
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/54582BFCB64611F0A1920927C4F9AE02.roa
File: 54582BFCB64611F0A1920927C4F9AE02.roa (raw, json)
Hash identifier: HgtUwUJ/Vyz8QDW0ytbFSI4t89Z3WqTayxlOmkwhcHU=
Subject key identifier: 6D:37:E3:47:9F:1E:BB:F4:86:E2:44:4D:E9:40:D1:0F:9E:D9:90:28
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 39D5
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/54582BFCB64611F0A1920927C4F9AE02.roa
Signing time: Fri 31 Oct 2025 10:42:43 +0000
ROA not before: Fri 31 Oct 2025 10:42:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149419
IP address blocks: 111.88.170.0/24 maxlen: 24
111.88.171.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/24 maxlen: 24
115.186.119.0/24 maxlen: 24
115.186.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14805 (0x39d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Oct 31 10:42:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=690492a3-4c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:c1:8f:87:89:50:78:a6:c9:62:c0:b4:61:
95:96:d2:b9:2b:6b:69:f7:2e:4a:8f:aa:48:7f:b2:
4b:bb:82:3a:ac:b5:ed:d8:9f:ee:71:03:a5:ab:9a:
82:99:f9:d5:4f:37:4e:fd:db:17:8a:ef:9d:e5:14:
f9:aa:c9:b8:b7:6a:92:16:6e:bf:12:60:d0:2e:05:
69:8a:da:61:5a:44:58:27:90:04:5e:f0:39:35:f9:
aa:e5:08:42:16:80:da:7f:aa:6c:63:b4:45:fa:da:
cc:96:05:20:22:d1:12:f1:54:b3:f5:ce:ad:05:86:
ef:f5:f9:2d:21:80:78:74:80:ce:43:b7:00:6d:19:
5f:22:a3:3e:31:7d:0f:84:89:ad:6b:b6:73:9c:e0:
33:91:ed:63:9f:b2:9b:a1:d3:9f:c3:bc:72:87:4e:
64:b5:15:f5:8f:b4:87:56:63:8b:12:63:05:d6:aa:
45:f1:cc:a7:54:96:6d:52:1d:ab:6e:93:25:2d:12:
35:29:4b:6d:e7:de:3d:21:7f:6d:27:54:58:6b:64:
e3:81:0a:bc:e0:ff:0f:d2:de:eb:92:f8:6a:72:0f:
98:95:06:bf:9a:c3:58:ed:57:21:58:83:e7:46:dd:
6c:cc:b7:2e:72:d2:57:e0:af:50:29:8c:e0:fc:f4:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:E3:47:9F:1E:BB:F4:86:E2:44:4D:E9:40:D1:0F:9E:D9:90:28
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/54582BFCB64611F0A1920927C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.170.0/23
111.88.239.0/24
115.186.117.0-115.186.120.255
Signature Algorithm: sha256WithRSAEncryption
03:58:76:2c:37:88:bc:c0:fe:23:72:5a:51:ce:ce:e6:d0:41:
9d:b9:af:36:38:31:50:22:07:ad:4e:cd:dc:6a:04:8a:3a:b6:
63:96:ca:4c:82:12:d5:98:5c:e5:89:ba:ac:3a:26:1f:d4:cd:
71:35:28:f2:ca:3d:f8:a8:23:20:e1:a6:9d:85:e0:42:49:79:
ba:4a:6b:dc:69:15:36:87:2c:d9:64:e2:5e:9f:02:23:10:7f:
93:2d:00:ce:12:27:56:d3:23:8b:49:57:01:32:0a:ce:95:8f:
0a:7a:b1:6b:42:1c:1b:09:ea:c6:96:c5:8c:a9:e5:77:66:08:
1f:aa:41:de:90:44:e0:23:db:18:fd:97:1f:85:a5:90:d0:79:
b6:fc:32:a4:7f:79:d5:6a:0e:fa:5e:5d:b4:0b:de:c2:b7:bd:
ab:d1:a8:95:6c:3d:9f:d0:b7:95:df:63:26:d1:88:ff:18:d2:
77:1c:e4:1c:89:d7:88:61:45:d3:f4:ea:47:d5:11:e5:d1:21:
de:ee:8f:7e:fc:da:c5:4f:ea:69:fb:4c:7a:e1:69:6f:1c:f5:
d8:c6:5c:6b:5e:79:77:29:6a:01:9f:b2:68:15:77:19:39:a6:
76:c9:4d:25:df:e8:eb:ee:6b:31:4d:ba:43:eb:91:96:2f:fb:
e9:81:0f:bd
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgICOdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUxMDMxMTA0MjQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA0OTJhMy00YzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmzzBj4eJUHimyWLAtGGVltK5K2tp9y5Kj6pIf7JLu4I6rLXt2J/ucQOlq5qC
mfnVTzdO/dsXiu+d5RT5qsm4t2qSFm6/EmDQLgVpitphWkRYJ5AEXvA5Nfmq5QhC
FoDaf6psY7RF+trMlgUgItES8VSz9c6tBYbv9fktIYB4dIDOQ7cAbRlfIqM+MX0P
hImta7ZznOAzke1jn7KbodOfw7xyh05ktRX1j7SHVmOLEmMF1qpF8cynVJZtUh2r
bpMlLRI1KUtt5949IX9tJ1RYa2TjgQq84P8P0t7rkvhqcg+YlQa/msNY7VchWIPn
Rt1szLcuctJX4K9QKYzg/PTRnQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFG0340ef
Hrv0huJETelA0Q+e2ZAoMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNTQ1ODJCRkNC
NjQ2MTFGMEExOTIwOTI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E
JDAiMCAEAgABMBoDBAFvWKoDBABvWO8wDAMEAHO6dQMEAHO6eDANBgkqhkiG9w0B
AQsFAAOCAQEAA1h2LDeIvMD+I3JaUc7O5tBBnbmvNjgxUCIHrU7N3GoEijq2Y5bK
TIIS1Zhc5Ym6rDomH9TNcTUo8so9+KgjIOGmnYXgQkl5ukpr3GkVNocs2WTiXp8C
IxB/ky0AzhInVtMji0lXATIKzpWPCnqxa0IcGwnqxpbFjKnld2YIH6pB3pBE4CPb
GP2XH4WlkNB5tvwypH951WoO+l5dtAvewre9q9GolWw9n9C3ld9jJtGI/xjSdxzk
HInXiGFF0/TqR9UR5dEh3u6PfvzaxU/qaftMeuFpbxz12MZca155dylqAZ+yaBV3
GTmmdslNJd/o6+5rMU26Q+uRli/76YEPvQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:01:51 2025 by rpki-client