
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa
File: AC7759D2135511F092D0090CC4F9AE02.roa (raw, json)
Hash identifier: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M=
Subject key identifier: 5E:B0:ED:F2:E5:1B:2D:DE:07:44:94:53:79:CD:66:8B:A5:B2:09:D6
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: FB
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa
Signing time: Thu 09 Oct 2025 06:34:33 +0000
ROA not before: Thu 09 Oct 2025 06:34:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152657
IP address blocks: 192.206.152.0/24 maxlen: 24
192.206.153.0/24 maxlen: 24
192.206.154.0/24 maxlen: 24
192.206.155.0/24 maxlen: 24
192.206.156.0/24 maxlen: 24
192.206.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:37:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Oct 9 06:34:33 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68e75778-29f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4a:46:44:3e:49:c4:e3:ef:0f:d4:56:b8:21:
c5:79:de:7a:4d:3c:e0:d9:69:ab:ac:04:98:2c:f5:
85:59:90:51:7a:b2:31:0e:92:6c:63:92:18:8e:b6:
60:96:f1:51:af:6b:80:43:8b:8a:da:48:ea:03:6a:
dd:5a:8a:f8:de:70:e5:c4:75:f2:1d:75:3f:27:5c:
e7:36:2e:1b:54:fe:00:c7:f4:27:51:ac:e7:78:ae:
19:35:ae:dc:e8:6a:92:cc:dd:d7:e4:0e:03:45:75:
41:13:c0:24:56:2f:e8:b1:8a:87:f2:a9:f7:a4:d9:
5c:17:74:fd:9d:79:55:3c:53:30:bb:15:5b:9b:8e:
56:70:0b:56:a1:f6:65:d0:ca:fe:9c:db:5f:b8:b3:
d8:36:1e:58:51:04:a2:5b:5b:be:46:22:15:01:f8:
f1:5e:3f:b9:74:32:1a:04:f3:f0:85:88:db:07:24:
75:a0:2f:e6:7a:12:d1:2e:4e:bf:37:2a:3f:49:aa:
56:80:be:26:9b:84:54:68:b3:52:24:06:f0:b2:58:
08:b7:da:83:21:0e:bf:37:23:fe:84:e8:3d:05:d0:
43:e2:75:3d:87:3b:ff:29:64:02:c0:b9:24:f8:3e:
80:07:3d:6a:8c:56:0d:c6:35:5d:19:36:b4:cb:dc:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B0:ED:F2:E5:1B:2D:DE:07:44:94:53:79:CD:66:8B:A5:B2:09:D6
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.206.152.0-192.206.157.255
Signature Algorithm: sha256WithRSAEncryption
01:cd:8e:f3:aa:dd:5d:f1:0b:c3:79:98:63:8f:d5:71:16:6c:
7d:8f:fd:c5:ce:55:6f:e8:c4:24:7c:2a:83:05:2a:6a:ae:30:
e7:9d:6f:63:5b:e8:55:a9:cc:42:3e:b2:c9:06:6c:86:b3:b1:
1f:d4:bc:b5:db:9a:71:1e:40:48:23:e4:91:b2:cc:24:3f:fb:
8f:e9:f3:90:a2:f2:35:a7:d2:b7:e6:ca:60:e7:71:29:ef:d5:
30:0a:9b:37:84:c9:b8:d8:7c:aa:1b:41:bc:85:39:a5:8c:86:
d1:b1:dd:f8:7a:02:fc:4d:67:2e:68:b5:09:fe:10:57:78:34:
c5:4e:71:83:e3:45:26:ff:37:d9:31:7e:4a:4c:6c:90:57:ff:
8a:e2:e8:ca:a3:75:96:46:93:a7:bc:5b:3b:f7:d7:fe:70:cd:
85:46:96:78:5b:89:3d:db:53:3e:b1:f0:ac:20:1b:32:64:b5:
8b:5d:9b:d8:fd:04:e9:49:3f:e6:4a:7a:77:df:0c:13:ef:1d:
c5:73:c2:9e:76:41:db:8b:17:13:ce:b7:ba:17:0a:e6:52:36:
3e:aa:29:44:b2:ac:2d:15:bb:61:fa:91:de:77:de:a9:62:23:
b4:be:d4:9c:bb:ac:c8:44:5c:99:24:0e:fb:0f:80:f0:6e:fa:
01:11:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:28 2025 by rpki-client