
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
File: E30E4FF605E511EF868E0F6DC4F9AE02.roa (raw, json)
Hash identifier: jb52alxfqmopNXaWzE+J3NyrR4hDhCWX65ruTvYQprU=
Subject key identifier: 64:0D:27:AC:7A:E3:0F:9E:DF:F3:10:35:40:DB:BC:9E:7B:A9:1D:F1
Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Certificate serial: BD
Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
Signing time: Sat 19 Apr 2025 05:31:22 +0000
ROA not before: Sat 19 Apr 2025 05:31:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152650
IP address blocks: 202.6.86.0/24 maxlen: 24
2001:df3:8ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 04:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416
Validity
Not Before: Apr 19 05:31:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6803352a-05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:94:65:6b:66:cc:fd:e7:73:ad:54:c0:b3:
f7:82:c5:b6:c2:35:e6:6b:0e:d0:0a:e8:ff:d5:cb:
6b:53:99:67:ba:94:a8:4b:d9:44:75:e3:7d:d0:4c:
a4:ff:76:70:31:28:e0:14:80:b5:02:d4:53:6d:7d:
b9:d1:66:cd:b7:1a:f3:b5:c1:fe:f7:2c:6c:8d:81:
17:a0:d0:cd:46:b3:02:b6:e3:b3:20:4b:ce:be:f8:
43:ae:c3:f2:d2:24:db:ce:77:ea:bd:2e:a4:3c:20:
77:b1:92:c1:cc:f4:cf:31:4a:df:ad:80:3f:2f:f3:
8c:4c:07:89:20:f3:b2:a1:7f:74:38:7a:64:f8:49:
d5:31:88:35:08:80:64:00:e9:3d:d6:6b:24:75:a0:
0d:10:e9:1f:0b:14:c2:4f:e5:84:44:7c:f4:3d:1b:
06:98:53:4c:88:f3:c2:c5:0e:fc:80:35:4d:f5:4b:
8a:30:c7:72:62:89:d4:70:48:23:ef:03:3e:df:98:
8d:bb:c9:aa:4f:67:01:78:d6:5d:84:56:d3:23:30:
04:ec:8f:d3:ea:f9:02:99:4d:1d:00:14:a6:18:5a:
2f:06:07:9d:a6:d4:0d:0a:3e:11:55:05:d9:72:7c:
fd:fa:7f:97:c0:d6:b2:0b:34:c2:b5:f5:7e:76:ca:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:27:AC:7A:E3:0F:9E:DF:F3:10:35:40:DB:BC:9E:7B:A9:1D:F1
X509v3 Authority Key Identifier:
keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E30E4FF605E511EF868E0F6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.6.86.0/24
IPv6:
2001:df3:8ec0::/48
Signature Algorithm: sha256WithRSAEncryption
51:69:fe:37:57:6c:c2:a0:4a:e2:68:4a:30:ba:1d:eb:95:76:
c9:72:e2:d9:21:8e:05:31:ec:67:6f:aa:3e:da:c9:3e:16:cc:
dd:b2:1d:7d:aa:f5:a8:c3:99:9e:f9:2c:27:65:eb:a2:e9:6f:
61:49:44:2c:8c:d6:3f:a7:d3:5c:eb:7a:fa:c4:d6:5b:5d:09:
6b:af:1b:ea:0e:92:d5:0d:d3:7d:90:a8:f1:22:10:75:55:2b:
99:e4:21:07:80:b8:b1:e7:2d:05:6b:54:ba:ff:84:a8:52:99:
f8:b6:86:f1:5f:9a:0b:35:18:68:ec:18:76:96:5d:d9:0f:dc:
10:8a:4f:38:6e:f8:ac:d7:cd:47:66:c5:f6:1d:38:7d:5e:0b:
99:b6:af:bb:d5:ce:9a:7d:31:bf:92:69:f2:ae:64:35:b6:7a:
2b:e2:45:f9:77:f0:db:2d:68:7e:84:8a:60:79:99:d2:ce:a3:
ab:b4:61:f1:76:b3:85:6e:0e:16:26:e5:3d:f6:64:16:38:b6:
2a:e7:78:97:23:56:55:0d:d2:db:ec:d9:5d:9c:9a:f1:80:ab:
51:f7:c9:15:4b:c9:e9:3b:1b:96:3b:b6:19:dd:66:30:8d:60:
51:85:2c:ed:bc:0c:66:f2:04:2b:a5:11:30:55:4c:a8:e7:5f:
b9:86:2c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:13:35 2025 by rpki-client