
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/9772767EB69A11EFBEB6CE0CC4F9AE02.roa
File: 9772767EB69A11EFBEB6CE0CC4F9AE02.roa (raw, json)
Hash identifier: 7OwaJrudjWnecoz7BCK7kPXjzB+3R7tWJ8DmqplI2rk=
Subject key identifier: 61:11:67:80:F6:5B:7E:5F:E4:EB:B0:E6:88:0B:C4:08:B1:23:E0:FA
Certificate issuer: /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial: 01B5
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/9772767EB69A11EFBEB6CE0CC4F9AE02.roa
Signing time: Thu 05 Jun 2025 03:11:17 +0000
ROA not before: Thu 05 Jun 2025 03:11:17 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 54994
IP address blocks: 2403:1cc0:1005::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Validity
Not Before: Jun 5 03:11:17 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68410ad5-578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:45:58:0b:8f:06:3c:42:84:92:5b:38:c9:
42:b5:26:64:38:c2:5f:45:d5:d3:57:2e:3a:13:bf:
01:ac:d6:f1:85:3f:60:05:76:ca:14:b0:4a:bd:e7:
19:21:f4:e1:c4:78:6d:b9:10:65:d8:a8:0f:fd:5d:
76:a4:07:70:a7:da:d4:c7:de:67:19:75:d6:60:cf:
31:3c:92:50:ef:c3:61:7f:17:30:f8:e5:64:46:d2:
c8:e6:7b:8f:1e:96:9e:ea:3b:53:89:3a:77:bb:b6:
43:19:2a:dc:7b:2e:ca:ed:e3:6c:a2:46:4b:5e:f7:
44:f9:38:87:96:db:a0:a8:1c:04:98:0e:56:41:68:
ad:ac:e7:8b:bf:36:2e:cc:8e:0c:c6:67:2d:a2:a1:
36:73:ff:e3:b5:42:4b:fa:f9:04:e9:5b:b9:27:dd:
9b:4d:7f:96:85:6f:e2:30:3f:b6:78:ab:98:c8:bd:
19:36:96:ac:4e:cd:7d:ea:e7:09:b6:74:20:0e:78:
a7:67:85:bf:bd:be:17:77:cd:d3:58:42:cc:c9:e0:
ed:75:e9:f1:00:26:ac:b8:08:32:d6:45:e1:f5:f0:
db:05:c8:19:9d:99:ab:91:80:31:47:af:ec:d8:26:
b1:cd:1b:0f:fc:ae:b6:dd:57:90:a2:30:d5:f8:26:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:11:67:80:F6:5B:7E:5F:E4:EB:B0:E6:88:0B:C4:08:B1:23:E0:FA
X509v3 Authority Key Identifier:
keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/9772767EB69A11EFBEB6CE0CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:1cc0:1005::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d2:60:84:25:b4:c2:d1:d9:af:5f:98:46:be:11:a9:bf:e8:
8c:71:21:da:39:4a:be:fc:8a:cd:aa:9b:cf:47:a3:39:7a:8d:
99:ad:3b:3d:6f:81:ea:32:34:d4:e1:ba:a4:0b:15:19:b3:c7:
3c:2b:e6:a0:b2:37:1d:62:20:9c:1b:05:4d:1a:47:68:03:cf:
44:24:09:c0:07:53:dd:83:85:39:5d:fb:55:f6:59:fe:9f:2d:
84:10:d8:36:0b:7d:db:42:aa:fc:e9:e4:e8:c4:7a:79:ec:62:
20:b3:bc:58:bf:0e:ca:dc:5f:94:5d:b5:36:69:82:2d:c5:76:
49:b9:20:ad:b1:17:c5:8b:28:6a:31:d1:50:01:0c:b2:14:8f:
dc:f9:0d:c2:8e:33:93:c3:3b:ba:a1:ed:93:27:cb:a9:ce:08:
a8:bc:cc:bc:c7:f3:fd:50:b2:69:e5:41:20:68:9d:86:96:e3:
52:d2:fe:aa:59:8a:da:06:5b:36:db:6d:09:4f:c0:9c:32:a2:
30:fb:95:e0:b6:a3:5e:bc:4e:5e:c2:61:95:4f:88:9a:23:d1:
3b:a2:f0:22:5a:02:cf:2a:01:35:44:ef:62:98:f3:03:e4:ed:
3a:92:59:79:b3:d6:97:4a:4f:a4:6d:68:7e:eb:00:6d:b6:89:
e7:11:80:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:02 2025 by rpki-client