
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
File: 349FE3280DA811EBB62F0126C4F9AE02.roa (raw, json)
Hash identifier: Wnr6Nu+wn4KpT3jxG77VWtuMf2NiqHg0vBMGp2AER8s=
Subject key identifier: 8A:9B:53:0B:CC:37:F5:33:1E:97:61:59:94:38:42:24:C8:03:58:DD
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 134C
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
Signing time: Wed 06 Aug 2025 17:26:29 +0000
ROA not before: Wed 06 Aug 2025 17:26:29 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 19905
IP address blocks: 192.74.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 17:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4940 (0x134c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Aug 6 17:26:29 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68939045-117d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:f4:63:ef:41:61:65:1d:6f:65:f2:cc:b1:
f2:7b:88:b5:49:7a:ee:fb:e8:69:48:ae:5d:35:04:
1b:e0:61:77:47:d2:b2:55:ae:b1:d0:d5:4f:4d:36:
df:40:5a:62:40:1c:1a:02:74:f3:3d:00:2d:3a:c3:
06:b3:1b:ca:35:6f:f5:ef:a8:8d:27:8b:d5:a9:15:
de:f1:e8:b4:7a:0f:0b:42:71:52:d2:87:fa:b9:93:
c8:97:0e:9c:03:e5:84:d1:51:9b:e4:db:0e:25:a9:
b6:d9:9b:89:dc:ac:8f:60:fa:5c:37:49:b3:19:c8:
cb:68:44:b9:cd:c5:4d:97:c3:c2:bf:e3:17:d8:4c:
27:d8:b7:47:61:10:96:c8:d2:17:7d:28:c7:a6:55:
72:58:ed:5b:03:21:74:64:d4:2f:31:d9:bd:94:5e:
c8:6b:69:61:45:fe:f2:e9:ec:e2:66:d9:5c:cc:1d:
44:f2:e3:95:08:07:c9:1b:5d:71:ef:62:6f:9f:61:
73:cb:3e:f9:62:70:63:5b:d8:c0:b1:b9:76:44:0e:
c3:10:04:f9:9f:c4:a5:69:5c:6a:24:50:6a:3f:26:
a0:b7:ef:c7:7f:f5:6c:3b:9e:42:09:93:58:99:9a:
19:ac:61:05:6c:b7:c2:eb:2d:17:5d:58:ed:47:9a:
b3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:53:0B:CC:37:F5:33:1E:97:61:59:94:38:42:24:C8:03:58:DD
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.74.139.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:69:0a:12:a9:8b:41:44:cf:f1:c4:d3:a6:de:38:d6:90:
c8:ad:ae:ab:56:f0:8d:b3:1c:25:b5:e6:ec:32:12:72:89:24:
b7:0f:ff:d4:8e:03:bf:21:ea:f9:ca:5f:77:38:a8:77:0d:22:
ec:e7:b5:af:31:7a:76:e1:e6:f9:0b:c8:0e:a4:67:32:34:09:
05:5f:34:38:f4:de:93:bd:29:ed:a1:ef:f4:15:3a:14:02:85:
ca:d6:c3:21:26:88:58:c6:fd:9b:10:63:d7:b7:74:ef:12:0b:
0c:d8:26:c5:f3:bc:53:9f:d9:73:61:11:34:84:04:ab:0d:8c:
bf:c3:31:24:df:8f:b9:75:f9:65:85:6b:7e:b7:63:35:d1:e5:
56:5e:7f:0a:5d:34:4d:91:5e:f0:3b:fb:77:7b:66:14:37:df:
66:73:a6:86:98:ff:2a:90:b8:c9:50:fd:39:fb:a7:86:7f:17:
1e:27:fa:7e:b1:5e:94:ff:ad:f9:1b:f5:41:b4:b3:ab:41:3a:
1d:33:d5:e4:60:b5:43:8b:2b:5a:60:38:84:8e:03:6b:7c:38:
58:06:3a:c6:dc:5a:eb:3b:14:c1:21:cf:17:88:a0:31:8d:4a:
88:15:21:d7:7c:b8:0e:8b:bf:c1:3a:8d:75:a5:70:22:61:de:
f5:ef:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:54 2025 by rpki-client