
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/8CC6B54CB44011F0ACFB4D45C4F9AE02.roa
File: 8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (raw, json)
Hash identifier: dqRzvsYYzS0ot/6HGxMcWMe4B7L97QuQgSdCQiuHa2U=
Subject key identifier: 39:7F:B5:99:8C:6F:27:1E:31:71:8C:D7:F7:42:60:47:94:FB:F9:9D
Certificate issuer: /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial: B6
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/8CC6B54CB44011F0ACFB4D45C4F9AE02.roa
Signing time: Tue 28 Oct 2025 20:56:18 +0000
ROA not before: Tue 28 Oct 2025 20:56:18 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 137526
IP address blocks: 160.250.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Validity
Not Before: Oct 28 20:56:18 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69012df2-08fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:1d:b7:a4:c6:ef:fa:e5:ff:21:35:8e:64:
80:16:05:64:f7:da:f8:ce:5f:3c:58:ca:c1:db:59:
9c:18:3c:d9:36:92:be:89:42:47:54:ab:74:0b:cf:
57:43:c6:08:7c:2b:95:4f:0e:32:6c:22:cc:a1:c8:
f1:5f:6a:2c:80:96:bb:af:94:2e:af:af:9e:ee:b0:
f7:91:70:4d:63:fc:c2:88:0d:87:3d:9d:2a:d3:3b:
3b:b6:13:ee:ec:fd:c9:7e:7d:27:56:f3:08:ad:de:
80:1d:b4:39:cb:5d:32:3e:6b:c6:7a:a1:35:a0:87:
f9:bb:db:b5:60:58:89:78:60:8c:61:c7:52:12:69:
3a:6c:f0:07:e8:57:35:3d:0c:60:1b:37:f9:b2:a8:
2f:a7:f5:26:4f:ae:af:82:b4:90:43:39:45:d6:ee:
63:9f:9f:cf:73:85:cf:b7:76:41:8e:b0:09:1f:b9:
04:88:e3:29:90:7e:a8:7c:65:f2:df:89:91:f0:89:
20:51:8d:77:b7:2d:e1:ed:56:cf:cf:6a:fa:7c:77:
3f:63:a1:67:b4:b1:6f:e8:cf:7d:ad:b9:18:6e:7f:
85:a4:ca:65:f5:56:d5:9c:2a:05:9b:b7:4c:00:05:
1a:90:1d:92:64:d4:7c:05:b6:62:70:71:1c:21:4b:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:B5:99:8C:6F:27:1E:31:71:8C:D7:F7:42:60:47:94:FB:F9:9D
X509v3 Authority Key Identifier:
keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/8CC6B54CB44011F0ACFB4D45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.241.0/24
Signature Algorithm: sha256WithRSAEncryption
25:64:2a:02:b2:df:57:0e:d6:d6:7d:78:22:69:53:cf:ac:d8:
74:b4:d7:2e:1a:87:a9:c2:22:7e:2b:be:a9:ba:12:31:23:fe:
d2:cb:67:b6:27:75:23:75:54:e1:88:56:77:ed:95:83:e3:dd:
0e:eb:ad:c5:d5:71:53:56:e6:a5:45:e8:d8:77:b4:48:0e:64:
b0:fd:1d:2d:60:70:72:ec:6f:79:1b:f8:ab:ae:a0:ba:b1:c7:
97:a0:5f:01:1a:c2:33:c9:f3:7d:b8:4a:89:a1:e7:6f:cd:f9:
88:c1:ed:8a:26:cd:94:6a:2e:78:20:0f:ae:ae:e7:e3:2f:cc:
e0:eb:d9:fa:ff:2c:03:56:33:08:ee:d4:f1:45:f8:66:85:11:
f3:55:31:d4:b4:cf:b7:0d:12:af:1c:2e:a5:c7:ff:d9:ba:4a:
be:b2:43:56:95:c8:a1:48:b0:93:d1:1d:a6:30:27:3e:cf:2f:
b6:2e:89:d9:8a:c0:cb:01:ca:b7:70:b0:8f:48:8b:c1:c1:b1:
55:85:c5:47:a1:fd:4a:e9:08:2c:dd:b4:4b:cf:84:a9:d4:30:
fd:8c:d5:ea:c1:89:02:54:50:f9:64:98:2e:dc:4e:73:19:51:
da:3b:18:5e:58:7c:7e:39:b7:73:5e:ad:0f:d4:bd:c9:be:c8:
9d:eb:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:47:42 2025 by rpki-client