
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
File: 9D563A7A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: Hll2+0qOoXsNfkp2NoMaxMw6B+0BSvaptL4oOoM252E=
Subject key identifier: 6E:58:26:9E:9B:BE:D7:76:E0:B1:E3:5A:E7:D9:40:FA:CF:46:99:34
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 01A8
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
Signing time: Mon 23 Jun 2025 03:22:11 +0000
ROA not before: Mon 23 Jun 2025 03:22:11 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132876
IP address blocks: 96.30.112.0/24 maxlen: 24
96.30.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Jun 23 03:22:11 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6858c863-9144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:a2:14:3e:75:17:42:c0:0e:72:36:c9:e5:
d9:0e:79:13:6c:40:ea:81:81:8b:c6:19:1a:de:86:
3b:4e:13:a7:06:1b:2d:fd:f6:31:2a:77:8a:24:4e:
14:7d:18:aa:7a:cc:bb:97:04:37:a6:6f:e7:d2:7d:
dc:30:30:87:43:9b:f5:9a:42:3f:af:48:1a:85:7e:
91:2e:77:8a:e3:01:6a:2c:4b:24:90:c0:cc:af:2a:
2a:f2:7c:67:af:06:09:7b:6e:56:46:84:66:0e:c6:
95:6c:93:7a:5c:e7:96:8d:3c:1b:60:7f:6e:ec:2d:
72:f6:22:46:76:b4:eb:a5:21:59:35:39:11:0e:cc:
a3:b4:16:a2:16:14:7c:f4:b3:b1:4f:c5:82:6a:0b:
c2:78:b5:b0:8e:7f:3e:73:c2:46:2b:c3:3c:57:69:
ee:0a:0b:12:40:fc:9c:67:b9:aa:34:5f:ac:04:f3:
13:ce:be:f8:3c:58:a3:b5:39:6c:9f:1e:78:cf:df:
74:b7:a1:aa:16:29:c3:91:70:b7:e7:e4:c8:54:c9:
3b:f7:2c:11:bb:69:84:70:eb:6c:08:50:2a:dd:85:
5b:dc:91:05:0d:5e:58:11:af:b2:df:02:32:86:7d:
62:e2:15:bb:a3:3f:7d:07:e2:b5:cc:33:3d:de:5f:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:26:9E:9B:BE:D7:76:E0:B1:E3:5A:E7:D9:40:FA:CF:46:99:34
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9D563A7A366311EEB376DC3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
96.30.112.0/24
96.30.122.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7f:32:2e:b3:8d:a9:c1:33:f0:59:b9:43:d4:e1:d8:15:b2:
e2:58:bc:a2:ea:f8:ab:4a:5c:12:74:f1:48:8f:38:e3:9b:fa:
b3:4b:5f:aa:da:34:11:53:c7:3b:de:54:99:df:74:50:6c:fb:
99:d6:48:0e:37:a8:6b:49:69:31:93:ee:c7:c4:a3:96:81:b3:
87:18:09:55:8b:4d:70:6d:b7:e0:41:50:5b:e5:57:b9:cf:d1:
8c:5d:26:b5:a4:cc:4f:97:44:fd:e3:16:e0:a3:3a:16:8d:1a:
c8:c8:7f:87:3c:49:a2:9a:1f:b9:f5:54:9e:3d:b0:32:ac:c4:
af:66:24:b6:32:09:84:e9:c2:42:f4:e4:63:be:9a:6e:c3:d3:
be:45:8f:10:9d:9c:7f:89:0e:af:82:6b:2c:f2:fb:15:60:45:
8e:c3:e1:9e:5b:da:2d:2c:e9:94:16:ec:7b:0e:1a:98:92:56:
68:d2:6e:5f:5d:d7:a6:34:40:75:11:35:d5:53:9e:30:bd:6f:
87:8e:45:42:9a:2e:9d:55:a9:f3:ca:03:70:1c:93:8b:08:7f:
9a:c3:ce:ac:d4:e1:9c:31:25:06:dc:97:06:79:56:79:fb:50:
77:c4:95:b2:f8:12:2f:9e:aa:49:4e:b0:37:e4:4a:b5:16:1d:
8a:26:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:02:06 2025 by rpki-client