
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
File: F00A66308A9C11EB9B2E044BC4F9AE02.roa (raw, json)
Hash identifier: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=
Subject key identifier: 1F:FF:C2:93:58:BE:EB:86:D9:D5:D2:D8:6B:52:90:E6:D5:5A:4E:8B
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 0696
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
Signing time: Thu 24 Jul 2025 23:03:39 +0000
ROA not before: Thu 24 Jul 2025 23:03:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 7575
IP address blocks: 155.205.200.0/24 maxlen: 24
155.205.208.0/24 maxlen: 24
155.205.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1686 (0x696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Jul 24 23:03:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6882bbcb-c557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:75:fc:83:82:84:cc:26:44:b8:8b:9f:d8:
5d:61:8c:46:9b:34:0b:84:39:48:cf:f3:8b:6d:ad:
c1:54:9a:bf:39:eb:b8:21:9a:8a:0f:29:78:3d:82:
e9:ce:50:6e:7e:6c:88:e2:a0:38:50:e1:8e:0a:ff:
7c:7e:f2:32:a4:21:bd:0a:9d:20:08:c5:eb:92:b5:
fd:0c:e7:b6:61:55:e5:28:9b:89:d1:d3:79:c5:c9:
c3:c5:9f:ec:00:2b:95:26:6f:08:f3:aa:33:b3:9a:
5f:63:27:f1:1a:4b:79:55:f0:03:44:63:2a:31:81:
eb:85:93:7f:5b:80:9f:93:09:97:c3:e6:b2:11:aa:
a3:35:96:e1:b9:e1:a2:70:89:16:a8:d2:18:72:3f:
12:95:70:08:67:e0:54:f5:cd:e9:a4:31:50:7c:0e:
d8:fd:05:56:9c:4a:12:18:90:ef:1d:3d:b3:34:b9:
8d:32:82:3e:68:ed:a9:bd:28:50:a1:04:06:6c:4e:
2d:44:e2:f3:6a:88:1f:c6:54:d4:4b:5f:f1:29:3e:
3e:d5:40:5f:32:cb:a4:6f:e5:52:ea:8e:88:f4:13:
ea:6a:0c:a8:6e:7b:0c:e1:f1:a4:83:e1:b6:2f:5f:
6c:9d:8f:b7:45:d4:aa:1c:b8:75:fe:85:a3:61:da:
20:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:C2:93:58:BE:EB:86:D9:D5:D2:D8:6B:52:90:E6:D5:5A:4E:8B
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
155.205.200.0/24
155.205.208.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:59:c5:b8:01:8a:03:d9:b8:50:be:17:88:d5:41:3d:18:cb:
61:fc:2a:d3:4b:58:4c:71:b0:9d:e4:73:5b:4c:f7:a5:e7:24:
91:1a:b1:0b:84:f7:9a:26:42:3c:1c:81:24:dd:51:a4:2f:2a:
da:b8:b4:4f:4f:cd:3d:f4:72:2d:42:f5:fc:09:a0:d2:46:15:
e6:05:fb:dc:d1:fd:13:14:24:bf:85:d4:76:c5:d4:32:8d:37:
5c:57:12:a8:fb:9e:3a:ea:7c:63:a4:15:bc:6f:23:3e:a6:be:
33:10:cb:c4:fa:63:55:29:23:36:c7:ef:e3:a4:6d:3c:1f:70:
72:11:e4:a9:cd:4d:30:45:fe:38:97:ec:87:6c:9c:18:ba:9d:
b7:78:5e:1a:f0:8e:08:67:0e:4a:0d:18:5d:0a:f9:0e:32:bf:
80:b1:7f:3a:5e:59:fc:1e:95:e0:94:6a:7b:e4:ed:7e:4f:e2:
70:44:82:17:74:7b:51:33:86:eb:36:f9:cd:41:87:e7:58:12:
c2:ed:b0:38:d3:a1:7f:67:5f:f7:bc:81:1a:8d:c8:f5:25:e7:
39:7e:cd:a3:45:34:99:b6:1b:f2:ba:86:57:88:58:b7:29:48:
ee:d5:11:73:e1:5b:d2:4a:dd:74:f3:73:7c:10:66:a0:aa:5d:
ce:27:1d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:41:42 2025 by rpki-client