
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
File: F87B578CB5E611F08C07425AC4F9AE02.roa (raw, json)
Hash identifier: y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=
Subject key identifier: 34:99:46:13:80:22:2D:DB:88:DE:79:F3:E0:CF:E6:0C:DD:16:C3:5C
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 04FC
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
Signing time: Thu 30 Oct 2025 23:20:07 +0000
ROA not before: Thu 30 Oct 2025 23:20:07 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 401783
IP address blocks: 203.32.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:58:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Oct 30 23:20:07 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6903f2a6-067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:60:0d:c0:72:2b:9e:3d:73:25:3e:e5:f2:16:
bb:13:39:c4:3c:1c:e9:13:3b:3b:ab:fd:32:24:1e:
44:c1:c1:3b:b0:52:e5:54:9e:56:89:a3:32:00:04:
4a:30:69:d5:e5:c5:93:34:df:44:87:1c:e8:69:ac:
ac:03:d1:04:97:27:74:25:ff:ec:76:fc:d7:b1:c3:
2d:4e:78:d9:93:45:e5:1f:1c:62:da:d3:f2:39:6f:
39:e6:cf:b2:59:bb:97:f6:34:58:82:72:2b:fa:65:
93:fa:7d:3a:09:7d:ee:20:5f:b3:38:c0:56:02:5c:
41:29:87:5d:24:a2:8c:26:e7:ef:49:29:43:ce:e2:
71:a0:b8:40:65:93:03:c5:ce:d5:1b:0b:56:4e:5d:
32:dc:84:b9:d1:46:b4:9d:01:51:82:bd:69:b3:44:
b6:11:e3:db:43:52:7f:08:cc:14:63:43:a4:b6:ca:
9b:19:63:85:41:54:46:54:1c:96:68:d9:29:72:4e:
1c:59:ad:51:78:dc:fc:15:53:0f:51:56:f3:dc:3e:
6b:33:13:68:05:19:0f:21:f8:20:43:43:99:13:e6:
1a:d7:f8:36:aa:3e:73:88:2b:7a:7c:58:ac:97:55:
4f:d3:f3:cb:40:59:fe:6e:ba:ca:a0:fb:61:2a:fa:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:99:46:13:80:22:2D:DB:88:DE:79:F3:E0:CF:E6:0C:DD:16:C3:5C
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.21.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b4:a2:61:1c:0a:be:1f:3d:75:e9:d3:8a:66:d0:72:54:be:
2a:c5:ce:b5:7e:fd:a9:25:01:7d:19:43:03:5f:2b:2c:9e:d7:
91:60:6c:c8:6f:7c:18:5c:53:e8:ee:25:0b:42:5a:98:30:58:
3c:8a:cd:06:74:ac:71:25:4f:5b:47:08:61:76:69:e9:22:21:
b0:58:79:97:52:ac:35:75:ac:c4:cf:11:c4:33:f8:8a:6c:9a:
59:c9:26:9a:e0:a5:68:41:d1:2e:ae:d8:ac:1f:8b:38:ea:1e:
f8:6a:25:be:36:c9:ad:04:53:bb:9a:6d:a6:27:68:38:4f:b2:
f5:de:12:b9:d4:46:95:ac:a0:22:cb:67:4d:10:ab:94:81:6f:
01:b7:3c:48:ad:08:35:58:c8:72:ab:a1:f5:7f:ff:56:c8:e6:
b1:4a:cd:9c:a6:9f:99:70:a1:08:5f:08:31:97:be:a7:e4:b1:
4c:99:1c:f6:0a:67:85:b6:5e:6c:c5:aa:93:68:a6:1c:25:b5:
31:c8:fb:27:f9:67:f8:50:9d:81:83:0f:c3:0b:de:a3:fd:31:
c5:63:af:7e:13:11:11:ea:09:af:c9:81:a1:70:24:0f:ac:4a:
12:45:43:ee:4e:6c:6b:34:54:77:72:71:3b:0f:6c:ff:90:31:
c4:b5:21:a4
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjUxMDMwMjMyMDA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzZjJhNi0wNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA52ANwHIrnj1zJT7l8ha7EznEPBzpEzs7q/0yJB5EwcE7sFLlVJ5WiaMyAARK
MGnV5cWTNN9EhxzoaaysA9EElyd0Jf/sdvzXscMtTnjZk0XlHxxi2tPyOW855s+y
WbuX9jRYgnIr+mWT+n06CX3uIF+zOMBWAlxBKYddJKKMJufvSSlDzuJxoLhAZZMD
xc7VGwtWTl0y3IS50Ua0nQFRgr1ps0S2EePbQ1J/CMwUY0OktsqbGWOFQVRGVByW
aNkpck4cWa1ReNz8FVMPUVbz3D5rMxNoBRkPIfggQ0OZE+Ya1/g2qj5ziCt6fFis
l1VP0/PLQFn+brrKoPthKvpU9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDSZRhOA
Ii3biN558+DP5gzdFsNcMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvRjg3QjU3OENC
NUU2MTFGMDhDMDc0MjVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADLIBUwDQYJKoZIhvcNAQELBQADggEBAES0omEcCr4fPXXp
04pm0HJUvirFzrV+/aklAX0ZQwNfKyye15FgbMhvfBhcU+juJQtCWpgwWDyKzQZ0
rHElT1tHCGF2aekiIbBYeZdSrDV1rMTPEcQz+IpsmlnJJprgpWhB0S6u2Kwfizjq
HvhqJb42ya0EU7uabaYnaDhPsvXeErnURpWsoCLLZ00Qq5SBbwG3PEitCDVYyHKr
ofV//1bI5rFKzZymn5lwoQhfCDGXvqfksUyZHPYKZ4W2XmzFqpNophwltTHI+yf5
Z/hQnYGDD8ML3qP9McVjr34TERHqCa/JgaFwJA+sShJFQ+5ObGs0VHdycTsPbP+Q
McS1IaQ=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:36 2025 by rpki-client