
$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
File: 5D463936C87611EDAC86AA74C4F9AE02.roa (raw, json)
Hash identifier: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=
Subject key identifier: 07:5C:E0:C5:B1:C5:12:06:74:75:6C:0D:49:31:D9:6D:12:D6:08:02
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 01D1
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
Signing time: Sun 11 May 2025 02:31:44 +0000
ROA not before: Sun 11 May 2025 02:31:44 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 203472
IP address blocks: 2400:e3e0:f5a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 465 (0x1d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: May 11 02:31:44 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68200c10-bc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:c8:db:20:a8:0c:ae:f9:18:66:95:b8:94:
9a:97:62:b0:ed:e7:62:68:46:df:20:ed:5d:d4:cc:
07:37:ba:6f:01:b5:82:f1:67:8c:b9:fa:11:61:c7:
71:a4:fe:e0:e7:a5:e5:7c:f4:8f:78:d4:c4:b0:95:
37:e9:47:1c:e2:66:51:77:cd:fd:c3:65:76:2d:f9:
95:13:dc:bf:d1:5f:12:cc:9f:82:d6:a3:04:3d:2a:
6a:a0:49:b9:c4:3e:be:84:49:64:c0:14:8d:3c:51:
73:ab:90:7f:db:e0:d4:66:09:df:62:8a:15:00:2f:
72:54:f7:0d:94:a3:89:df:fd:52:f2:5e:d9:79:d2:
ff:34:af:06:8a:bf:52:6d:fb:e9:49:08:27:bc:c8:
28:58:21:f5:d5:3c:e1:5a:f5:d8:7e:12:fd:ac:1e:
95:a1:8d:49:ce:4c:5e:10:ee:28:3d:2e:45:ac:cc:
4d:d9:5a:01:60:15:46:96:f2:5e:73:e9:9b:f0:02:
cb:5a:fc:b0:f6:78:8e:5f:fa:ca:12:7e:29:e4:85:
8e:41:6d:65:71:72:18:e9:9f:8b:ab:21:50:e2:39:
31:f5:1b:d2:50:fd:38:32:6c:50:5f:18:77:a5:49:
ee:83:cf:f3:48:31:80:7b:02:64:0d:15:0a:4f:a1:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5C:E0:C5:B1:C5:12:06:74:75:6C:0D:49:31:D9:6D:12:D6:08:02
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:e3e0:f5a8::/48
Signature Algorithm: sha256WithRSAEncryption
d5:ca:30:0d:42:47:43:aa:57:e9:c1:b4:98:12:8d:97:a3:24:
4c:b6:38:8b:15:82:77:d5:93:8f:7f:51:e1:f8:22:96:62:f1:
73:b9:0e:67:7f:b1:c2:2a:5c:89:58:b9:34:d7:ee:d7:35:9a:
30:3f:73:04:0c:73:1e:ff:c1:a8:28:6c:b3:a4:ef:0d:34:f6:
50:2e:7d:4d:e1:70:5e:d5:1b:fe:b8:0f:2e:9e:a7:0b:55:30:
8b:31:70:70:cf:8d:1e:67:be:53:d7:c3:41:b1:52:d5:17:2c:
32:50:de:ef:85:b4:79:cc:2b:f7:cb:fa:15:21:45:a5:f4:28:
bd:b8:53:5d:f7:f4:7f:6e:b7:18:40:f3:a1:86:e4:79:7c:3a:
47:57:da:27:39:c7:83:d3:4f:69:ba:73:56:49:e2:81:cb:07:
5b:56:3d:d2:e2:01:f8:1b:ee:c3:9d:19:25:b6:e4:d2:6a:48:
02:2c:d4:da:97:a2:3b:49:5f:53:d8:ff:4d:73:03:92:3d:85:
fd:fa:8a:af:a4:c4:f5:3e:1b:94:9f:3c:3d:dd:a7:db:c7:ad:
54:3b:e6:45:47:fe:56:28:a4:f1:8e:31:72:4c:ca:87:55:1d:
09:1b:7f:2d:c3:c6:00:31:cf:26:5f:a5:df:10:32:16:67:2d:
4c:51:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:58 2025 by rpki-client