
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
File: 37DF315640B111F0B139F22BC4F9AE02.roa (raw, json)
Hash identifier: 4Gm7XiaugCNOeoZN6LJmkv/s+XyGBxUWo0FM4EVSPNU=
Subject key identifier: B3:04:5F:80:0B:2C:E0:31:AB:C1:28:C0:9B:51:44:1E:DC:1A:C2:0F
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 0639
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
Signing time: Tue 03 Jun 2025 19:30:34 +0000
ROA not before: Tue 03 Jun 2025 19:30:34 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 9387
IP address blocks: 122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Jun 3 19:30:34 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=683f4d5a-1526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0f:3a:3c:4b:4a:05:a8:c0:be:6d:8c:8c:ea:
32:ed:dd:0e:eb:b7:e2:2b:db:92:cd:42:0d:27:a9:
b9:aa:26:96:3a:26:aa:16:8c:70:e1:02:c5:46:e1:
31:06:33:bc:df:4c:6d:9f:6d:3a:d8:44:41:7a:9a:
dd:ad:ae:96:b1:94:1d:3c:48:ea:f0:17:ed:e6:d4:
11:af:2c:33:02:7b:60:01:38:f6:2e:a1:fb:37:82:
df:21:ee:fb:8c:62:c3:18:24:7b:8b:fd:ef:60:c5:
2c:34:aa:1e:f1:af:4b:3d:a8:77:b9:3b:32:d5:db:
c2:7e:eb:c3:1a:98:a7:fa:5f:99:1f:85:a2:b6:34:
0e:c9:99:a8:0e:6e:f0:de:2d:e4:25:32:6b:8d:6b:
3c:25:83:dc:04:21:76:45:ae:f5:5b:18:a3:9f:04:
15:bb:96:1e:c7:8c:3a:c8:fa:5b:74:a5:ae:92:df:
5b:a6:53:58:f0:8a:68:ef:d5:d1:a5:22:11:53:a5:
eb:a0:ba:b9:4b:f0:c4:06:61:26:95:ff:70:c2:16:
7e:36:ab:37:2d:9f:08:56:00:63:68:1c:26:6d:5a:
b0:78:79:27:af:f9:1b:62:ed:a0:d6:60:d6:97:6b:
ac:f4:8f:a4:c1:d1:50:d3:0d:81:79:ef:3b:50:0c:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:04:5F:80:0B:2C:E0:31:AB:C1:28:C0:9B:51:44:1E:DC:1A:C2:0F
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/37DF315640B111F0B139F22BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.0.0/24
122.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ab:da:2c:c4:99:95:52:37:08:31:fc:e9:c5:09:d7:4b:5c:
32:37:85:bd:31:4e:00:79:cc:39:b9:c8:0a:56:8a:d8:73:8b:
06:46:68:b4:52:42:96:c3:29:6d:9a:5b:2b:11:1a:26:23:b7:
ac:b5:d7:35:6c:06:05:06:52:a2:5b:02:ca:b6:2a:86:b8:b4:
4f:9b:0f:e5:6d:b4:0b:48:d3:09:b2:a8:32:ed:50:8c:d3:87:
89:ac:e5:5b:7f:da:6b:19:23:01:bf:d0:f3:75:b2:56:5a:63:
26:4a:dd:fc:84:00:95:ee:5c:ba:79:68:be:63:8c:54:bb:c7:
1f:3c:f6:8b:0c:07:bd:11:06:15:a3:7c:6f:52:d6:af:ce:4a:
84:b3:76:3c:fa:3b:fd:ec:5e:a7:dc:5b:8c:be:63:f2:1e:94:
c3:3b:9c:0f:50:c4:81:f8:82:d7:5f:d0:7a:9e:53:46:b4:4b:
35:47:9c:a7:b8:71:ed:b3:d5:93:41:6a:9d:4f:a4:ad:4e:10:
0d:e1:87:0d:3d:1a:0d:22:5f:3c:bf:c7:cb:d3:49:fb:14:97:
e0:ce:96:c0:7a:9f:18:a7:07:8c:64:e4:cf:83:6b:80:59:4c:
47:d3:95:32:88:b1:80:9e:41:80:a5:18:a9:34:18:98:3c:43:
48:ac:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:59 2025 by rpki-client