
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/6EA46446646511EFA9435879C4F9AE02.roa
File: 6EA46446646511EFA9435879C4F9AE02.roa (raw, json)
Hash identifier: N1pVptA00WkhE4m7SJH5EH6Jm0Owz+2oXrWW4KUrpu8=
Subject key identifier: D5:81:00:EA:47:63:8E:74:28:65:46:7C:57:D3:D0:7B:23:02:DA:29
Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Certificate serial: 0D42
Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/6EA46446646511EFA9435879C4F9AE02.roa
Signing time: Sat 04 Oct 2025 18:17:43 +0000
ROA not before: Sat 04 Oct 2025 18:17:43 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 54994
IP address blocks: 2404:4f80:71::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A998, serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930
Validity
Not Before: Oct 4 18:17:43 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e164c7-c402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a5:7a:b0:35:83:a6:1c:88:3c:91:f3:06:5c:
79:a8:79:32:05:f1:7a:92:4f:62:ef:0a:b0:54:82:
59:bb:a0:5a:b0:5f:68:2d:15:39:04:40:e5:a4:79:
7a:7a:25:89:c3:20:28:7d:af:98:23:ae:eb:b9:32:
07:67:c5:50:b2:cd:53:27:73:11:66:91:67:cb:be:
43:22:e1:86:c7:49:d5:f9:5e:8d:e2:6a:d9:cf:3a:
51:a8:3b:c1:77:a9:94:42:8a:ef:29:96:10:29:95:
1c:5c:ca:74:7f:f5:5f:37:8c:0c:94:b9:18:1d:81:
2e:9e:7f:14:b7:41:88:8e:54:d7:a4:14:d9:ad:f0:
bc:4e:e0:aa:6b:ed:94:82:d9:77:dd:9d:94:2f:53:
e4:16:f2:77:12:ce:8b:70:91:2e:19:7b:16:92:9b:
44:fc:8c:40:da:d4:08:71:ae:b5:b7:35:37:2e:5f:
3d:53:3e:06:10:2d:8b:25:be:c2:85:44:4d:c6:60:
f5:96:fb:3b:fa:23:0e:10:88:57:0b:00:35:82:9c:
82:dc:86:11:a6:e5:e9:04:f5:e1:60:08:ce:1e:e9:
69:cc:5d:97:41:69:6f:3a:bf:ab:52:f8:55:22:b2:
f9:59:e9:e7:57:13:93:b4:00:3c:c0:ea:72:5c:1f:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:00:EA:47:63:8E:74:28:65:46:7C:57:D3:D0:7B:23:02:DA:29
X509v3 Authority Key Identifier:
keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/6EA46446646511EFA9435879C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:4f80:71::/48
Signature Algorithm: sha256WithRSAEncryption
29:fb:b2:e6:16:1a:48:08:f7:98:b4:d6:39:9a:37:23:1b:a0:
cd:d8:20:be:e1:77:39:8b:f3:50:7c:be:60:57:5b:db:7b:23:
5d:9c:6e:e4:08:db:5d:35:83:f8:cb:89:f6:cd:8b:cf:02:70:
b6:39:dc:9a:df:e9:0b:a3:fe:d7:1c:e1:16:04:c4:e9:b7:f6:
5c:ef:3e:87:49:fc:33:10:e6:56:5a:29:3f:25:ba:bc:fc:5d:
ec:4d:1e:d4:b9:ed:cc:68:ba:36:b7:d6:82:1d:28:e6:39:63:
3f:d8:93:82:1f:b7:df:ba:76:1b:cd:4b:6c:c8:be:1d:c6:85:
3b:3d:75:1f:cc:73:b2:b7:b0:91:74:83:e0:5f:6a:36:19:6e:
48:eb:aa:30:18:02:8c:ba:d4:48:69:59:e7:24:a4:1d:eb:54:
f6:4e:cc:db:33:84:ed:31:b5:c7:d3:bf:7a:fa:79:42:16:b5:
5d:64:5c:16:e0:bc:80:10:ea:b9:33:36:3d:9e:59:c8:0a:49:
5a:38:7a:6d:eb:4a:11:bf:05:45:1e:9a:5f:c4:e6:8b:59:e7:
9e:53:35:88:22:f6:a7:0a:29:1c:fa:98:5e:1a:77:6b:36:4a:
b4:61:3c:e1:a3:38:f1:90:47:b0:b2:02:cb:8a:8c:c1:27:78:
04:68:66:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:15:37 2025 by rpki-client