
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
File: D0D1D812FB0D11EFABB24730C4F9AE02.roa (raw, json)
Hash identifier: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=
Subject key identifier: AF:E8:75:A0:31:DE:7B:BE:AE:F0:04:B8:FD:17:1A:43:A3:7B:0E:CB
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: 02
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
Signing time: Fri 07 Mar 2025 04:37:03 +0000
ROA not before: Fri 07 Mar 2025 04:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153669
IP address blocks: 163.223.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:56:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Mar 7 04:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67ca77ef-63a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:bd:af:29:34:7a:30:66:8c:8f:44:98:88:
bf:21:ad:3c:46:e9:ec:c5:bc:a6:06:23:2b:61:29:
d4:03:ff:29:ff:7b:99:45:98:42:96:76:3a:da:bf:
28:7c:5e:38:9a:51:50:11:ef:3d:9a:4d:58:08:4e:
7f:ae:30:eb:85:47:2c:91:64:d9:f6:d9:16:3a:d6:
5c:21:25:5f:37:95:7b:f5:f6:0e:7e:02:fd:75:64:
b8:d8:c4:3c:ff:5b:5d:da:32:9e:ed:3d:b6:bd:bf:
c4:7a:8b:e7:ef:70:23:82:7f:87:6b:67:ec:06:a0:
43:d3:b4:d5:3c:fb:49:94:c2:c7:9a:67:f5:2e:8d:
8f:9c:d4:ae:cf:01:84:95:f3:be:b6:b2:dd:0a:09:
ec:ac:9c:1b:92:02:a4:bb:41:e3:98:4e:a4:38:71:
be:4f:43:bb:64:60:25:6d:3f:c1:d8:6b:1d:28:2b:
12:46:99:97:a7:86:d3:0d:4a:e3:58:e6:83:43:11:
b9:3d:2f:ee:41:98:4b:da:1e:78:8d:ae:73:32:6f:
32:dc:82:b0:1f:60:0d:aa:e6:8a:f8:a7:71:d3:79:
b1:6c:3c:50:4f:dd:43:80:85:51:f4:2f:e3:8e:ac:
cc:11:e2:ab:06:8d:29:75:99:fc:05:1b:dd:a5:21:
51:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:75:A0:31:DE:7B:BE:AE:F0:04:B8:FD:17:1A:43:A3:7B:0E:CB
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:18:70:9b:e7:29:06:40:e6:66:42:95:a1:ce:8c:75:26:8b:
7a:4c:0c:0b:94:d4:2e:b9:04:c5:a5:5f:e2:c0:7e:d7:88:13:
8e:fa:aa:27:89:c1:20:f4:0f:4e:37:8b:50:0b:72:29:62:00:
46:a9:c1:a9:e7:39:a6:9f:ae:91:ca:53:74:1c:98:3b:25:d4:
2d:f3:41:5c:f0:72:fb:11:3a:15:f3:f0:61:7e:93:7b:45:e3:
2c:45:9f:3b:5f:84:a6:04:6a:08:3d:3a:7b:08:ac:c3:1a:54:
a5:d6:93:7f:91:7a:a2:f8:7a:6d:99:cc:1c:f4:0d:aa:ea:62:
0a:7b:de:88:2b:48:31:b4:3b:d7:fe:15:31:93:8e:fd:42:4a:
09:03:f2:e4:bc:ba:48:7e:35:c7:6c:cb:48:a0:84:db:96:47:
71:72:10:df:49:15:36:e2:d5:1a:e2:4a:9b:a9:1f:81:14:2d:
7a:ba:87:01:89:fc:70:56:71:b1:99:c5:b7:3b:8b:2e:06:43:
ee:ec:5f:8b:8f:5c:58:c2:91:23:77:57:cb:28:2d:eb:19:ae:
ea:d4:c7:fd:2c:95:cb:46:89:a0:e2:bd:1b:64:1c:cb:1a:a7:
68:36:d8:21:37:9d:f1:5d:fa:3e:f5:8c:83:d0:a4:9c:09:0c:
72:8d:02:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:19:46 2025 by rpki-client