
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa
File: 27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa (raw, json)
Hash identifier: oaE4p5hJkp4+nLCmgu91heGRJg3fBe+drWuPnIXpClQ=
Subject key identifier: 59:F0:94:30:A0:73:5F:96:15:DE:A6:B3:9D:32:E0:8F:0F:58:79:5D
Certificate issuer: /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Certificate serial: 0E
Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa
Signing time: Tue 22 Apr 2025 19:22:39 +0000
ROA not before: Tue 22 Apr 2025 19:22:39 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 16509
IP address blocks: 210.81.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 06:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Validity
Not Before: Apr 22 19:22:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6807ec7f-fb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:19:01:36:0b:c8:87:6d:e5:ed:bc:f1:09:
77:03:cb:79:1f:2a:8c:20:08:44:75:2b:e5:ed:49:
32:0a:c4:a0:1c:ca:7d:1b:41:a0:c4:61:8e:31:1a:
c6:49:46:7f:ef:6e:b2:79:77:d9:72:a1:3f:65:62:
29:32:67:21:60:d5:4e:d3:b3:51:69:3c:c3:04:30:
29:6c:0b:64:84:36:8a:ae:56:e2:41:fa:90:ba:3a:
12:4d:be:59:71:b8:bd:5e:f9:42:a6:0b:97:a5:e1:
1a:31:36:42:5d:cd:ec:34:6d:1c:06:19:e8:dc:6c:
f6:4f:98:b3:43:56:23:b3:87:d8:46:24:c2:a5:4a:
ed:0f:39:3b:4d:14:12:27:9f:a6:f9:57:36:3e:11:
03:df:27:76:99:64:3e:67:a6:d3:c7:fe:75:a4:37:
bf:6e:eb:53:3b:3f:25:b9:c3:bd:b3:f6:26:49:8f:
3b:40:55:d3:aa:64:24:9e:a0:30:e8:94:0b:3c:d4:
4e:f0:d6:7a:04:50:b2:1a:86:11:4e:48:95:23:59:
18:47:62:a3:4c:e9:71:80:67:57:43:2d:0c:f2:d0:
72:77:33:08:78:3f:bf:93:ba:55:70:75:18:77:36:
aa:9f:17:59:e5:de:0c:eb:42:8d:04:ea:7e:f6:57:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:94:30:A0:73:5F:96:15:DE:A6:B3:9D:32:E0:8F:0F:58:79:5D
X509v3 Authority Key Identifier:
keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.81.69.0/24
Signature Algorithm: sha256WithRSAEncryption
38:58:ac:46:ff:db:13:18:c4:8a:f6:f8:96:8a:68:ef:10:de:
98:45:a2:2f:72:38:3d:81:c7:e0:a5:72:7e:68:29:b5:12:91:
ac:ad:4f:02:80:2d:4b:ca:9f:ef:23:22:d1:3f:3c:57:63:73:
57:c9:3f:74:f2:60:6e:f8:eb:26:c2:01:06:b7:10:99:3e:66:
c9:b9:ed:4b:ab:0b:68:93:45:cd:e8:67:9a:53:7b:f3:11:4a:
4a:48:3a:b7:4b:a3:e7:02:02:ec:21:7a:45:90:49:04:2d:db:
ed:c0:a4:50:aa:ed:2c:aa:05:49:a3:62:85:c2:c6:a4:03:e4:
38:66:3f:04:c5:cf:54:5c:78:e6:36:8e:0a:fa:2e:ab:2a:9e:
fd:19:82:b0:3a:6e:81:15:23:30:1b:6d:2a:95:bb:e9:20:07:
99:d7:04:99:89:38:4f:d8:92:4e:7b:77:51:2b:55:ef:f2:bc:
6c:59:7e:3a:d9:60:6c:41:0d:4c:13:07:94:5f:a0:4e:e7:19:
bb:85:3e:58:34:97:eb:aa:d7:b4:5d:48:b3:8c:98:26:4d:f5:
27:17:8e:46:40:65:fe:24:bd:99:91:23:a8:09:21:ca:c0:f6:
63:d4:1c:39:ee:69:37:51:e0:34:fe:07:0f:bc:72:c0:2a:32:
24:56:6b:74
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QTRCRjExMC8GA1UEBRMoRURCQzE5RkVBMUZDQjY2QjRGQUEwQTIyOTc2RUUxMzUw
QjM3REJFQjAeFw0yNTA0MjIxOTIyMzlaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MDdlYzdmLWZiOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmDRkBNgvIh23l7bzxCXcDy3kfKowgCER1K+XtSTIKxKAcyn0bQaDEYY4xGsZJ
Rn/vbrJ5d9lyoT9lYikyZyFg1U7Ts1FpPMMEMClsC2SENoquVuJB+pC6OhJNvllx
uL1e+UKmC5el4RoxNkJdzew0bRwGGejcbPZPmLNDViOzh9hGJMKlSu0POTtNFBIn
n6b5VzY+EQPfJ3aZZD5nptPH/nWkN79u61M7PyW5w72z9iZJjztAVdOqZCSeoDDo
lAs81E7w1noEULIahhFOSJUjWRhHYqNM6XGAZ1dDLQzy0HJ3Mwh4P7+TulVwdRh3
NqqfF1nl3gzrQo0E6n72V6qPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUWfCUMKBz
X5YV3qaznTLgjw9YeV0wHwYDVR0jBBgwFoAU7bwZ/qH8tmtPqgoil27hNQs32+sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBNEJGLzAxQkI2MDE2MTBB
MjExRjA5OTZFOUQ2NUM0RjlBRTAyLzdid1pfcUg4dG10UHFnb2lsMjdoTlFzMzIt
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN2J3Wl9xSDh0bXRQcWdvaWwyN2hOUXMzMi1zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTRCRi8wMUJCNjAxNjEwQTIxMUYwOTk2RTlENjVDNEY5QUUwMi8yN0FCNUUwRTFG
QUYxMUYwQUI4RjBCODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEANJRRTANBgkqhkiG9w0BAQsFAAOCAQEAOFisRv/bExjEivb4
lopo7xDemEWiL3I4PYHH4KVyfmgptRKRrK1PAoAtS8qf7yMi0T88V2NzV8k/dPJg
bvjrJsIBBrcQmT5mybntS6sLaJNFzehnmlN78xFKSkg6t0uj5wIC7CF6RZBJBC3b
7cCkUKrtLKoFSaNihcLGpAPkOGY/BMXPVFx45jaOCvouqyqe/RmCsDpugRUjMBtt
KpW76SAHmdcEmYk4T9iSTnt3UStV7/K8bFl+OtlgbEENTBMHlF+gTucZu4U+WDSX
66rXtF1Is4yYJk31JxeORkBl/iS9mZEjqAkhysD2Y9QcOe5pN1HgNP4HD7xywCoy
JFZrdA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:11:01 2025 by rpki-client