
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/DE7018487BA711EF91F1C185C4F9AE02.roa
File: DE7018487BA711EF91F1C185C4F9AE02.roa (raw, json)
Hash identifier: ZAkZWxi9iVmr7wQCEzSoCxNK0Au02yJMhUs1rCvTa90=
Subject key identifier: F0:12:74:7F:30:E0:68:FE:0E:38:0D:DC:40:68:76:4B:A0:93:EB:E2
Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Certificate serial: 0813
Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/DE7018487BA711EF91F1C185C4F9AE02.roa
Signing time: Sun 02 Nov 2025 21:11:12 +0000
ROA not before: Sun 02 Nov 2025 21:11:12 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 150803
IP address blocks: 43.225.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320
Validity
Not Before: Nov 2 21:11:12 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907c8f0-d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:eb:d9:72:62:53:2f:d4:84:5e:73:5c:48:
b7:ff:24:10:c8:cc:ed:26:9f:13:f1:3f:e2:9a:39:
61:10:43:fd:48:a6:77:a3:73:41:8f:1d:6b:0d:9e:
6a:ed:a0:81:cc:62:5e:07:b4:ab:b5:66:8b:a0:03:
2f:77:da:ac:66:a7:3d:94:fc:60:41:84:1c:3e:75:
f6:e1:5a:9b:3a:da:6f:76:a0:8b:b5:d7:2c:60:c1:
df:48:44:8e:0f:cb:69:ed:7e:13:39:d0:2b:35:d7:
3a:d7:10:a5:d9:f3:14:01:44:cc:b6:31:7d:d4:3a:
03:c8:f3:3e:38:ef:72:38:d7:be:9c:a0:10:4c:ae:
2b:5c:ad:c6:73:37:b0:6e:60:f4:b8:8f:8c:22:43:
9c:86:da:ce:cb:d2:61:fa:57:1b:cd:38:71:e0:cd:
39:5f:f7:16:f4:f8:0b:04:c2:46:d4:0a:8d:d0:23:
99:eb:f6:9c:8e:89:60:7f:84:0f:7f:38:92:7c:79:
ec:87:ef:73:a8:d3:b9:89:8b:6f:b9:fb:6d:21:19:
4b:6e:f9:bc:3c:74:7e:62:92:98:c6:d8:c8:8d:b4:
41:dd:69:41:6b:89:48:3e:ab:97:70:1e:da:9a:05:
93:f1:59:bb:51:e1:80:c3:ee:8d:09:d5:64:bd:5f:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:74:7F:30:E0:68:FE:0E:38:0D:DC:40:68:76:4B:A0:93:EB:E2
X509v3 Authority Key Identifier:
keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/DE7018487BA711EF91F1C185C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.56.0/23
Signature Algorithm: sha256WithRSAEncryption
24:b9:a2:a7:8a:78:55:d2:ef:53:ff:2b:9a:60:4f:a9:d7:cf:
85:11:82:b3:94:06:12:98:f2:22:4a:c0:30:b6:ae:ee:61:b0:
96:7c:82:f2:95:e0:6c:46:da:9a:1e:7c:9a:ab:86:a2:dc:2a:
af:9f:11:11:75:b7:ca:15:93:03:72:f1:49:e6:0d:a4:fc:f9:
a5:8f:b8:77:db:ec:dd:da:67:18:af:ab:56:f5:27:f0:ef:2b:
20:bf:8a:cc:be:44:72:b3:4d:38:6d:5c:d7:09:6c:35:d8:77:
06:bc:48:50:5d:f1:ff:c7:7c:a8:91:0d:fc:2a:58:37:e3:a0:
0f:ce:e9:e0:1e:76:c7:75:94:9b:40:d7:06:7c:57:83:30:6c:
8f:72:1c:f9:ab:00:19:6b:28:36:52:c3:0a:ad:61:e7:73:36:
34:97:de:05:a9:85:b6:f2:55:95:7e:df:3d:14:4d:54:8d:74:
ca:0f:f6:98:58:a4:33:5f:5c:fd:de:e3:5a:86:f9:b5:74:1f:
8b:4a:1f:69:da:46:da:c7:b4:26:27:7c:f5:1f:6d:61:65:b7:
5c:df:11:8a:e3:f9:b8:29:26:06:14:a5:4a:9f:3e:e4:fc:2a:
43:e0:45:65:64:b0:37:4e:81:b0:15:57:2c:55:b3:ed:14:7e:
33:36:a6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:18 2025 by rpki-client