
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1465D252621C11F0AAE4E551C4F9AE02.roa
File: 1465D252621C11F0AAE4E551C4F9AE02.roa (raw, json)
Hash identifier: pE0TeYdIKCgc/QwPZRV1/6gtn2PDxZWuZWypXfqUCBk=
Subject key identifier: 19:F6:D8:99:14:D2:7A:8B:4E:C3:FD:5F:ED:56:24:E4:58:DB:D2:53
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 04B1
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1465D252621C11F0AAE4E551C4F9AE02.roa
Signing time: Wed 16 Jul 2025 08:08:39 +0000
ROA not before: Wed 16 Jul 2025 08:08:39 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 43641
IP address blocks: 203.32.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201 (0x4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jul 16 08:08:39 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68775e07-a0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:f0:69:0b:f6:18:9b:42:71:ef:49:03:ed:
9e:94:d4:79:c1:cd:73:8f:95:e2:66:e1:0d:6a:1b:
64:e1:10:e0:72:2a:e6:f0:05:a6:c0:2b:2d:b4:fa:
fc:15:78:0d:8a:81:aa:7d:45:28:83:bc:96:86:c2:
39:45:9b:cf:ab:0c:75:4a:7e:ae:f4:8e:31:42:56:
87:e7:ba:7d:b7:0c:8b:31:b9:e1:04:29:3c:cb:de:
b7:9a:13:ea:58:5d:86:20:8d:81:08:30:1a:b6:04:
be:c4:3a:e5:13:b4:b0:5d:fb:60:ee:c9:a2:6e:dd:
ff:92:56:fb:52:5a:50:2e:e0:df:79:3f:9b:cc:20:
98:53:aa:4e:e6:86:a1:67:9f:03:17:09:57:96:d6:
2d:e2:fe:cd:30:1c:a8:27:8f:c5:0a:2d:50:d5:c2:
92:18:8e:53:88:81:e3:48:a6:fe:07:d9:63:e1:61:
77:1a:24:d1:c2:d0:e9:d8:7b:1c:4b:a8:98:6a:0b:
a7:37:a9:f5:ae:9e:fd:fc:fd:0e:ba:ae:c3:37:14:
86:7d:15:da:dd:06:03:9e:62:0a:16:92:45:0d:3d:
85:76:76:1d:c0:9a:52:86:8a:8a:35:9b:61:37:c1:
86:06:e8:4d:33:66:26:45:d7:ba:89:a7:37:41:15:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:D8:99:14:D2:7A:8B:4E:C3:FD:5F:ED:56:24:E4:58:DB:D2:53
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/1465D252621C11F0AAE4E551C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.28.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d0:40:9b:ba:41:e9:9c:af:0a:26:7e:70:f7:e1:21:5d:f5:
60:b3:22:00:04:8a:31:db:f2:cf:cc:ad:9a:05:64:84:d7:c2:
62:ca:5e:2d:84:41:62:a4:4c:bc:c9:07:0f:1d:a4:9f:f1:a4:
21:b6:5f:d2:b3:e4:8c:bc:dc:32:41:cc:46:e3:52:3e:8f:d9:
20:2b:45:c0:ff:64:22:71:d7:d8:8d:69:5b:6a:e8:d5:0e:35:
5f:3a:a4:22:99:94:23:74:a8:87:67:99:33:cc:cb:40:31:d2:
d9:f4:8b:c4:43:15:7b:84:63:49:32:5e:a2:a1:5d:01:57:8d:
3c:0b:0b:32:ae:1e:7d:63:2e:2d:e3:60:a7:85:20:6c:38:20:
fb:da:11:e4:27:55:33:50:f0:f1:1e:cc:e0:1f:9f:55:61:07:
6d:d5:27:bd:d1:be:59:29:e2:94:bc:78:75:8b:2a:2a:13:49:
3e:71:5c:e3:5d:92:d2:8c:9d:97:3f:b9:68:3b:8b:08:48:a2:
94:1b:21:15:70:73:d0:bd:4f:9a:12:b2:85:86:55:db:ca:4f:
7c:80:2a:49:6a:aa:d7:08:2c:3f:da:13:69:27:44:53:3b:b4:
0c:50:1c:80:21:0e:a5:e7:f6:c2:83:e8:dd:c2:b3:4d:c3:b6:
62:59:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:46:41 2025 by rpki-client