
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9FCDE686692911F0882CE164C4F9AE02.roa
File: 9FCDE686692911F0882CE164C4F9AE02.roa (raw, json)
Hash identifier: oNZyPj6D80lJCCbDNAThEBUDZiV2H/13MWSg2bFhHN0=
Subject key identifier: EF:A6:C8:60:AD:BE:52:23:3E:5E:4D:A2:3E:AD:F0:01:5D:5F:72:F3
Certificate issuer: /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial: 01CA
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9FCDE686692911F0882CE164C4F9AE02.roa
Signing time: Fri 25 Jul 2025 07:33:15 +0000
ROA not before: Fri 25 Jul 2025 07:33:14 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131162
IP address blocks: 87.124.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Validity
Not Before: Jul 25 07:33:14 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6883333a-7a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:7d:8b:a4:8f:09:92:64:cc:e7:4f:28:ac:
b9:e6:48:65:86:70:f8:bd:59:04:64:38:6c:27:4e:
8e:32:1a:69:f9:61:d3:08:1e:28:f0:61:12:2f:01:
9c:42:d6:2f:c9:35:d2:22:b3:d2:47:0b:ce:dd:9c:
6c:77:6d:3e:91:f1:dc:51:03:70:57:86:82:27:81:
2c:db:30:5d:6d:b5:b7:5a:35:9a:0b:43:5b:7b:04:
28:7f:f4:53:da:8e:4a:7d:a7:6d:e6:85:4e:ca:ee:
cf:95:55:14:7e:03:96:a4:09:5b:7d:3c:d7:54:f6:
4b:bc:39:09:cb:a8:3d:71:02:3f:a5:f8:4e:70:43:
07:35:3a:9c:bb:a5:12:3e:75:44:43:ae:8d:a7:f5:
df:83:96:09:b5:7b:a0:5c:c7:5a:ad:d1:6b:84:70:
e7:d5:d2:30:30:95:da:f6:1f:70:a2:49:56:fd:45:
40:c4:e0:fe:32:8f:52:45:12:0f:b6:71:d1:f6:70:
0d:cf:f9:86:7f:f2:8c:f4:ee:56:10:9e:05:00:ad:
3e:7f:b0:6a:5b:f5:42:fb:94:04:86:77:be:a3:8e:
3d:37:1f:9d:09:40:b0:38:24:8a:90:d4:77:1c:55:
0c:6e:49:d0:b8:4b:ef:c1:d7:b7:1b:f6:27:6f:43:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:C8:60:AD:BE:52:23:3E:5E:4D:A2:3E:AD:F0:01:5D:5F:72:F3
X509v3 Authority Key Identifier:
keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9FCDE686692911F0882CE164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
87.124.125.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:94:64:d4:7f:57:e3:20:f7:0f:cb:4a:f3:ea:bc:b3:9b:93:
71:83:82:2f:4f:42:a0:1d:89:b5:3f:19:25:4c:4b:19:30:ff:
9c:32:0b:71:46:8b:47:e0:cf:b7:1f:b6:f7:f3:a7:31:66:2b:
db:2f:08:49:83:9f:94:89:d2:bb:c8:4f:2f:b6:c8:73:94:7f:
8f:55:9b:08:12:d3:fa:d9:28:a4:44:bf:07:c6:9e:c4:ce:ed:
b9:73:aa:ad:bf:55:3b:57:df:fc:f6:f9:1d:20:0e:8c:de:e7:
1a:5b:f8:de:9d:1a:f5:7e:80:73:3f:7c:d1:b1:9d:a2:bb:5c:
5d:61:a1:d2:51:1e:5f:38:43:b8:57:6b:74:76:5e:22:6a:b7:
f8:22:fe:1c:21:5f:f9:b6:be:02:e4:05:45:6b:bc:9b:06:44:
6c:cc:6c:17:9e:11:c2:be:3d:2e:c9:8c:84:df:9a:ee:00:5b:
1f:8e:7b:54:56:99:15:64:e3:63:eb:89:84:40:0e:cf:61:03:
5a:a8:cb:31:83:dc:2b:35:cc:de:a4:24:84:6e:f5:36:c4:c0:
ea:30:8b:b1:a9:c2:9b:21:9d:14:bc:25:d2:5c:b8:75:70:ae:
b3:76:ba:b3:e8:8a:7b:8a:00:92:6e:93:d3:c6:22:6d:d6:f7:
40:f5:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:09:55 2025 by rpki-client