
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
File: 1767CE4A93C711EDB3D8A867C4F9AE02.roa (raw, json)
Hash identifier: MXR9v07MaUgaUp2EpRPUYi0YWE/byXOzVwu5NXbaWsg=
Subject key identifier: 92:90:66:10:33:FE:C3:41:AC:67:24:5E:AC:E3:BF:36:54:D7:09:18
Certificate issuer: /CN=A91E0EF8/serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Certificate serial: 05DC
Authority key identifier: A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
Signing time: Thu 10 Jul 2025 23:35:26 +0000
ROA not before: Thu 10 Jul 2025 23:35:26 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 29473
IP address blocks: 2001:df6:cd80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0EF8, serialNumber=A04E743AD31F4F83F09DC5D2F7EF4FABE1EF687B
Validity
Not Before: Jul 10 23:35:26 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68704e3d-271f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:14:35:fd:20:41:5c:72:80:e5:e6:a0:62:
3c:6f:61:37:87:64:46:2d:e4:c6:97:38:da:91:4d:
0e:65:14:52:98:e8:9c:e3:b3:cd:67:8c:97:db:ee:
19:97:2a:ed:b0:6d:35:64:72:22:bd:35:11:c2:64:
56:40:5c:8f:c9:6b:7f:58:22:49:fa:80:f5:2e:9b:
a2:b3:0a:a2:17:b2:1c:f6:c4:a5:35:87:4d:de:93:
97:43:32:07:71:d0:c7:15:96:af:27:54:4e:1c:ee:
5b:ed:4b:2b:53:71:8c:a5:c2:68:d0:4c:cd:2f:21:
91:26:b6:87:1c:ad:9b:85:87:ec:e7:aa:64:2a:36:
0f:08:d4:6a:ae:0b:6c:15:6e:b9:9b:31:a5:0d:84:
54:1d:6a:45:63:b2:ca:4b:13:80:e0:6a:af:15:c1:
27:a4:b3:ae:61:80:1a:36:7f:58:32:f4:1d:14:7c:
3f:b1:45:0d:97:60:a9:7e:5e:9e:bf:97:eb:6c:d1:
d4:f4:54:b9:d8:dc:86:c5:88:33:f0:b9:ad:35:6a:
cd:9c:10:5b:37:d3:29:db:fa:b7:e3:e1:e3:cc:85:
d8:db:b0:a2:05:35:d3:f5:ca:5c:35:46:93:be:37:
37:26:e3:df:83:a3:99:6c:0c:e9:0a:9c:99:3d:57:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:66:10:33:FE:C3:41:AC:67:24:5E:AC:E3:BF:36:54:D7:09:18
X509v3 Authority Key Identifier:
keyid:A0:4E:74:3A:D3:1F:4F:83:F0:9D:C5:D2:F7:EF:4F:AB:E1:EF:68:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/oE50OtMfT4PwncXS9-9Pq-HvaHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oE50OtMfT4PwncXS9-9Pq-HvaHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0EF8/C938D106CB5411EBA3D36C5BC4F9AE02/1767CE4A93C711EDB3D8A867C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:df6:cd80::/48
Signature Algorithm: sha256WithRSAEncryption
36:12:31:a7:e1:3d:a8:7c:da:ca:d3:ec:81:d9:5f:ec:9f:43:
52:c7:cf:d5:32:3f:b8:93:70:89:a4:1d:64:dd:78:c2:9c:46:
10:71:26:53:77:97:a0:18:10:7c:56:f8:44:7c:b3:d6:4c:08:
3b:70:bf:29:cc:7b:77:0f:a8:db:04:b4:b0:6d:34:8d:bc:82:
0a:39:75:2e:5c:db:1c:69:d9:cb:fa:e6:63:9a:e0:7d:50:e3:
9b:9c:46:87:cc:f8:cf:a2:1a:70:fc:4a:ea:1c:7c:d4:83:b2:
dc:ff:43:ff:dd:ec:03:f6:44:e1:e6:4b:74:a9:64:2f:83:8d:
57:f0:09:72:8b:52:1e:92:c7:e9:e2:5e:be:fe:a7:31:08:d8:
09:20:2a:91:10:3a:6b:38:72:92:a2:31:97:96:3e:36:07:c9:
73:c6:94:7b:ed:8d:c7:7c:c0:9e:b0:30:8d:b2:b7:18:0d:5a:
0a:f4:b3:6a:f9:db:2f:56:aa:5a:6e:d5:a9:55:d1:fd:c3:4c:
c2:ab:db:16:08:3f:3b:ee:a0:0e:53:d6:4e:37:0a:d8:53:e8:
bc:88:be:ea:3b:09:57:59:03:4e:6f:1b:5c:b8:44:24:f3:a0:
fc:35:e5:93:1e:a0:58:b3:c9:ad:2c:13:f1:ac:26:8d:28:d3:
2f:c8:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:10:50 2025 by rpki-client