
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa
File: 92AEE092378211EFAEB6B36DC4F9AE02.roa (raw, json)
Hash identifier: vof6OG8sAX0uHAvhetFYEpdSjwUJhtpp1UkP8lk0Gm0=
Subject key identifier: 94:ED:BD:2E:6B:4C:C4:12:AC:6B:3B:D2:14:92:79:C5:BB:0C:23:57
Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial: 19AE
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa
Signing time: Thu 31 Jul 2025 16:54:53 +0000
ROA not before: Thu 31 Jul 2025 16:54:53 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9234
IP address blocks: 168.245.188.0/22 maxlen: 22
168.245.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6574 (0x19ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Validity
Not Before: Jul 31 16:54:53 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688b9fdd-1716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:a0:a6:d3:d2:32:b6:f9:50:3b:1d:99:74:
04:26:0c:bb:63:6d:a6:69:42:82:b4:56:9d:5b:1a:
5f:9c:7e:85:43:c1:6d:d7:07:80:7d:2b:14:80:75:
34:48:fb:ea:db:e0:fd:33:c5:24:8c:d9:85:25:60:
6d:89:ea:04:e4:81:28:a8:ed:14:df:ef:d4:c6:9e:
5e:18:0e:eb:55:a0:7e:f0:c1:00:dc:c0:5d:12:5f:
83:8f:51:6c:c4:1b:50:e4:f6:93:72:cf:61:eb:f7:
e4:92:34:99:8b:4b:5c:30:4a:4a:d4:f2:f2:f5:42:
4d:9f:33:08:da:4e:e4:66:b8:b6:5e:06:30:df:2d:
15:7c:16:a7:ba:c6:44:df:d4:df:6a:f5:1e:83:68:
b2:4e:6e:2d:b3:8e:b2:bf:6e:6a:14:fe:6e:48:05:
e5:a1:2b:a9:da:37:54:17:74:11:2c:e5:07:3b:de:
7e:a5:98:7d:f4:f5:2e:8a:a3:b4:e6:79:c5:00:ad:
52:7d:ee:f0:42:fe:c8:42:6c:e6:e7:0c:3b:86:8c:
e1:8f:f6:d0:d0:76:9a:ea:c6:7b:6a:98:b3:74:38:
f1:8a:1f:61:48:83:7f:77:4a:e2:8d:4e:29:03:b5:
d6:f2:e5:f8:8f:e6:db:df:7f:fd:bc:f4:5f:19:10:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:BD:2E:6B:4C:C4:12:AC:6B:3B:D2:14:92:79:C5:BB:0C:23:57
X509v3 Authority Key Identifier:
keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
168.245.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a2:f6:dc:36:bf:34:33:b1:80:89:20:91:06:a7:5b:0a:6c:
61:13:02:c1:15:de:fd:06:43:e2:58:a2:a8:cf:ab:62:23:a9:
b0:46:26:0b:1e:84:f6:c1:99:3d:f3:0a:91:b6:dd:03:2d:66:
3e:80:89:b8:75:2c:49:52:5e:b8:b7:b9:24:7a:19:d1:9d:21:
98:9e:78:22:3d:12:24:33:7f:e0:85:3f:db:ce:f2:ed:a7:9b:
aa:9a:10:f6:03:d2:66:1d:3d:0d:05:14:f0:64:79:d6:c4:4f:
06:7e:c7:d4:b3:3a:68:64:74:08:a5:21:ec:7a:8c:49:08:e4:
f5:cd:e6:26:6c:82:d9:af:23:0f:61:c7:1d:b7:b7:fc:f6:40:
fc:b2:af:a1:13:07:23:3a:9d:bb:66:53:23:72:b9:f4:f7:d2:
a3:e4:6f:7c:46:1b:ae:58:06:84:8b:e6:de:f0:0a:fd:96:d0:
8e:28:0b:f7:26:7e:b5:f7:9e:fe:05:78:33:ed:e2:16:53:7e:
da:92:ad:04:2c:96:b8:22:12:39:9f:e6:0e:48:18:b3:25:2f:
0a:4c:4e:3e:9b:97:36:23:6b:e2:64:e2:e3:df:2a:f1:0c:60:
62:8e:26:9a:f6:d5:da:de:bd:63:bc:61:50:fe:bc:a2:85:a8:
dd:98:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:52 2025 by rpki-client