
$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/483FF590B4CD11F094AF5C23C4F9AE02.roa
File: 483FF590B4CD11F094AF5C23C4F9AE02.roa (raw, json)
Hash identifier: lwPZRkJ3CKT2W62+tNtEUbMDOcca3CEzT/1iEB04PzY=
Subject key identifier: 65:59:FC:0E:E3:F3:9D:BA:46:8D:7E:63:81:B2:90:41:58:39:BD:E0
Certificate issuer: /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial: 45
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/483FF590B4CD11F094AF5C23C4F9AE02.roa
Signing time: Wed 29 Oct 2025 13:43:42 +0000
ROA not before: Wed 29 Oct 2025 13:43:42 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2001:df6:31c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Validity
Not Before: Oct 29 13:43:42 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69021a0e-3e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:aa:98:6f:d8:86:38:9e:f8:4e:9d:34:3e:
5e:7d:d5:9e:a3:25:0f:79:f4:93:f5:37:02:1b:87:
65:d7:77:ee:67:7f:fc:7d:6b:8a:2e:eb:ed:4b:c9:
89:87:1f:2d:d9:d1:20:49:05:6d:05:6f:00:9a:ec:
36:96:5b:15:74:72:ed:d1:87:c7:46:d8:d3:0b:a2:
cc:b8:18:d1:62:7f:00:c1:39:c8:f7:b9:5b:a2:33:
f0:6b:12:b4:e5:dd:b2:a3:e9:28:eb:3f:b4:fe:77:
3a:0e:c6:4f:9c:d7:71:eb:7a:64:f0:af:2e:07:7e:
9f:5a:cc:d3:f3:ce:6b:92:cc:3c:43:7a:2b:61:cf:
5d:d2:05:dc:ae:04:b0:e1:94:35:ed:5b:49:50:b1:
d6:80:04:96:c7:0c:41:c1:56:e0:ac:c5:d4:b5:2d:
73:69:f2:e2:03:89:89:c3:54:90:18:f8:fd:58:54:
d7:39:63:03:be:e9:da:85:b6:de:55:3e:b0:3f:d8:
d7:d4:29:e6:2d:d5:8a:6a:26:f7:68:3f:cc:f8:64:
a2:9b:9b:76:2b:35:bc:10:19:4c:99:0f:fe:1a:f7:
e4:19:f8:d8:34:53:ee:df:dd:18:00:c3:67:35:8d:
44:86:04:56:45:08:19:47:8c:92:1f:89:34:0a:0b:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:FC:0E:E3:F3:9D:BA:46:8D:7E:63:81:B2:90:41:58:39:BD:E0
X509v3 Authority Key Identifier:
keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/483FF590B4CD11F094AF5C23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:31c0::/48
Signature Algorithm: sha256WithRSAEncryption
7e:67:0d:be:5a:39:22:35:1b:a2:bf:bf:a8:b2:9a:27:5f:ba:
32:5e:30:db:d6:fb:7a:4b:ac:81:b9:47:8a:f7:04:53:a6:a5:
a6:f4:79:c8:1b:e3:92:6b:f4:74:7b:c9:ae:54:67:b2:90:7a:
43:79:f0:37:57:6d:ee:a9:dc:7d:3d:b0:6e:66:3b:f9:ac:27:
02:78:e6:8d:c6:94:14:13:73:92:65:26:f1:33:7a:aa:3e:26:
d4:cd:9e:32:59:5a:9b:d6:66:d8:3c:54:b6:ae:a5:f0:b1:6e:
2f:66:58:8c:e8:b4:e5:7d:d4:af:9a:79:a0:f4:6b:03:0a:65:
c3:a8:10:91:b5:fe:33:02:28:7f:fa:be:39:a4:b6:b2:6f:de:
ad:19:9c:32:58:7f:f4:32:ed:22:ce:a0:58:e9:5c:ca:f7:18:
45:1f:23:c0:c5:57:c9:2f:6f:50:2e:be:e5:35:06:87:d9:88:
1e:81:63:45:9b:8c:96:bf:bb:5e:aa:b0:22:ff:f1:3d:ed:bb:
52:7d:cb:84:9b:ba:d7:a4:46:44:d9:0e:25:95:ef:51:28:48:
74:a4:f0:00:79:43:b1:90:d9:84:36:f3:aa:44:b3:b5:12:c3:
4b:e7:b9:c3:7f:14:97:e8:9f:86:8c:16:16:23:48:e5:86:67:
e4:a1:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:47 2025 by rpki-client