
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/456CC51C78CF11F08DDE1755C4F9AE02.roa
File: 456CC51C78CF11F08DDE1755C4F9AE02.roa (raw, json)
Hash identifier: si8jUropWsO/hyZ7wA/Ue9ozhVhYRMSixPMwJTGLvG0=
Subject key identifier: 09:56:AB:FC:DE:03:DF:3F:1A:E1:DB:5C:94:54:6D:14:56:5F:2A:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C299
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/456CC51C78CF11F08DDE1755C4F9AE02.roa
Signing time: Thu 14 Aug 2025 05:32:00 +0000
ROA not before: Thu 14 Aug 2025 05:32:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 154136
IP address blocks: 110.172.30.0/23 maxlen: 24
2402:2260::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49817 (0xc299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 14 05:32:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689d74cf-e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:5e:6a:bd:eb:77:f3:d8:ea:b5:26:01:74:
3d:b3:51:22:2b:63:6c:7e:b7:2f:1c:bd:fd:e7:ea:
2a:c1:15:89:b4:ea:c4:90:7f:c4:a1:68:90:6f:f2:
f0:58:b5:ba:fa:a5:fc:55:38:3d:95:50:4a:d3:fa:
c4:98:78:7b:91:ed:a8:b4:1f:ed:84:0f:cc:5c:5c:
ec:e9:c6:42:d7:1c:03:94:46:e0:62:58:fa:a6:55:
e2:35:4c:ee:9a:80:76:35:ed:e3:30:2d:05:b5:63:
d3:0a:92:e4:54:f7:05:75:d7:2f:17:98:bd:99:0c:
81:75:23:61:d8:34:e7:d2:12:d9:db:a4:0c:1b:c5:
f0:e3:5b:01:50:e1:32:72:a3:22:d4:69:fd:d8:5d:
7f:81:5f:e5:83:76:3a:f3:06:dc:8f:bf:20:ac:57:
1f:00:3c:1b:c1:63:f6:46:34:da:1d:18:0a:96:17:
17:4b:56:75:1b:55:7b:36:33:2a:27:b4:56:3e:c7:
ed:af:dd:65:1e:e3:18:a6:f5:04:2c:cb:83:8c:b9:
f0:30:65:21:59:b2:e6:37:15:c5:9f:ab:9c:36:3a:
9d:07:e7:37:87:e5:ec:4c:d6:9b:e7:bc:0b:9f:58:
24:76:51:b8:84:0b:b5:4e:71:89:d2:d8:05:56:e1:
e1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:56:AB:FC:DE:03:DF:3F:1A:E1:DB:5C:94:54:6D:14:56:5F:2A:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/456CC51C78CF11F08DDE1755C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
110.172.30.0/23
IPv6:
2402:2260::/32
Signature Algorithm: sha256WithRSAEncryption
28:ec:f0:94:f0:40:da:f9:3e:f2:fd:b4:50:1e:3d:bc:bf:ad:
4c:de:4a:da:24:6e:3c:62:3b:7d:1a:25:bd:fc:ee:ec:a3:7c:
c4:e3:73:a9:50:04:c5:a0:b8:59:78:d3:b1:f5:a3:a2:b0:07:
27:91:14:82:6d:06:d7:cc:bb:34:06:71:ac:50:be:15:06:fb:
fb:a1:9c:67:62:92:e1:de:af:a0:7a:ed:76:44:b2:59:29:95:
1a:6d:4e:64:5e:17:12:13:54:a7:0c:2e:e4:f0:59:c4:c7:d8:
f3:09:48:e2:5b:4f:be:02:fe:da:3e:4c:8c:d9:36:44:5d:21:
bc:23:20:ab:0d:be:57:0d:8d:d5:d6:1d:60:7f:4e:e8:16:49:
3a:57:56:9c:f5:4a:e4:3d:0d:3d:33:e6:d2:66:72:db:07:53:
0d:26:4b:c6:bc:1e:75:14:65:ea:a7:4a:52:42:a6:4c:a4:94:
3c:e3:2a:09:61:be:34:ef:e8:eb:b2:88:24:80:b5:72:54:72:
c6:83:7d:0c:42:70:40:f8:f1:f8:53:a1:ea:9c:9d:de:a7:2c:
9b:ae:13:6a:70:89:e5:c3:e3:d7:db:9f:8f:d9:cf:b8:86:1a:
9e:44:8d:d1:ca:df:b7:03:db:0e:ed:0b:00:81:3f:26:a7:29:
17:81:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:03:16 2025 by rpki-client