
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6B95D6A4739311EE8FDD5549C4F9AE02.roa
File: 6B95D6A4739311EE8FDD5549C4F9AE02.roa (raw, json)
Hash identifier: IyfqGEP+yJeBSIvB0K7+tpsiptQXQxTq9nFV+jeCCyk=
Subject key identifier: CB:C5:25:74:FE:12:BE:E7:BA:74:F2:6C:33:7F:18:33:AA:35:7A:30
Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial: 0250
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6B95D6A4739311EE8FDD5549C4F9AE02.roa
Signing time: Thu 05 Jun 2025 03:10:38 +0000
ROA not before: Thu 05 Jun 2025 03:10:38 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135983
IP address blocks: 125.62.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Validity
Not Before: Jun 5 03:10:38 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68410aad-9c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:c2:71:04:2b:54:ef:0c:b5:66:f7:48:2f:
eb:c6:bd:25:92:e4:bf:b1:0a:32:42:82:05:d9:55:
a6:d3:b1:5c:58:34:99:90:39:ce:f8:2d:de:d9:b3:
00:95:12:dc:56:90:9d:4c:c6:e4:a4:1e:60:e8:21:
fe:f1:71:52:89:24:9c:3b:1a:89:d4:06:d9:09:10:
45:0e:c8:2d:e6:53:0d:df:e5:1f:87:e5:7f:34:64:
73:72:7c:4c:81:dc:bd:d3:86:22:d2:c9:b0:4a:f9:
58:f6:fa:1d:a1:16:df:89:b4:8e:5f:c5:50:2f:e8:
16:80:70:fa:85:22:7d:c2:a7:71:5a:4c:89:09:8e:
e1:2b:80:e7:cb:fd:d2:28:78:dc:f5:7d:d8:f6:09:
22:7f:25:1e:7a:3d:61:8d:95:c9:32:31:c5:df:5d:
5e:e8:71:33:af:55:d5:74:a1:ed:48:bf:e6:69:a0:
5c:4b:1e:23:d0:ef:1d:f4:16:ef:90:05:b5:38:71:
db:4d:40:c4:8f:93:c4:f2:56:92:25:1b:b7:a8:0e:
4d:22:28:75:53:bb:35:3e:e1:75:5b:42:b9:db:a6:
ef:e2:9b:b5:6e:d7:f8:c3:ee:21:e3:4b:a6:30:64:
b9:94:59:b6:46:1b:40:eb:df:ba:07:f9:fa:66:b3:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C5:25:74:FE:12:BE:E7:BA:74:F2:6C:33:7F:18:33:AA:35:7A:30
X509v3 Authority Key Identifier:
keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/6B95D6A4739311EE8FDD5549C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.62.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:cd:9c:68:9f:69:58:ed:51:1c:47:1a:bf:a4:38:9c:f2:9a:
40:99:0a:b2:04:90:a0:33:a2:c6:9f:c6:83:d9:50:2b:40:48:
9f:eb:40:23:b5:40:1a:ba:a6:6b:99:f2:39:15:ab:21:97:96:
fe:35:02:54:77:ec:2f:43:c0:33:52:bd:fa:52:21:0b:bd:34:
38:3e:3c:e0:bb:88:cd:78:32:65:e1:ec:e9:c7:f5:06:c2:ae:
b2:fd:26:fa:d5:11:cc:9f:f8:5b:99:af:b9:e6:63:51:ee:c4:
2b:0a:bb:aa:8f:fd:d9:d3:e8:a0:cc:2b:49:c3:08:46:b6:e9:
89:08:41:2b:c0:16:af:13:21:41:16:b8:18:b7:5e:2c:8e:14:
56:f2:64:b4:4d:bb:62:e9:7b:2c:f6:65:ca:a9:cb:32:b9:97:
aa:85:8e:cd:6a:52:74:db:1a:4c:2e:b0:c3:c3:d5:8c:8f:46:
dd:eb:eb:b9:d9:65:ad:54:ee:95:d4:b7:58:0a:9d:5c:06:88:
f1:6d:1e:a5:a0:26:f6:cd:b5:75:6b:a4:56:bd:b6:99:8d:4e:
5c:78:6e:1f:a6:1e:8a:23:09:af:f5:c4:f2:6b:52:b1:51:f8:
61:b3:46:2d:44:af:f6:82:f5:a6:d8:6a:82:31:08:fb:e3:18:
4c:38:2a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:28:10 2025 by rpki-client