
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
File: BD71164A59A211F09EC86C38C4F9AE02.roa (raw, json)
Hash identifier: LzVxtpFkoDUrbmBrIAWx2A82oGmfgpKdIsb6/8/yXfI=
Subject key identifier: 20:AF:2A:58:0F:C9:BF:C9:01:DB:A6:C5:CB:80:1A:70:7D:80:01:1D
Certificate issuer: /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial: 02
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
Signing time: Sat 05 Jul 2025 13:19:55 +0000
ROA not before: Sat 05 Jul 2025 13:19:55 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 153739
IP address blocks: 163.223.200.0/24 maxlen: 24
2001:df5:49c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:38:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Validity
Not Before: Jul 5 13:19:55 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6869267a-419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:5d:e9:f3:5c:59:52:7e:fc:ca:45:06:2d:
ac:74:e3:d0:55:a3:4d:5b:d1:d7:8d:5b:31:a4:39:
d7:7a:6e:f0:20:54:db:03:55:3a:72:52:c7:f1:23:
4d:c9:e8:4f:c1:21:a2:2f:dd:83:40:2e:cf:33:ad:
f3:e7:cc:87:d7:01:9b:8d:57:03:96:51:34:7b:53:
2f:e7:d4:db:c5:30:1c:8e:ef:cc:97:47:e9:ac:3c:
e4:20:c1:d6:57:eb:64:34:cd:e4:2c:1a:d0:65:8a:
87:e4:83:b2:a1:26:de:fd:91:01:6c:c7:cf:14:5b:
ef:8a:01:32:60:f3:d6:9e:a1:20:2f:bc:f3:8b:76:
36:fa:12:75:c9:4f:e1:8d:0a:64:84:e7:f7:93:f9:
b8:6c:02:94:02:fe:34:07:c2:25:9e:8a:d8:48:4c:
0b:bf:6f:f7:e0:48:63:c9:d5:28:61:5a:b9:f6:dc:
33:14:e9:34:93:b1:af:52:98:ae:2b:ad:2a:ee:a4:
40:87:0e:bf:bb:f0:1e:9c:ed:94:b5:45:49:cb:83:
75:67:dd:17:88:d9:ae:bf:6e:3d:ce:32:01:f8:e8:
05:a5:86:38:bd:00:e2:ec:d4:5b:49:96:86:da:dc:
9c:74:a8:d9:4c:9d:48:54:2a:e8:ec:bd:9d:56:89:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:2A:58:0F:C9:BF:C9:01:DB:A6:C5:CB:80:1A:70:7D:80:01:1D
X509v3 Authority Key Identifier:
keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
163.223.200.0/24
IPv6:
2001:df5:49c0::/48
Signature Algorithm: sha256WithRSAEncryption
4a:89:ef:37:2a:cd:a7:37:61:15:a0:53:74:37:94:a9:aa:cf:
90:c1:eb:4f:89:29:b3:63:cf:a0:f8:0b:e9:6b:44:f3:f7:66:
a9:e0:f8:0f:69:2f:1c:92:dd:e6:78:13:f5:e0:64:cb:25:e1:
5c:a1:39:da:17:76:2e:4c:e7:0c:62:06:8d:b7:8c:77:13:80:
44:bb:33:3c:8b:a8:8a:70:5a:b9:0c:e4:00:71:60:5f:a7:d5:
da:e0:cd:d5:65:2c:2f:59:54:d4:14:95:47:53:d7:1a:82:6a:
5d:f9:11:e8:5c:0a:33:bc:df:af:ba:f8:d9:b9:b6:24:7b:25:
74:19:fe:c3:6e:84:11:53:63:f1:40:e0:cd:d6:d7:ab:20:b1:
e4:ee:4a:cb:84:96:33:cd:35:7f:2d:9f:0c:56:c2:9b:76:b5:
89:2c:b0:b6:4a:24:a3:64:2c:04:73:d8:1a:61:22:95:35:9f:
11:e4:bf:d5:de:39:b3:67:87:b7:56:73:03:1c:6b:c4:02:3f:
e8:b2:b2:1a:f7:25:ec:79:9e:6f:14:1e:b0:62:e5:29:a5:5e:
c5:d3:d0:4f:c6:34:a2:94:15:d7:7b:31:19:e5:00:b1:48:40:
9c:07:e1:97:78:66:6d:6d:ea:7a:ac:d0:19:cf:43:6a:c8:32:
ac:49:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:46:42 2025 by rpki-client