
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa
File: 6156245AD26F11EFB6D7116EC4F9AE02.roa (raw, json)
Hash identifier: aUMucmUGoi4rDvfu82ISxnk7LeDLExV3rZzyOROfBZw=
Subject key identifier: D8:82:87:43:1A:25:EC:57:FE:46:00:25:EF:CB:00:F2:22:F7:A6:93
Certificate issuer: /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial: 97
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa
Signing time: Wed 29 Oct 2025 06:21:36 +0000
ROA not before: Wed 29 Oct 2025 06:21:36 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 136988
IP address blocks: 23.106.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Validity
Not Before: Oct 29 06:21:36 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6901b26f-391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:b0:13:ad:62:3c:89:bd:ca:3e:5a:73:e1:
19:c1:82:f1:1f:46:93:96:74:33:3e:7f:29:d9:19:
48:04:52:ee:92:a9:f2:fc:28:45:15:1d:98:0b:85:
92:b4:2c:03:48:04:9d:e6:76:3d:4b:41:9f:ab:0a:
07:c4:0d:e9:4b:03:1a:5a:9a:93:83:ac:db:f8:0f:
aa:6f:49:1e:8a:9a:7c:c6:2b:cb:96:df:6b:d6:03:
2e:c8:69:86:f1:a9:04:12:7c:fb:13:a1:8a:b6:b3:
8c:71:89:2f:b3:d6:47:1c:0b:e7:33:38:10:2b:a0:
34:86:d7:a9:7a:0c:99:20:d0:92:db:c5:29:d0:6e:
53:0f:2b:6b:5b:9f:ba:c1:9a:7f:c9:ba:da:a8:4a:
12:1a:85:9c:86:7b:8e:45:21:a5:81:38:73:63:5a:
93:ed:db:4a:23:92:1c:34:be:75:80:40:76:24:ed:
02:e3:80:c6:ed:60:aa:dc:6a:ff:31:3b:e2:2c:ad:
68:46:23:64:a1:12:ad:7b:29:64:b7:07:17:1f:f2:
e9:84:10:51:09:46:b3:e4:81:15:14:1d:75:eb:db:
89:42:6d:08:d9:d9:6b:c8:79:e0:85:02:9a:cb:f3:
09:90:34:36:08:94:e3:64:78:46:6c:be:1d:ad:60:
96:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:87:43:1A:25:EC:57:FE:46:00:25:EF:CB:00:F2:22:F7:A6:93
X509v3 Authority Key Identifier:
keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
23.106.240.0/21
Signature Algorithm: sha256WithRSAEncryption
00:55:8e:ea:5a:52:09:28:67:fb:ef:0b:28:cb:0d:83:df:6a:
98:97:85:54:8e:0c:b6:f9:c0:7c:25:11:35:40:85:47:69:a5:
2a:5d:df:7e:0d:b0:5c:fa:a2:40:b6:8f:58:7e:4f:91:0a:53:
1e:25:8b:b2:eb:f1:2a:14:02:bd:b9:67:67:34:ea:c2:80:ca:
6f:9c:12:2b:ff:c4:88:a8:8c:8b:96:d0:70:78:e9:56:7b:4a:
c1:d8:ee:ea:96:83:67:5c:39:8d:e7:2f:8c:7d:e9:60:f6:32:
c4:ff:0c:4d:2f:57:5c:eb:df:88:14:f2:92:9e:18:fa:e0:aa:
08:a3:ca:60:da:15:56:cd:25:cf:6f:73:b9:d0:71:b8:8d:d7:
0c:78:80:c7:b1:95:93:7b:0d:83:88:50:a2:33:d7:16:17:66:
f6:98:f8:64:2f:63:3d:2d:5a:fc:34:f7:d7:d7:87:25:69:00:
75:a0:f4:0b:75:c4:da:ad:79:23:e6:f5:82:6c:d5:af:d4:a7:
cf:29:91:08:7a:75:be:62:5c:4e:41:ed:7d:8e:5c:30:f8:d7:
bd:bf:fd:36:58:a9:31:bb:2f:44:b2:a4:26:ec:1e:a7:6d:5c:
c3:37:7b:a8:c8:df:70:84:53:d0:e4:de:e9:c4:f9:73:18:2b:
26:6f:dc:f7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRBQjgxMTAvBgNVBAUTKDFBNkVCNzVCMkI0NzEzNjBFRDVBOTI1QzM1MUNDNDBD
MTk0MTY4MjcwHhcNMjUxMDI5MDYyMTM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAxYjI2Zi0zOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxqwE61iPIm9yj5ac+EZwYLxH0aTlnQzPn8p2RlIBFLukqny/ChFFR2YC4WS
tCwDSASd5nY9S0GfqwoHxA3pSwMaWpqTg6zb+A+qb0keipp8xivLlt9r1gMuyGmG
8akEEnz7E6GKtrOMcYkvs9ZHHAvnMzgQK6A0htepegyZINCS28Up0G5TDytrW5+6
wZp/ybraqEoSGoWchnuORSGlgThzY1qT7dtKI5IcNL51gEB2JO0C44DG7WCq3Gr/
MTviLK1oRiNkoRKteylktwcXH/LphBBRCUaz5IEVFB1169uJQm0I2dlryHnghQKa
y/MJkDQ2CJTjZHhGbL4drWCW/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFNiCh0Ma
JexX/kYAJe/LAPIi96aTMB8GA1UdIwQYMBaAFBput1srRxNg7VqSXDUcxAwZQWgn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEFCOC8zMzA5NkVDOEQx
QjAxMUVGOEMyMEREMzJDNEY5QUUwMi9HbTYzV3l0SEUyRHRXcEpjTlJ6RURCbEJh
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0dtNjNXeXRIRTJEdFdwSmNOUnpFREJsQmFDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODRBQjgvMzMwOTZFQzhEMUIwMTFFRjhDMjBERDMyQzRGOUFFMDIvNjE1NjI0NUFE
MjZGMTFFRkI2RDcxMTZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAMXavAwDQYJKoZIhvcNAQELBQADggEBAABVjupaUgkoZ/vv
CyjLDYPfapiXhVSODLb5wHwlETVAhUdppSpd334NsFz6okC2j1h+T5EKUx4li7Lr
8SoUAr25Z2c06sKAym+cEiv/xIiojIuW0HB46VZ7SsHY7uqWg2dcOY3nL4x96WD2
MsT/DE0vV1zr34gU8pKeGPrgqgijymDaFVbNJc9vc7nQcbiN1wx4gMexlZN7DYOI
UKIz1xYXZvaY+GQvYz0tWvw099fXhyVpAHWg9At1xNqteSPm9YJs1a/Up88pkQh6
db5iXE5B7X2OXDD4172//TZYqTG7L0SypCbsHqdtXMM3e6jI33CEU9Dk3unE+XMY
KyZv3Pc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:37 2025 by rpki-client