
$ rpki-client -vvf rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
File: 8201D598AD9B11F080BD6B82C4F9AE02.roa (raw, json)
Hash identifier: XnkbG03fdUQKsnLMxvWnS0QGXcRDDBgD4VhVjpHPreg=
Subject key identifier: 73:6B:5F:AA:D7:7F:F2:2E:1F:13:17:C8:98:57:9D:17:93:41:0F:54
Certificate issuer: /CN=A91951AF/serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Certificate serial: 15
Authority key identifier: 18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
Signing time: Mon 20 Oct 2025 09:59:46 +0000
ROA not before: Mon 20 Oct 2025 09:59:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154305
IP address blocks: 45.117.84.0/24 maxlen: 24
45.117.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91951AF, serialNumber=18ECE629EEF3B6A2696EBAB34B3FB02EF8A8B887
Validity
Not Before: Oct 20 09:59:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f60812-9c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:fa:c5:0e:51:b5:bb:b0:12:46:6a:c0:1c:
6d:01:47:d7:d3:d5:15:b1:c4:52:e2:22:e5:d7:c5:
77:b6:ee:9c:1c:b8:31:9d:01:0a:c6:75:cd:dc:f4:
ba:c3:b8:5b:b4:b1:c3:21:90:08:8d:47:4d:0f:80:
b4:c5:5d:cd:97:14:33:7c:56:1b:6d:62:aa:4a:d1:
53:df:66:10:25:69:8d:16:99:a5:31:96:83:6e:4f:
31:9b:e4:98:2f:1e:43:90:27:e3:b7:fe:b7:14:21:
86:02:c4:11:1e:27:74:44:25:c9:14:4f:b0:c9:61:
a8:5a:5d:26:ec:e3:90:e1:e4:16:cf:88:d8:72:31:
94:cb:83:13:5a:f1:d7:2d:0c:4e:4f:e4:61:35:97:
87:65:bc:0e:d6:a6:77:a3:3b:fd:ad:92:17:b7:a9:
48:d6:8f:ae:7a:2c:2b:fb:c0:a6:28:4c:35:2f:30:
ce:95:47:99:8d:4f:6c:ed:f6:d7:72:a7:3d:1b:45:
4e:19:e7:52:fe:61:6f:e3:53:69:92:84:8c:8a:ec:
0e:ea:45:5a:3b:33:9c:42:7b:30:04:bd:eb:b0:b1:
2e:ce:bc:c9:1d:c5:99:06:bc:fc:ff:52:e5:d2:12:
68:d3:66:5e:02:f6:f2:e7:e4:4a:f2:b5:68:02:9d:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:5F:AA:D7:7F:F2:2E:1F:13:17:C8:98:57:9D:17:93:41:0F:54
X509v3 Authority Key Identifier:
keyid:18:EC:E6:29:EE:F3:B6:A2:69:6E:BA:B3:4B:3F:B0:2E:F8:A8:B8:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/GOzmKe7ztqJpbrqzSz-wLviouIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOzmKe7ztqJpbrqzSz-wLviouIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951AF/6B28B3E495C411F094E84E36C4F9AE02/8201D598AD9B11F080BD6B82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.84.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:30:80:db:95:3f:9a:74:fc:b2:2a:6d:2d:c5:72:44:3b:81:
a1:d9:1e:19:7a:13:ad:da:56:37:88:8d:6f:8d:20:4d:ae:32:
3e:46:71:da:36:2f:df:d1:50:3f:2c:2d:54:a8:c1:04:aa:a5:
0d:23:f0:71:1e:38:a9:e7:4f:c4:7e:29:7c:5f:e9:8a:32:aa:
13:1e:62:56:64:8a:bb:8a:83:c9:dc:73:ef:83:5d:01:cd:a2:
8d:77:0d:71:9f:76:6f:ce:c0:c9:83:75:25:c3:01:2c:0b:1d:
a4:02:8d:fe:2f:68:16:40:a4:fb:52:b2:ef:71:70:b8:01:a8:
17:d3:ef:89:d7:63:27:05:01:56:48:c3:8f:f7:b1:28:bf:8a:
fd:6a:01:61:d2:ed:0d:3f:9c:85:52:61:de:7a:23:ba:2f:f6:
7e:36:c6:6e:43:94:35:5c:2f:80:65:87:07:1f:97:38:1e:d1:
20:36:e9:d6:ac:5e:81:d2:b1:19:ff:fc:a7:f8:43:fa:24:58:
a3:3a:2b:96:85:37:aa:29:22:a9:69:35:96:d3:87:cd:51:67:
95:d8:82:2c:0d:d8:f9:d6:3c:d2:9c:91:be:fa:d6:a7:31:3d:
02:ae:9c:8a:9b:69:f6:0c:e3:6b:f1:d8:14:19:0c:88:e5:71:
e5:29:3a:03
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NTFBRjExMC8GA1UEBRMoMThFQ0U2MjlFRUYzQjZBMjY5NkVCQUIzNEIzRkIwMkVG
OEE4Qjg4NzAeFw0yNTEwMjAwOTU5NDZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4ZjYwODEyLTljM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOqvrFDlG1u7ASRmrAHG0BR9fT1RWxxFLiIuXXxXe27pwcuDGdAQrGdc3c9LrD
uFu0scMhkAiNR00PgLTFXc2XFDN8VhttYqpK0VPfZhAlaY0WmaUxloNuTzGb5Jgv
HkOQJ+O3/rcUIYYCxBEeJ3REJckUT7DJYahaXSbs45Dh5BbPiNhyMZTLgxNa8dct
DE5P5GE1l4dlvA7WpnejO/2tkhe3qUjWj656LCv7wKYoTDUvMM6VR5mNT2zt9tdy
pz0bRU4Z51L+YW/jU2mShIyK7A7qRVo7M5xCezAEveuwsS7OvMkdxZkGvPz/UuXS
EmjTZl4C9vLn5ErytWgCnbM5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUc2tfqtd/
8i4fExfImFedF5NBD1QwHwYDVR0jBBgwFoAUGOzmKe7ztqJpbrqzSz+wLviouIcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MUFGLzZCMjhCM0U0OTVD
NDExRjA5NEU4NEUzNkM0RjlBRTAyL0dPem1LZTd6dHFKcGJycXpTei13THZpb3VJ
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR096bUtlN3p0cUpwYnJxelN6LXdMdmlvdUljLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTFBRi82QjI4QjNFNDk1QzQxMUYwOTRFODRFMzZDNEY5QUUwMi84MjAxRDU5OEFE
OUIxMUYwODBCRDZCODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS11VDANBgkqhkiG9w0BAQsFAAOCAQEArTCA25U/mnT8sipt
LcVyRDuBodkeGXoTrdpWN4iNb40gTa4yPkZx2jYv39FQPywtVKjBBKqlDSPwcR44
qedPxH4pfF/pijKqEx5iVmSKu4qDydxz74NdAc2ijXcNcZ92b87AyYN1JcMBLAsd
pAKN/i9oFkCk+1Ky73FwuAGoF9PviddjJwUBVkjDj/exKL+K/WoBYdLtDT+chVJh
3nojui/2fjbGbkOUNVwvgGWHBx+XOB7RIDbp1qxegdKxGf/8p/hD+iRYozorloU3
qikiqWk1ltOHzVFnldiCLA3Y+dY80pyRvvrWpzE9Aq6ciptp9gzja/HYFBkMiOVx
5Sk6Aw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:48:35 2025 by rpki-client