
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/5D184494AFD811F0873CFA2CC4F9AE02.roa
File: 5D184494AFD811F0873CFA2CC4F9AE02.roa (raw, json)
Hash identifier: jPRyyaXR31sdXHmUiJynWWmJ+koQIPK5lf3hW9dz0Y4=
Subject key identifier: 0F:A5:54:60:6A:B3:0B:D1:4B:59:A4:DD:CB:E9:D7:5D:AF:78:AF:E0
Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Certificate serial: 014F
Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/5D184494AFD811F0873CFA2CC4F9AE02.roa
Signing time: Thu 23 Oct 2025 06:20:26 +0000
ROA not before: Thu 23 Oct 2025 06:20:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29
IP address blocks: 185.81.70.160/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE
Validity
Not Before: Oct 23 06:20:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f9c92a-3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:a2:f6:2c:ce:11:54:ff:05:66:3b:58:1a:
bc:68:66:ba:78:7c:ab:f6:c4:4e:ca:82:1b:d1:c2:
43:b5:e6:ab:85:81:97:42:73:93:4b:a0:10:b9:a2:
50:c3:17:95:aa:56:68:50:b9:29:7b:72:fd:74:95:
d1:fb:cd:1a:20:44:21:a9:16:d3:73:00:fd:34:4f:
c1:10:7d:c7:e6:43:89:75:da:ba:5b:f3:6f:18:0a:
c3:be:0c:ba:f0:b9:bb:8c:b2:c1:11:e0:0d:cb:9d:
38:54:40:02:26:29:b4:5a:0b:5d:51:46:4c:bf:dc:
e8:37:a9:e2:dc:fd:a9:f3:e4:d7:e4:d8:f9:3d:02:
64:0a:69:79:dc:52:74:cd:a8:29:24:7e:27:65:1f:
3d:cb:6d:80:b3:e9:92:22:a4:40:b6:87:25:d2:a0:
34:17:64:44:fa:d5:ba:7c:3f:97:72:1d:11:bc:76:
65:22:2a:ef:df:4c:81:3d:7f:f8:c0:fa:61:90:22:
0c:19:79:7c:e0:70:33:17:d9:4b:bf:52:7e:19:6c:
1b:0b:8e:08:9f:39:3e:a3:37:5d:09:14:f2:b4:dc:
d6:d8:76:65:b1:4e:b8:85:90:4e:83:a9:c7:bf:90:
2d:b1:00:eb:58:fd:ff:e3:21:57:2f:55:a1:0f:6f:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A5:54:60:6A:B3:0B:D1:4B:59:A4:DD:CB:E9:D7:5D:AF:78:AF:E0
X509v3 Authority Key Identifier:
keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/5D184494AFD811F0873CFA2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
185.81.70.160/29
Signature Algorithm: sha256WithRSAEncryption
17:ad:79:ba:81:e4:68:1e:17:25:b9:3d:7f:07:a7:c2:18:b9:
fe:21:7d:0d:eb:44:0e:29:2c:33:da:b7:03:48:9a:40:37:b9:
b7:22:81:b6:70:50:a1:7f:6e:0b:29:73:2d:1a:ef:e4:d0:4d:
fc:21:37:0a:9f:b0:cb:b5:f2:dc:1b:95:f3:cb:75:ef:85:76:
60:51:49:53:43:14:5a:b3:d4:6b:92:b2:17:9a:16:f6:39:2a:
cb:f5:66:c4:35:1b:0e:3b:eb:be:33:ea:3a:cd:6f:f5:5e:0f:
fe:78:07:88:36:38:7b:e0:9b:39:56:38:9f:f8:f2:f4:0f:21:
82:c0:cb:44:06:1d:2e:2c:75:47:4a:58:89:70:ad:e2:79:a6:
c2:21:a9:b4:1c:70:71:99:55:ca:cb:33:6f:df:ea:10:a2:3b:
f1:03:fd:8d:ee:8a:40:4e:fc:1e:59:0b:b8:a5:65:dd:c6:5a:
74:4c:9c:71:9f:95:bc:96:dc:38:e0:bb:36:67:d5:e4:a4:81:
92:80:c1:35:af:49:1b:57:13:21:8c:6e:75:c2:29:b0:e1:0d:
56:86:a4:92:20:28:fc:77:93:48:00:75:aa:6a:ed:b3:9c:85:
13:76:35:e5:95:a0:b6:7b:69:3a:70:b0:3f:a6:fc:58:fb:76:
a9:e3:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:40:05 2025 by rpki-client