
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/84FDF25A396711ED8AF52966C4F9AE02.roa
File: 84FDF25A396711ED8AF52966C4F9AE02.roa (raw, json)
Hash identifier: EUTRK8zTZimnCog0ijkhm9FDi0k0sx3nv6s5rDsc3FM=
Subject key identifier: 73:3B:CA:ED:E0:37:49:31:5D:10:82:64:3D:B6:45:80:DA:7E:33:2E
Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial: 07C1
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/84FDF25A396711ED8AF52966C4F9AE02.roa
Signing time: Tue 04 Nov 2025 21:40:45 +0000
ROA not before: Tue 04 Nov 2025 21:40:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24436
IP address blocks: 203.6.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1985 (0x7c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Validity
Not Before: Nov 4 21:40:45 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a72dd-5e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:21:41:8c:f8:7c:c0:0d:0a:52:74:8d:32:
98:f2:68:6d:0a:fd:82:c8:66:af:e7:90:3d:0c:44:
9d:e5:c7:eb:f2:4d:fe:16:6e:37:b3:f6:4c:78:59:
2a:1b:ff:98:36:bc:61:91:b2:d8:e1:bd:5a:0d:f8:
1c:35:d2:bd:d1:12:30:7b:bf:ff:4c:5d:b6:33:b8:
2d:6c:78:fd:53:ec:a9:fe:a9:63:b6:78:4d:33:b5:
48:ee:f9:34:c4:b6:88:dc:8d:de:f2:5c:60:15:e9:
30:f5:62:8e:68:28:71:c0:08:f7:8f:ab:33:6d:5f:
21:a5:f9:02:6e:fc:53:9f:b1:4c:85:40:51:46:60:
a7:18:d6:8b:b9:1f:89:d6:26:c1:cd:2b:7f:fe:5c:
a4:f7:14:3f:31:26:6c:16:c6:f5:2c:01:e0:d4:6e:
6e:d9:04:29:77:2a:6a:bd:16:84:15:ec:c2:62:d6:
bb:4e:bd:07:54:ad:d7:40:34:a1:e2:8f:78:58:ab:
04:b4:6b:7a:cc:81:c6:13:74:c8:4a:27:79:cd:b6:
7d:c7:09:e5:98:b7:35:60:32:20:12:77:48:71:47:
b6:92:a4:9b:70:0c:1d:e1:7e:52:ef:32:4b:74:ca:
f3:7c:e3:84:93:0d:bb:6d:d6:cd:aa:29:55:92:c0:
61:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3B:CA:ED:E0:37:49:31:5D:10:82:64:3D:B6:45:80:DA:7E:33:2E
X509v3 Authority Key Identifier:
keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/84FDF25A396711ED8AF52966C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.6.250.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fc:a6:f3:f8:88:df:5a:4e:7a:e2:3c:60:94:a3:7b:33:66:
b0:cd:a7:3b:5b:2d:ff:84:0c:42:91:ab:f6:22:f4:5d:37:1a:
db:12:1f:5f:d7:f6:20:60:44:a8:5e:86:99:e5:0b:e6:49:96:
3f:a5:b2:f5:7a:17:b2:13:9f:42:48:b3:c4:ef:c7:d0:75:46:
f0:51:92:3f:2e:82:eb:b2:43:30:de:da:be:37:77:80:09:8c:
38:ae:2c:3e:f9:b9:e4:60:c8:dd:7c:c7:94:57:41:09:7f:8a:
4b:4e:95:c9:ef:86:2c:e4:a7:59:b5:20:4c:98:b0:42:cf:2e:
2d:79:06:8b:f8:ca:31:6b:bb:27:ce:34:6d:46:d5:d6:b7:37:
c8:f4:2c:54:58:b0:07:53:6c:1f:67:c2:52:b7:9c:ab:8d:c2:
c7:90:8b:1e:07:e6:aa:fb:41:48:80:ab:75:25:32:87:05:50:
40:3a:88:ac:42:1d:d8:9e:91:bb:96:1b:57:19:32:d4:e4:09:
d4:83:b0:80:15:4a:e5:71:6a:86:34:ca:d7:ae:67:89:e3:3e:
86:b1:e3:6c:97:7d:f9:5d:f4:0f:74:ae:30:0f:72:db:a4:9a:
2a:73:05:e6:79:12:5d:ba:e5:e4:02:04:a8:ca:23:81:8a:17:
ad:d8:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:03:12 2025 by rpki-client