
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/46C34A4AAE5C11F089298455C4F9AE02.roa
File: 46C34A4AAE5C11F089298455C4F9AE02.roa (raw, json)
Hash identifier: /8isj7A8QykmIni1m78r+3HjaeZ+3t1TxlWUa4PHm/g=
Subject key identifier: 10:3F:54:1B:50:F1:62:84:32:26:47:8D:29:14:D1:AB:E6:62:3D:45
Certificate issuer: /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Certificate serial: 02
Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/46C34A4AAE5C11F089298455C4F9AE02.roa
Signing time: Tue 21 Oct 2025 08:59:40 +0000
ROA not before: Tue 21 Oct 2025 08:59:39 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 18187
IP address blocks: 165.101.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl
rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Validity
Not Before: Oct 21 08:59:39 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68f74b7b-9110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:49:eb:8f:94:66:57:79:84:1a:14:98:44:
9d:44:f2:90:d8:9b:72:ac:4c:a8:5e:06:b0:a9:63:
77:34:4f:28:eb:f8:4f:fc:a9:d9:60:99:58:6c:19:
1e:19:98:d2:cd:e5:69:40:c0:f0:62:53:ee:24:8f:
e7:bf:e7:4d:5b:78:a9:56:38:2a:66:34:90:85:9f:
a2:50:04:68:2e:ea:2f:dd:b1:86:01:a9:47:81:da:
85:45:51:b4:8c:62:fb:82:d8:30:2d:a9:29:25:6d:
d8:f4:35:90:cd:45:9d:88:9f:3a:60:93:dc:5f:ca:
3c:fd:b5:3a:e5:fb:9a:32:20:d7:36:fa:74:f4:e8:
b5:43:c4:c0:b7:65:27:68:8d:3a:06:5f:95:a4:21:
61:54:cd:9f:63:a9:52:0b:4c:f4:e3:17:9d:d5:82:
9e:96:d3:fe:8e:0d:68:92:89:74:d1:ac:ef:b0:e5:
5a:97:dc:08:19:5b:3d:b7:e0:18:94:8b:92:c3:1d:
ee:db:6d:51:30:39:d7:e0:20:29:77:c7:56:fc:f6:
93:1c:1c:32:6b:92:3a:a0:a1:d9:3e:7d:e8:d9:d0:
f5:5a:9b:90:6c:bc:56:62:4f:c9:53:af:0f:a3:49:
7a:59:77:18:d7:23:16:de:32:2e:b5:ae:d4:6d:6a:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:54:1B:50:F1:62:84:32:26:47:8D:29:14:D1:AB:E6:62:3D:45
X509v3 Authority Key Identifier:
keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/46C34A4AAE5C11F089298455C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
165.101.242.0/23
Signature Algorithm: sha256WithRSAEncryption
35:b2:dd:8f:98:09:42:d9:00:db:a3:a9:35:de:d0:cf:7e:38:
22:6e:92:53:0d:e7:03:35:8c:0c:b7:3f:83:65:97:97:9a:3f:
85:25:15:13:8f:9b:40:7e:53:ab:b8:92:27:34:ac:8e:7d:e5:
df:4f:07:06:c1:a6:94:52:60:59:d1:16:c7:37:24:94:f9:d5:
b6:cb:51:18:6c:8a:5d:77:34:20:30:c9:13:31:dc:1a:3f:02:
d5:be:69:82:1f:55:31:86:5a:47:c3:6c:32:97:2a:42:90:af:
b9:06:7b:e5:2b:aa:c2:03:df:ce:0a:f3:09:1c:ab:a8:d2:b6:
8f:b3:84:ca:f2:bd:74:2d:28:e7:9e:0c:88:61:67:27:3b:ad:
4f:99:6f:34:88:2a:a7:2e:dc:95:d5:39:9e:f5:b8:30:04:f6:
9a:2c:72:76:2c:51:33:dd:0f:7c:c6:52:30:34:ed:76:4a:97:
10:0d:7e:bd:c5:3e:f9:9d:d4:67:1c:b7:01:c4:83:16:0d:04:
29:dd:c6:89:52:cf:c6:d6:c9:55:30:93:69:6a:95:40:13:7b:
81:93:1b:d4:97:fa:8e:0d:ce:f9:2b:2d:71:db:08:5e:e5:69:
9b:6d:e5:d5:ec:68:39:81:7e:78:45:d2:19:1f:71:a9:58:d8:
e5:c9:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:08 2025 by rpki-client