
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
File: 1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (raw, json)
Hash identifier: EoEXlCI1GOehyvV1dOn2OebjZ7e0VJ5M5h2oFDhhyXQ=
Subject key identifier: 88:C6:29:DC:11:29:EB:89:A4:52:52:6A:BB:A4:95:77:9B:08:64:FC
Certificate issuer: /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial: 060C
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
Signing time: Fri 16 May 2025 23:32:47 +0000
ROA not before: Fri 16 May 2025 23:32:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142110
IP address blocks: 143.92.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1548 (0x60c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Validity
Not Before: May 16 23:32:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6827cb1f-f50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:b2:4e:26:58:90:98:88:43:09:aa:b8:e4:
14:b3:09:53:d5:21:95:46:1c:ba:e4:5e:c0:b4:5a:
a6:80:af:68:b3:74:30:d8:53:03:72:2d:ba:1c:5e:
c8:25:a9:10:5b:fe:13:4b:69:ea:4c:dc:4a:17:60:
bc:3d:3b:59:fe:48:34:67:aa:42:22:70:59:81:57:
34:b8:2c:87:77:1d:8c:2c:0c:3c:57:fd:49:79:c4:
2c:d6:ab:79:18:f4:0a:ba:a6:c5:1c:d0:19:1c:02:
78:18:2c:e6:a7:48:5e:39:27:02:c3:cd:2f:09:c5:
6e:7a:6b:06:14:d0:a7:ef:14:26:ab:3e:0d:90:51:
e1:f7:b7:bb:03:b2:69:fc:85:32:68:5d:09:28:ea:
0a:09:aa:f9:ca:57:cd:5a:8a:e2:d5:24:c0:5a:c4:
2d:e7:8f:f5:34:ab:4f:c8:8a:28:8b:bd:bf:a5:62:
7a:fb:f8:40:e5:c3:39:fb:00:59:ce:98:05:b0:a6:
10:53:10:b4:ae:5d:df:c9:9f:f7:12:1e:b9:7a:c6:
e3:64:27:31:85:06:bb:38:30:66:a8:ac:5f:93:85:
c9:7b:a2:b7:98:6f:41:98:d0:80:e7:66:9d:18:48:
63:5e:62:1f:fa:66:c6:f9:4f:1c:5b:8c:f4:e0:2e:
45:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C6:29:DC:11:29:EB:89:A4:52:52:6A:BB:A4:95:77:9B:08:64:FC
X509v3 Authority Key Identifier:
keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.92.104.0/22
Signature Algorithm: sha256WithRSAEncryption
38:a9:ad:b6:a3:71:3f:8c:96:eb:af:6a:4b:2b:31:69:44:38:
e9:5d:fc:8e:1a:58:3c:b1:62:58:7e:c6:ac:27:b2:54:75:10:
e5:43:e4:11:b9:ca:37:21:57:d1:5b:ac:c1:95:aa:e4:63:27:
57:d1:ef:ae:3e:53:2f:d9:50:68:c3:a8:c6:a6:06:60:f0:4d:
67:65:ee:08:ba:ac:07:33:fa:d9:65:67:b5:2f:9d:13:b3:57:
4a:97:02:e6:db:7e:2e:1f:2b:bf:4f:ac:54:2d:7e:aa:c3:55:
ff:ac:47:1c:97:e4:fa:c2:7c:5a:ff:21:f1:28:25:49:d5:5b:
a4:19:3d:a6:47:64:ca:30:fc:56:43:9a:84:39:d8:09:2c:7d:
fa:fb:2c:ba:c6:be:ee:1c:37:f3:bb:2f:27:0e:b0:c6:b3:ca:
27:75:66:b3:91:f9:2a:4b:8d:b0:71:4e:f0:c0:c1:cd:1c:03:
e9:fb:ac:0e:15:a7:3f:63:66:0c:59:b6:26:ab:44:b2:0f:e8:
f5:eb:0a:61:4f:bc:4d:c1:81:1e:fd:2c:73:71:c9:15:25:4d:
33:13:90:2b:f4:ac:94:94:38:eb:b7:f7:63:f1:5d:61:ae:ea:
13:20:3a:64:27:0b:bb:8e:56:3c:9b:37:96:1e:57:61:c4:be:
a9:e1:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:39:06 2025 by rpki-client