
$ rpki-client -vvf rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/E286BAA24B5611F0A987864DC4F9AE02.roa
File: E286BAA24B5611F0A987864DC4F9AE02.roa (raw, json)
Hash identifier: +qxfuU3gIMXAGQMi2xVqEYmAlmIt7blHD4cbq1UZ4Zw=
Subject key identifier: 8F:12:E6:68:AB:8B:F2:BD:BE:B5:71:6F:2D:5E:F2:40:D7:BC:23:D2
Certificate issuer: /CN=A911069A/serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Certificate serial: 016C
Authority key identifier: 5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/E286BAA24B5611F0A987864DC4F9AE02.roa
Signing time: Wed 03 Sep 2025 04:23:53 +0000
ROA not before: Wed 03 Sep 2025 04:23:53 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38624
IP address blocks: 117.120.32.0/23 maxlen: 24
117.120.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 05:23:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911069A, serialNumber=5B82E88C014132823D020D5C30A6BFB6D5B50221
Validity
Not Before: Sep 3 04:23:53 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b7c2d9-4b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:e1:47:66:f0:12:f4:4f:00:51:32:11:bd:
3a:e5:d3:90:d9:5c:ca:40:cc:f6:b0:9c:04:68:46:
ae:2e:dc:a2:40:0c:ab:3a:5e:d3:81:92:8b:a9:42:
f7:7d:88:a4:29:35:f0:18:38:84:fd:70:49:e2:24:
a4:0e:7d:75:16:52:75:22:94:da:07:e9:18:9a:6c:
de:b7:eb:7a:1d:74:f3:e0:c9:6c:fb:27:b2:d3:2a:
53:c8:be:27:8e:93:92:b9:3b:9e:0e:8e:0a:56:39:
78:f6:57:93:b5:27:5f:58:a1:ac:66:3d:68:e4:e3:
ff:33:a2:69:f4:61:dd:f1:2a:7a:4c:37:53:8d:ac:
0f:97:61:1f:96:50:2f:90:6c:e9:9a:40:bb:db:f2:
73:b1:36:ba:c0:41:3b:ac:0a:49:2d:e0:f0:f5:71:
65:63:bc:5a:d7:a5:12:05:3c:d4:41:d2:ad:c4:0a:
6c:b2:cd:f5:e5:98:c6:6a:58:3d:df:dd:16:dc:db:
18:d9:65:7b:c7:04:91:fe:56:b1:15:5e:1d:15:63:
79:e8:ca:11:d5:79:ac:46:f3:23:d7:09:ce:58:18:
a2:af:df:38:d2:0d:ee:ef:33:47:67:e3:30:5d:6f:
ea:ef:56:33:6e:30:2f:7c:37:87:99:c7:b7:60:47:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:12:E6:68:AB:8B:F2:BD:BE:B5:71:6F:2D:5E:F2:40:D7:BC:23:D2
X509v3 Authority Key Identifier:
keyid:5B:82:E8:8C:01:41:32:82:3D:02:0D:5C:30:A6:BF:B6:D5:B5:02:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/W4LojAFBMoI9Ag1cMKa_ttW1AiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W4LojAFBMoI9Ag1cMKa_ttW1AiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911069A/961B2A4666F511EEA4384F74C4F9AE02/E286BAA24B5611F0A987864DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.120.32.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:76:9d:84:d7:96:2d:ea:af:49:b5:5b:50:49:6e:d1:fc:46:
b1:82:c5:b0:8d:ee:c0:00:d4:1a:07:cf:a0:e1:46:e6:a1:d6:
d4:4b:21:bf:3b:bd:ae:37:f3:e6:1b:10:ca:05:c2:c6:2f:55:
f5:97:b6:ad:d6:0c:f2:25:35:83:77:1f:2c:33:38:8b:9f:1b:
b8:21:78:b6:19:b4:b4:90:6a:a7:92:92:32:8b:28:9e:d0:65:
17:c5:04:0a:4e:ad:d6:71:d8:7c:e2:46:99:75:1c:9c:0c:cd:
1b:5c:4b:ac:4f:33:31:62:63:75:ea:ec:79:b7:01:ef:4e:14:
2b:00:66:77:2d:2d:58:27:7c:63:97:51:12:7f:9a:d7:88:d6:
a1:85:86:46:40:c9:10:5a:b2:8b:ab:33:1e:99:66:09:79:cf:
4d:8b:16:48:b9:bd:c2:3c:74:d2:e5:48:29:dd:b5:9a:f8:f7:
80:48:b7:e5:5d:cf:58:5b:88:4e:de:0e:c0:79:70:d0:45:71:
a2:4f:d6:a5:d2:bc:d4:5f:2f:2a:e5:6c:dc:9f:b0:5c:34:e4:
54:51:9d:d2:d9:f9:6f:01:6a:f9:29:38:d4:09:21:75:01:0d:
12:2f:d1:48:72:36:ea:b0:d8:c0:16:eb:02:cc:90:33:e0:f9:
ad:15:0a:e0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA2OUExMTAvBgNVBAUTKDVCODJFODhDMDE0MTMyODIzRDAyMEQ1QzMwQTZCRkI2
RDVCNTAyMjEwHhcNMjUwOTAzMDQyMzUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3YzJkOS00YjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6ThR2bwEvRPAFEyEb065dOQ2VzKQMz2sJwEaEauLtyiQAyrOl7TgZKLqUL3
fYikKTXwGDiE/XBJ4iSkDn11FlJ1IpTaB+kYmmzet+t6HXTz4Mls+yey0ypTyL4n
jpOSuTueDo4KVjl49leTtSdfWKGsZj1o5OP/M6Jp9GHd8Sp6TDdTjawPl2EfllAv
kGzpmkC72/JzsTa6wEE7rApJLeDw9XFlY7xa16USBTzUQdKtxApsss315ZjGalg9
390W3NsY2WV7xwSR/laxFV4dFWN56MoR1XmsRvMj1wnOWBiir9840g3u7zNHZ+Mw
XW/q71YzbjAvfDeHmce3YEedNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI8S5mir
i/K9vrVxby1e8kDXvCPSMB8GA1UdIwQYMBaAFFuC6IwBQTKCPQINXDCmv7bVtQIh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDY5QS85NjFCMkE0NjY2
RjUxMUVFQTQzODRGNzRDNEY5QUUwMi9XNExvakFGQk1vSTlBZzFjTUthX3R0VzFB
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c0TG9qQUZCTW9JOUFnMWNNS2FfdHRXMUFpRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA2OUEvOTYxQjJBNDY2NkY1MTFFRUE0Mzg0Rjc0QzRGOUFFMDIvRTI4NkJBQTI0
QjU2MTFGMEE5ODc4NjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ1eCAwDQYJKoZIhvcNAQELBQADggEBAMB2nYTXli3qr0m1
W1BJbtH8RrGCxbCN7sAA1BoHz6DhRuah1tRLIb87va438+YbEMoFwsYvVfWXtq3W
DPIlNYN3HywzOIufG7gheLYZtLSQaqeSkjKLKJ7QZRfFBApOrdZx2HziRpl1HJwM
zRtcS6xPMzFiY3Xq7Hm3Ae9OFCsAZnctLVgnfGOXURJ/mteI1qGFhkZAyRBasour
Mx6ZZgl5z02LFki5vcI8dNLlSCndtZr494BIt+Vdz1hbiE7eDsB5cNBFcaJP1qXS
vNRfLyrlbNyfsFw05FRRndLZ+W8BavkpONQJIXUBDRIv0UhyNuqw2MAW6wLMkDPg
+a0VCuA=
-----END CERTIFICATE-----
Generated at Fri Oct 24 06:38:34 2025 by rpki-client