
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
File: 1484B210B52A11F0ADCFA344C4F9AE02.roa (raw, json)
Hash identifier: Yc09XwGEfCqS6vy80bJm6PuDshmb9p3zGiyEjL1dHRA=
Subject key identifier: 9D:69:84:EB:71:B3:1D:86:57:6D:66:A8:A4:97:6D:BA:67:FA:37:E4
Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Certificate serial: 0140
Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
Signing time: Thu 30 Oct 2025 00:49:36 +0000
ROA not before: Thu 30 Oct 2025 00:49:36 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 154324
IP address blocks: 202.47.134.0/24 maxlen: 24
202.47.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:40:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1
Validity
Not Before: Oct 30 00:49:36 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6902b620-f371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:75:c2:d7:5a:a0:0b:66:97:3f:f1:e4:10:
67:94:c6:b2:52:e5:a6:9e:f7:18:25:e2:4e:60:c6:
71:b1:89:2b:25:ed:f7:99:d4:bb:63:41:42:d8:1a:
0e:0b:10:7e:98:59:b5:dd:16:ab:37:ee:1e:b6:e3:
c6:05:da:36:e0:16:d1:90:22:c1:3a:ef:cb:82:ee:
f7:14:b3:ea:2f:6f:01:42:c9:fc:90:37:5e:d4:37:
14:b5:e5:90:bd:c7:5f:a9:aa:8b:0e:0b:c1:d3:49:
1d:1d:ff:ae:b3:7a:37:34:d6:4d:5f:8b:a6:68:2f:
c6:d8:27:5c:0e:fd:a5:8d:24:2c:6e:78:cc:48:03:
5b:be:72:fc:af:a8:ba:7b:10:5c:12:fe:11:b1:07:
ee:1c:1c:96:c9:9d:6a:65:d0:2e:01:81:7c:65:fc:
a3:11:ef:76:a3:d3:f9:83:a4:59:57:d0:a9:40:aa:
a3:76:20:18:ab:d9:4d:bc:82:a1:77:44:31:6f:18:
31:6a:f0:40:87:21:68:fa:98:6c:07:01:65:5f:db:
a1:47:7a:8a:87:14:f4:7f:88:4c:49:12:23:b5:a5:
a2:93:b9:a2:12:ca:96:c8:9c:e7:20:1f:c9:b8:1e:
32:a6:89:6c:d7:79:79:cb:2f:e7:70:dc:d5:4e:67:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:69:84:EB:71:B3:1D:86:57:6D:66:A8:A4:97:6D:BA:67:FA:37:E4
X509v3 Authority Key Identifier:
keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/1484B210B52A11F0ADCFA344C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.47.134.0/23
Signature Algorithm: sha256WithRSAEncryption
28:12:f3:f8:f6:ec:de:22:29:ad:1c:87:c0:03:4c:84:f4:1a:
02:d1:94:9f:dd:f4:10:e2:3e:e6:bf:df:5e:1b:53:05:8d:5a:
4c:da:71:0f:aa:36:ea:6f:5b:75:f9:93:b9:f9:e2:b1:5a:e7:
f1:a7:8a:1d:8e:7e:50:09:0a:87:03:7b:2b:a4:be:b8:8d:49:
5a:d1:ca:73:d5:9a:74:c3:f7:cc:7c:15:c9:b0:d7:aa:79:66:
4c:1f:d8:e0:68:b0:53:88:bf:6a:0c:5f:da:16:ce:d1:8a:f4:
52:c9:f2:71:77:70:de:5a:44:ab:29:73:02:0d:6b:2c:0a:83:
77:cc:4b:86:50:fc:ab:15:13:58:b6:a0:f3:ab:b1:9c:1e:5d:
b2:cb:ba:91:b6:44:23:78:c1:65:c7:5a:ed:7f:6e:5e:65:e3:
54:c5:0e:a8:0d:d2:c3:a6:81:27:40:b4:27:35:bd:58:f9:ce:
73:6f:6d:87:f5:a6:bf:0f:86:1b:97:c4:fa:9c:b9:70:5e:b7:
26:a7:6c:b0:6a:51:82:79:e1:7a:30:ee:cf:08:7f:f0:67:da:
7f:e0:86:f0:5e:41:9f:96:c0:9f:3a:91:8a:c1:0a:7c:8a:81:
20:44:5f:08:c3:5f:86:c7:f2:e3:a2:6a:a7:1d:ec:49:97:82:
9d:83:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:39:26 2025 by rpki-client