
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa
File: 836FCA52168411EFB6BDB96BC4F9AE02.roa (raw, json)
Hash identifier: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=
Subject key identifier: 2F:99:72:E1:0F:81:39:DA:30:DA:0D:76:9B:EE:A5:C7:CC:DE:B1:E4
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 011B
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa
Signing time: Sat 21 Jun 2025 04:33:24 +0000
ROA not before: Sat 21 Jun 2025 04:33:24 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 400619
IP address blocks: 83.229.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 02:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Jun 21 04:33:24 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=68563614-0c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:57:ee:32:fa:3e:18:3b:ce:de:53:fe:aa:dc:
67:e9:9d:6f:13:63:b7:6f:ea:4c:13:30:4f:4e:53:
c6:0c:17:02:17:47:5a:14:19:26:c4:79:10:87:9a:
b8:07:28:22:36:9f:be:57:a4:d1:a4:dd:d4:d6:93:
6e:05:c1:4a:f8:48:35:ca:08:92:b2:db:ae:5c:f5:
de:b6:49:15:2e:86:f8:9b:de:f9:be:13:f5:1d:0f:
24:f6:b1:f9:fa:ff:d1:36:b5:48:29:4e:e8:da:3e:
42:59:d9:e7:32:72:9c:49:83:12:65:b9:2a:06:35:
ed:ec:47:c6:41:34:55:b8:e6:29:10:06:5c:39:a7:
7f:e3:d1:9a:4b:90:2e:a3:71:ca:1b:51:78:0c:c9:
0d:17:b6:cf:68:b0:65:9d:21:29:42:33:fe:c6:22:
4d:a9:a0:96:7d:c0:4b:fe:6c:39:46:ab:25:42:89:
a3:63:bc:54:b7:da:8b:81:b5:e6:8c:f3:e1:bf:ff:
bd:d7:5f:89:16:0b:f2:e4:12:7f:1b:f4:2c:29:dd:
39:93:fa:3c:6f:1b:3e:aa:7d:3a:7e:21:cc:39:da:
2e:93:6e:20:0e:b2:91:99:04:75:fc:51:b7:75:0b:
99:b5:56:32:5a:58:5a:3b:1d:35:c1:dd:e0:00:42:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:72:E1:0F:81:39:DA:30:DA:0D:76:9B:EE:A5:C7:CC:DE:B1:E4
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/836FCA52168411EFB6BDB96BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
83.229.40.0/21
Signature Algorithm: sha256WithRSAEncryption
84:2d:ca:09:67:5b:3f:90:00:c1:31:53:2d:cd:e2:e4:97:d1:
a2:87:25:c5:9a:73:9e:ff:43:85:de:c2:cd:64:02:c3:fe:d8:
d8:d2:2f:f1:2e:ae:2e:66:15:d4:08:8e:33:c2:5f:7a:3b:07:
bd:13:c2:8e:be:e2:e6:e7:01:13:17:d3:a1:e7:8e:bc:53:ba:
f9:49:16:30:76:6e:1d:1f:ff:13:fc:f3:91:32:c7:43:03:49:
de:32:7d:e0:64:86:fc:aa:71:40:24:b4:57:f5:a4:4e:8d:3e:
55:1d:15:a9:12:ae:07:ad:92:f1:dd:25:76:97:cc:c7:2c:ae:
15:37:d3:2c:f2:9a:6e:98:f2:19:a8:2e:34:78:4e:4f:50:2a:
3b:14:b9:8e:96:52:a6:01:33:c1:4a:b2:67:99:79:db:6c:0c:
69:50:ad:94:96:48:31:61:43:9a:84:aa:02:cc:b4:b1:38:73:
47:8d:16:2a:7b:4d:a6:5a:09:e4:32:34:ec:77:08:fe:3d:f7:
0d:56:95:ef:1d:88:94:50:b2:7d:e2:a0:7c:58:9d:30:23:25:
f3:98:03:ef:d1:cd:0f:a3:78:59:8c:39:cd:14:6f:94:35:15:
8f:96:7b:a1:29:01:66:3d:4e:b5:bf:df:f1:33:13:9d:cf:90:
50:aa:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:04:55 2025 by rpki-client