
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B6193EAEA9C511F09E184A44C4F9AE02.roa
File: B6193EAEA9C511F09E184A44C4F9AE02.roa (raw, json)
Hash identifier: dxODIUi2Hl5PKyoAHvL00XDmUpx53ZlUVr8zHJ83HOY=
Subject key identifier: 9F:C6:FC:F8:F3:51:C5:2E:61:28:13:CF:1E:E4:40:FD:5E:E5:2A:DF
Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Certificate serial: 2287
Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B6193EAEA9C511F09E184A44C4F9AE02.roa
Signing time: Sun 02 Nov 2025 16:03:25 +0000
ROA not before: Sun 02 Nov 2025 16:03:25 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 834
IP address blocks: 180.210.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:58:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8839 (0x2287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6
Validity
Not Before: Nov 2 16:03:25 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690780cd-0b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2b:1b:1f:67:f5:c6:19:6a:03:95:2d:85:ed:
0d:4f:f1:69:74:60:62:46:c2:97:91:bc:c5:14:52:
23:56:12:d5:b8:67:bd:ec:0c:07:e1:54:b6:d7:e8:
81:ee:22:91:fc:6d:c5:b8:9a:48:66:ec:dd:5e:6d:
24:cc:1b:6d:18:3a:45:5e:67:1d:19:aa:ef:d3:c1:
19:4e:c4:74:42:e6:12:b0:1f:05:8c:aa:58:75:1f:
3d:7f:f9:c2:dc:b6:0e:6c:79:ef:e5:db:20:5f:61:
aa:46:03:a1:79:b7:e6:e6:cb:eb:9a:e3:cf:20:31:
0f:98:41:56:00:2e:a6:90:6b:f9:ab:b8:73:05:ea:
9b:ba:45:2d:41:b3:eb:75:a7:74:00:11:01:09:eb:
54:fa:c3:6e:9c:16:7c:74:f2:3a:36:ba:13:9a:b6:
c8:3f:fb:8e:8b:7a:4e:49:60:06:c7:8c:c4:81:8f:
b5:53:bd:b2:d1:dd:4e:92:ec:36:23:40:d5:39:76:
41:55:99:5f:06:ab:8e:2d:e2:e4:ca:05:2d:b7:b4:
9d:21:9b:59:9f:31:93:e9:dd:0e:55:e4:83:0c:71:
f9:42:19:c1:2e:15:4e:30:3b:45:06:5f:d0:b0:df:
e9:c5:87:1e:5f:3e:25:96:e3:63:e4:ed:ac:11:c3:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C6:FC:F8:F3:51:C5:2E:61:28:13:CF:1E:E4:40:FD:5E:E5:2A:DF
X509v3 Authority Key Identifier:
keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B6193EAEA9C511F09E184A44C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.210.222.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bc:74:14:90:a6:23:82:33:58:f4:65:91:8b:94:b8:a3:e3:
5e:2a:b5:b1:7c:1f:5c:e4:93:02:0a:df:2b:73:b9:be:a5:2f:
e8:c5:fb:49:a6:41:1f:9c:6e:7a:a9:96:f5:23:ab:f4:c5:1d:
a6:f4:b7:e2:22:65:c4:0e:22:29:ef:e3:80:84:ef:06:92:74:
30:c9:fe:18:74:36:54:b4:83:c2:61:b8:7a:0d:49:76:a3:b9:
fb:98:75:17:57:9d:62:bc:8f:71:6d:cf:c9:5d:6a:65:67:06:
15:e2:ba:c4:6d:90:00:f5:09:d6:f7:c6:a5:b7:32:c1:5c:5f:
9a:c8:ee:15:3a:ed:18:db:4f:e2:25:84:51:ac:11:4d:55:5c:
dc:3d:3b:d0:73:59:90:de:55:19:d5:a6:5f:2d:24:6a:30:96:
f2:16:75:ac:d3:f9:64:54:60:c9:b7:83:a7:9b:b2:33:e2:fa:
b6:dd:c4:44:2b:a1:37:fc:55:2b:5a:85:89:60:94:43:6a:63:
46:4f:8a:71:c8:f5:8a:3b:8e:c7:85:50:19:51:f4:f9:c3:e0:
94:c4:5f:e7:df:a8:b5:fc:59:85:4d:2c:be:c6:e8:e1:3f:e8:
38:96:2e:9d:59:0b:1e:a9:9c:a7:af:2f:1a:f4:4e:50:5a:19:
9a:15:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:12 2025 by rpki-client