
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
File: 00E626A4A57611EF98285E5FC4F9AE02.roa (raw, json)
Hash identifier: 08NPSGEr7+x4MzDThoj8ZzRXxZk450XlydgirrF3WE4=
Subject key identifier: FE:D5:C3:D5:CE:DD:0E:8B:91:1E:6A:27:73:4F:9F:35:98:55:6D:11
Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial: 019B
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
Signing time: Wed 13 Aug 2025 04:42:12 +0000
ROA not before: Wed 13 Aug 2025 04:42:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 209242
IP address blocks: 203.6.66.0/24 maxlen: 24
203.6.68.0/24 maxlen: 24
203.6.69.0/24 maxlen: 24
203.6.74.0/24 maxlen: 24
203.6.76.0/24 maxlen: 24
203.6.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Validity
Not Before: Aug 13 04:42:12 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=689c17a4-f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:93:4f:34:f9:e4:a2:bf:c4:c4:63:c2:41:
11:7a:f6:6c:f6:75:86:62:89:d0:78:08:b4:10:27:
c8:8a:5c:48:9b:39:30:bc:68:18:cd:8e:c1:5c:68:
f5:f2:fa:aa:59:d5:0d:32:df:8b:9f:85:95:62:7f:
55:d4:2f:0a:ef:1c:e3:42:53:f7:f7:77:88:eb:b2:
d9:63:02:4c:40:42:86:59:33:23:94:e6:d4:15:10:
a9:95:07:43:84:c0:f1:bf:1d:17:83:a9:a9:c8:a3:
43:3b:fe:c5:d0:11:3e:37:3f:0e:a1:ce:f0:2a:68:
7e:05:06:50:d2:54:13:37:60:2a:36:3b:8a:6d:28:
00:4e:65:36:f4:6b:e9:32:73:3c:05:28:58:6c:4d:
3d:77:74:df:da:4c:d8:da:e0:c2:5b:97:9f:31:c3:
b3:c1:a4:1e:56:8b:88:4a:4b:df:43:41:2a:3d:71:
55:b3:64:36:cf:90:2c:aa:06:d7:17:ef:78:5c:14:
33:c6:e8:09:76:53:a2:65:33:96:62:7e:e6:d2:73:
f3:a9:78:55:9b:51:71:a9:d3:9d:da:35:2d:4b:7c:
95:10:c4:15:76:d6:48:3f:bc:40:16:55:9f:c2:88:
5f:c2:1f:bf:48:83:19:e4:b2:4c:2b:a4:48:22:f2:
a8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:C3:D5:CE:DD:0E:8B:91:1E:6A:27:73:4F:9F:35:98:55:6D:11
X509v3 Authority Key Identifier:
keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/00E626A4A57611EF98285E5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.66.0/24
203.6.68.0/23
203.6.74.0/24
203.6.76.0/23
Signature Algorithm: sha256WithRSAEncryption
62:1a:d4:2b:ca:15:bf:0e:e3:95:53:30:e3:c0:16:9c:8e:ea:
b8:9f:a2:25:2f:1b:91:34:19:ad:4c:b2:11:f6:cd:89:5b:46:
42:20:9e:49:4f:12:dd:7b:23:65:00:77:65:52:ec:75:1e:1d:
4a:75:4d:c4:fc:fb:d1:00:0f:bb:5b:f6:be:a2:f8:c9:1a:b4:
7f:28:d1:0f:f8:82:31:73:29:7c:40:dd:85:a3:49:0a:83:e2:
78:7b:53:66:fa:3b:aa:bf:b9:1c:2f:e8:22:30:28:8c:17:92:
6e:92:65:a2:2b:15:7a:cb:8e:00:47:89:1e:08:5f:42:21:2c:
f4:e7:55:d7:27:94:c5:c8:42:d3:42:96:81:8a:ee:33:91:76:
c7:c7:ff:c4:0a:fc:98:05:98:4e:74:39:bd:26:5b:75:14:85:
07:c2:93:ea:e5:67:61:1f:20:67:89:77:ff:1f:cf:63:ad:50:
ca:ee:25:c6:90:62:f7:b0:65:18:f7:3d:c3:8d:13:fb:17:77:
ce:d1:7c:3a:be:d2:f3:d2:e3:51:e9:80:d4:91:f5:88:c6:ec:
2e:6d:73:f3:a9:c0:a2:74:cc:9f:8e:8d:26:57:26:09:3d:ed:
15:1e:5b:ac:05:1d:50:16:a2:f1:91:78:ce:62:ce:47:6a:6c:
bc:05:9b:84
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz
RjQ5Q0UyOUEwHhcNMjUwODEzMDQ0MjEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODljMTdhNC1mMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkaTTzT55KK/xMRjwkERevZs9nWGYonQeAi0ECfIilxImzkwvGgYzY7BXGj1
8vqqWdUNMt+Ln4WVYn9V1C8K7xzjQlP393eI67LZYwJMQEKGWTMjlObUFRCplQdD
hMDxvx0Xg6mpyKNDO/7F0BE+Nz8Ooc7wKmh+BQZQ0lQTN2AqNjuKbSgATmU29Gvp
MnM8BShYbE09d3Tf2kzY2uDCW5efMcOzwaQeVouISkvfQ0EqPXFVs2Q2z5AsqgbX
F+94XBQzxugJdlOiZTOWYn7m0nPzqXhVm1FxqdOd2jUtS3yVEMQVdtZIP7xAFlWf
wohfwh+/SIMZ5LJMK6RIIvKoFwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFP7Vw9XO
3Q6LkR5qJ3NPnzWYVW0RMB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz
NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvMDBFNjI2QTRB
NTc2MTFFRjk4Mjg1RTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBADLBkIDBAHLBkQDBADLBkoDBAHLBkwwDQYJKoZIhvcNAQEL
BQADggEBAGIa1CvKFb8O45VTMOPAFpyO6rifoiUvG5E0Ga1MshH2zYlbRkIgnklP
Et17I2UAd2VS7HUeHUp1TcT8+9EAD7tb9r6i+MkatH8o0Q/4gjFzKXxA3YWjSQqD
4nh7U2b6O6q/uRwv6CIwKIwXkm6SZaIrFXrLjgBHiR4IX0IhLPTnVdcnlMXIQtNC
loGK7jORdsfH/8QK/JgFmE50Ob0mW3UUhQfCk+rlZ2EfIGeJd/8fz2OtUMruJcaQ
YvewZRj3PcONE/sXd87RfDq+0vPS41HpgNSR9YjG7C5tc/OpwKJ0zJ+OjSZXJgk9
7RUeW6wFHVAWovGReM5izkdqbLwFm4Q=
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:16:33 2025 by rpki-client