
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
File: DF6D4464818211F097447962C4F9AE02.roa (raw, json)
Hash identifier: uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=
Subject key identifier: E0:25:51:79:74:19:7B:87:07:F0:3B:44:AE:40:0E:3F:1F:39:2F:4A
Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial: CD
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
Signing time: Sun 07 Sep 2025 06:42:50 +0000
ROA not before: Sun 07 Sep 2025 06:42:50 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137910
IP address blocks: 160.30.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 05:29:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Validity
Not Before: Sep 7 06:42:50 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68bd296a-52da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:44:b9:72:9b:49:7e:97:93:6e:cf:21:e6:
01:46:24:91:ae:dc:05:0a:5a:27:06:3d:af:fd:f5:
8a:83:94:44:83:14:d0:e1:e5:18:e3:e3:3b:7b:57:
e9:7d:a0:0c:5e:f0:a5:30:b2:3c:38:65:65:9f:80:
d3:1e:9a:6a:cc:dc:06:e4:69:df:9a:7c:6a:46:1d:
36:48:df:e1:c0:ee:31:53:0d:3d:05:16:88:2d:d6:
de:87:72:c2:4e:b1:d6:74:f2:33:90:7b:67:bb:b5:
59:8c:16:7c:28:db:94:03:c5:83:0d:29:a4:68:ae:
cb:70:e1:c5:30:c5:52:3c:79:2f:5a:d6:b0:27:66:
6b:be:97:7c:24:c5:ca:ea:54:b8:1f:a0:f5:ae:ce:
0a:43:e5:94:79:d2:1a:11:60:6f:ab:41:f7:06:9e:
f4:df:3c:e3:65:cf:79:43:3a:d6:6f:1e:bd:93:f9:
a1:47:e4:a8:e9:58:0b:e4:ef:b5:c0:3a:8b:47:8d:
1f:a5:3f:06:53:b6:fa:f3:2c:2c:21:0a:09:9f:57:
f9:a4:05:b2:c0:78:30:91:56:74:f8:34:db:ce:86:
f9:23:df:ba:01:3b:63:83:06:0e:91:e4:bd:d6:c7:
94:3e:5c:19:ab:91:6b:52:87:8f:a2:ab:64:c4:cb:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:51:79:74:19:7B:87:07:F0:3B:44:AE:40:0E:3F:1F:39:2F:4A
X509v3 Authority Key Identifier:
keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c9:ba:f0:f3:d6:13:35:1d:23:78:57:8b:a0:2a:f0:82:1e:
14:85:23:12:d6:3e:5e:03:fa:76:33:d2:e8:93:fb:ec:63:d9:
1b:23:05:02:75:fb:11:1e:34:76:74:af:92:b3:96:21:85:47:
be:96:70:52:45:0b:0d:f6:56:d8:4d:0f:4b:56:a6:66:bb:d3:
59:f3:57:3b:3c:ba:98:fe:dc:c3:4e:d8:75:a9:79:5d:2a:d6:
7e:e7:f8:d4:5f:08:60:40:57:e5:df:b1:bb:36:c0:40:ca:5d:
23:47:91:eb:d0:b6:bc:79:35:d9:a0:a1:17:a5:d7:08:bb:37:
0b:f8:30:f9:c9:c9:b5:11:09:e8:9d:25:b1:74:b6:0f:8b:46:
2d:bf:8d:13:3e:6b:23:18:af:2d:df:28:df:09:45:6c:f2:88:
96:aa:77:cd:f6:b5:76:e6:e7:54:22:fe:49:e2:21:d2:56:e5:
8a:e8:d2:26:74:86:ef:4e:9f:91:ed:28:f7:fe:ce:3c:b8:99:
ab:c4:79:81:1d:76:1b:2e:fb:77:56:a5:cb:cf:05:5e:27:9e:
2f:14:13:c4:a3:29:4f:b8:53:76:2c:68:37:53:58:fe:fe:05:
fb:ff:51:9f:1f:8e:9a:bc:f2:d3:5d:43:bd:73:41:4a:20:0a:
18:9f:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:06:33 2025 by rpki-client