:66:02:0a:28:34:c5:eb:b0:5f:4e:59:05:
13:94:b0:c1:42:6d:d2:1a:af:b1:00:19:f0:97:ab:
d7:d1:61:3a:55:96:53:f5:b8:49:ef:9a:84:c0:be:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:D4:6C:E0:73:B1:3D:0D:BE:75:81:34:7C:37:57:05:9E:69:D9
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/D0680FF86AB211F0976F001AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e920:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
7f:76:81:92:38:88:17:35:26:65:67:ae:63:a2:4a:32:53:55:
d7:10:35:c6:98:ba:47:34:44:8e:bd:63:bd:99:d8:e8:14:22:
bb:28:48:df:05:f6:0e:b0:0f:ed:bd:bf:0a:65:3e:8e:be:9a:
8d:3c:23:00:ec:bc:67:d5:8d:db:4c:f3:73:34:5e:32:a1:14:
60:7f:76:15:64:4f:ae:05:af:ad:ec:f7:a2:a7:b9:2f:58:3c:
34:02:30:ac:ab:70:37:8e:a1:4c:f0:89:67:8d:8d:31:b5:04:
72:64:fb:34:90:22:84:22:5e:54:52:ba:1b:01:82:27:36:e8:
16:1b:82:1c:b3:d8:7a:4b:6a:78:fc:4a:e3:16:55:82:c5:06:
a8:f2:43:17:55:39:fc:a4:9d:c9:51:5d:9a:b5:b7:69:04:38:
e5:c9:ec:92:64:85:e9:a4:64:91:84:4d:cb:c2:be:ff:51:59:
11:2c:fb:b8:a7:1a:be:40:dd:e6:d4:61:41:92:ac:45:56:fb:
46:c2:6e:15:02:11:65:b1:08:55:3a:b8:e7:f9:44:6e:8e:2d:
08:ad:aa:08:73:53:6f:f0:9d:bd:3f:88:80:3f:43:b2:f1:9c:
89:6b:23:8d:52:7f:c2:91:81:41:4a:5b:4f:8d:f4:a4:2d:30:
12:79:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:55:22 2025 by rpki-client