
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/E5925096093911EEABCFA170C4F9AE02.roa
File: E5925096093911EEABCFA170C4F9AE02.roa (raw, json)
Hash identifier: COVvPwRRBQaYkijAL/8dGT7ATCUM7/oNgeAZamGV0AU=
Subject key identifier: 7A:CA:8A:13:C0:96:E4:65:F8:8A:3C:11:1B:33:6E:26:04:6A:73:F7
Certificate issuer: /CN=A91A1818/serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Certificate serial: 01C5
Authority key identifier: 92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/E5925096093911EEABCFA170C4F9AE02.roa
Signing time: Wed 03 Sep 2025 03:51:12 +0000
ROA not before: Wed 03 Sep 2025 03:51:12 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132388
IP address blocks: 139.180.8.0/24 maxlen: 24
139.180.9.0/24 maxlen: 24
139.180.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:04:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A1818, serialNumber=92D456E99B60DCED148C93D594B6F431270A24C4
Validity
Not Before: Sep 3 03:51:12 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b7bb30-50b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:6c:0a:cc:a9:14:ec:51:61:82:fd:67:af:
11:04:53:4c:7a:3b:f6:80:3a:70:bb:54:e3:3b:af:
51:71:64:d1:08:47:39:9a:19:8e:6a:b0:cb:a3:3f:
8b:08:8e:74:5e:39:f9:19:c2:7e:b9:d9:4c:e5:2e:
84:aa:59:60:61:4b:19:b9:fb:46:17:d1:c3:ee:68:
dd:0b:48:e0:4e:34:21:19:11:4b:8a:99:e3:4c:51:
05:5d:74:72:8e:e0:42:02:3d:ce:23:90:e0:18:41:
b3:f6:c3:82:ef:e9:10:3d:96:cc:27:ba:6a:0c:27:
f3:c1:8a:0c:96:a4:a0:62:f3:da:fd:8a:68:55:06:
e4:2b:db:e5:47:75:f3:70:1f:33:1a:d0:aa:0f:f6:
01:5e:df:c9:c9:d8:f9:a6:79:19:b3:4c:2e:43:a2:
b9:bd:86:ad:58:89:bb:0f:2d:f5:aa:eb:a4:79:61:
6d:d9:b5:48:ee:21:2b:14:43:21:8d:82:6a:cd:0b:
df:de:4c:ee:71:32:32:54:11:3c:f6:53:7d:8c:46:
2e:a1:4a:e5:bc:ce:28:98:e1:8d:72:ea:fd:f0:c7:
35:ec:f0:20:28:4e:10:7e:dd:3d:e9:fd:b3:68:b0:
d8:6c:38:8f:85:4a:b2:9c:2c:89:b8:8c:81:48:6f:
1d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CA:8A:13:C0:96:E4:65:F8:8A:3C:11:1B:33:6E:26:04:6A:73:F7
X509v3 Authority Key Identifier:
keyid:92:D4:56:E9:9B:60:DC:ED:14:8C:93:D5:94:B6:F4:31:27:0A:24:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ktRW6Ztg3O0UjJPVlLb0MScKJMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1818/68EA73EC069C11EE8C667812C4F9AE02/E5925096093911EEABCFA170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.180.8.0-139.180.10.255
Signature Algorithm: sha256WithRSAEncryption
9c:6c:58:27:89:71:79:6e:25:4a:6c:ad:54:04:54:83:c7:0b:
72:dc:3c:ce:c3:bd:d7:09:f5:1b:ed:66:9b:f8:3b:3a:66:0d:
4d:c5:f4:3c:79:3d:17:31:6e:57:46:42:bf:b7:02:a0:20:d4:
7f:c6:6b:c1:fc:b7:25:59:ab:8c:36:81:40:86:ab:53:95:a4:
d0:4c:10:48:ad:f2:99:66:3c:d2:64:78:3e:15:e8:63:91:6a:
ca:ef:a5:f8:5f:d2:79:22:19:84:9f:4b:bf:51:94:8a:cf:9c:
2c:35:0e:ec:6a:de:dd:91:dc:a1:1c:b2:f3:04:b1:95:09:53:
59:04:43:91:cd:36:19:c7:f8:76:b4:8e:82:b4:95:80:d3:96:
c9:5a:04:fd:3f:4e:18:c2:6b:60:04:eb:fe:e2:81:b1:e1:69:
92:e2:32:9a:26:cf:13:5e:1d:82:7d:3e:5f:b2:4b:e1:cd:3e:
9d:08:da:19:7c:49:74:09:d4:f9:6e:dd:9f:00:31:a8:e7:d4:
17:d7:9f:d9:93:3e:af:49:ee:df:6e:0d:38:32:0e:aa:c2:49:
80:ba:89:81:1e:94:27:51:bd:e9:29:73:a6:7a:fa:24:3f:b4:
70:10:22:09:28:9a:93:7d:09:58:86:5d:f2:4e:ae:b8:94:a6:
07:72:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:36:48 2025 by rpki-client