
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/BAEB4B28FBDF11EA8B73595BC4F9AE02.roa
File: BAEB4B28FBDF11EA8B73595BC4F9AE02.roa (raw, json)
Hash identifier: ifnttSikDir1yImvAFVipioa7skYYnhRDTcV+wTBhrA=
Subject key identifier: 78:B9:BD:17:52:31:A5:7A:55:5B:48:F4:DF:51:84:A2:9F:49:82:55
Certificate issuer: /CN=A91E96D9/serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Certificate serial: 08A4
Authority key identifier: 21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/BAEB4B28FBDF11EA8B73595BC4F9AE02.roa
Signing time: Wed 22 Oct 2025 21:39:54 +0000
ROA not before: Wed 22 Oct 2025 21:39:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9387
IP address blocks: 116.0.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2212 (0x8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E96D9, serialNumber=219EA63C6AC966DDB285886BD711C78A14DF512B
Validity
Not Before: Oct 22 21:39:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f94f2a-549a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:01:8b:88:e7:46:73:a2:da:2b:df:bb:62:
b5:b7:b2:ce:cd:e6:97:2a:2e:ec:03:7b:3f:d8:41:
16:f3:32:29:c1:31:27:6a:f2:08:8a:a0:be:b5:35:
4e:1a:aa:04:8e:4c:34:a7:d8:fe:29:cc:c7:73:9b:
1d:37:37:69:4d:03:bb:f3:7a:06:12:f0:70:a8:94:
88:bc:12:d9:c7:b0:63:b6:6e:c9:5e:4e:65:56:91:
21:8f:49:0b:51:7a:68:a8:e9:2a:1d:e6:82:ef:82:
a6:f9:16:c7:59:66:ee:d5:f9:18:dd:75:46:98:38:
67:c7:c8:43:32:a6:51:82:5e:a2:2e:b3:68:37:17:
2c:a0:fd:bf:26:4c:0d:0e:57:56:58:32:1d:29:6c:
58:88:db:07:a5:4d:17:f1:ba:ff:52:e5:8a:be:46:
94:20:2c:dd:bd:6f:6b:3d:9c:ae:29:6a:6e:4d:23:
bf:de:15:3a:2a:52:79:b0:de:41:43:0a:d5:c3:00:
e7:66:ea:3e:ab:03:cd:75:23:c1:67:cc:54:cd:1a:
bd:bb:cb:05:54:19:bb:fc:13:0c:ab:29:aa:5f:44:
31:b4:b6:1d:7d:45:7a:38:11:7e:04:3d:27:9e:e4:
cf:2b:9c:e7:d6:1b:4f:cd:ed:36:f9:62:fa:53:6f:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:BD:17:52:31:A5:7A:55:5B:48:F4:DF:51:84:A2:9F:49:82:55
X509v3 Authority Key Identifier:
keyid:21:9E:A6:3C:6A:C9:66:DD:B2:85:88:6B:D7:11:C7:8A:14:DF:51:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/IZ6mPGrJZt2yhYhr1xHHihTfUSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IZ6mPGrJZt2yhYhr1xHHihTfUSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96D9/80DFDEC0E5DD11EAB2468D65C4F9AE02/BAEB4B28FBDF11EA8B73595BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.0.60.0/24
Signature Algorithm: sha256WithRSAEncryption
60:eb:03:00:da:57:d5:94:1b:52:6b:47:1a:85:c9:63:98:d3:
b2:28:53:59:f4:8b:31:9c:b7:ab:3d:2f:59:e4:76:a0:da:b5:
0c:0a:20:a5:0d:85:96:bf:c6:e3:74:32:36:b5:b5:68:e6:a4:
e4:d4:9d:cf:bd:a4:dd:a1:25:f0:c1:a7:65:16:ce:e2:cd:e4:
3a:ae:b0:c3:6e:ba:6f:e4:d4:3d:e9:4e:40:6f:31:57:fe:11:
45:92:6d:b0:07:bd:44:d6:72:40:a5:98:65:f8:dd:a2:d6:a8:
96:5c:79:75:27:1f:fc:de:cf:e0:c7:a4:3c:41:fc:18:89:2b:
ad:d2:df:be:ec:cd:4c:95:54:d5:a9:fb:e4:70:20:98:ca:b3:
ef:58:ca:36:e2:cb:81:37:52:95:07:f4:c4:8c:87:f8:a5:a0:
f7:ba:f1:25:84:1c:47:f4:e7:b5:cd:b9:99:82:9d:24:31:85:
90:5a:25:da:8c:a2:c5:de:94:e9:44:1a:9a:54:b3:9b:41:fc:
e2:18:1d:51:e6:bc:08:62:e9:70:fa:64:cb:0b:56:03:30:79:
13:01:fc:53:df:83:3b:e0:4f:21:ce:93:53:a8:c6:63:48:a7:
1a:84:43:a2:95:aa:65:41:d1:47:26:d7:7e:e2:97:2c:39:8c:
71:a0:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:51:54 2025 by rpki-client