
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
File: F3425EF0684D11F0B2D5FA37C4F9AE02.roa (raw, json)
Hash identifier: kDg5gV8f685pEYZaJzry/4cBmeqL4qLx4WwwvbyKJCY=
Subject key identifier: 42:08:BB:9E:93:BB:49:BC:0E:8F:D1:8C:5C:64:32:24:AA:BB:B1:DD
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0B35
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
Signing time: Fri 10 Oct 2025 06:34:09 +0000
ROA not before: Fri 10 Oct 2025 06:34:09 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 213607
IP address blocks: 61.15.96.0/24 maxlen: 24
203.168.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 20:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 10 06:34:09 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68e8a8e1-a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:b7:0f:64:14:e8:a7:a7:32:a5:49:ad:09:
de:40:64:28:0a:6b:a5:dd:e7:09:36:ef:3c:54:b4:
27:e0:02:4d:d0:f5:08:1f:f8:e0:9f:88:69:08:1c:
54:a9:dc:8e:45:dc:09:a7:f9:43:08:bf:93:30:00:
26:45:89:04:be:c0:ae:24:40:09:70:80:fa:9a:2e:
0d:93:77:ba:08:68:e9:ad:03:b6:50:47:13:dd:bd:
c8:84:55:9e:cf:51:ce:55:60:50:6b:51:74:3c:9d:
5e:dc:cc:dc:ec:25:ef:5f:d6:8c:5c:aa:01:78:6b:
58:95:1f:05:af:0d:16:e3:68:82:b5:35:5b:0e:a1:
25:f9:a5:0e:a4:18:9c:5b:5f:8d:75:a5:07:08:d1:
97:3d:7f:8b:f3:9a:76:08:5b:7d:3b:fe:1d:f9:c1:
96:f4:80:32:7a:62:2c:3f:96:a1:61:7c:8b:a1:6f:
98:46:1c:f8:51:27:44:6d:a7:ee:0c:8f:b5:49:fd:
31:1b:32:9a:ba:c9:07:4e:d1:eb:4d:e6:e1:6a:19:
4d:0e:57:36:63:99:c1:34:3c:95:66:81:1d:7d:44:
c5:c0:37:d7:45:70:2f:b4:ba:82:7e:c0:d3:dc:b7:
3e:a1:a5:31:56:3b:3a:98:64:eb:df:10:39:6a:39:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:08:BB:9E:93:BB:49:BC:0E:8F:D1:8C:5C:64:32:24:AA:BB:B1:DD
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.15.96.0/24
203.168.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:05:f6:94:cd:54:4b:18:ab:a8:d7:3d:3f:74:85:04:5a:a1:
52:1a:0e:a8:97:51:09:cd:f3:23:b1:6d:e0:bf:fd:24:49:bd:
e3:09:38:e1:14:90:9f:df:18:d7:84:30:99:c9:63:7c:c0:c7:
27:b4:d9:39:5c:24:d4:5d:8d:de:22:97:d6:5b:27:58:b3:9d:
7b:f2:51:1d:a0:b9:0c:a9:5c:3c:e8:07:ac:e4:8d:e5:35:1e:
e7:d9:8d:b6:78:63:3c:7e:16:c9:80:bc:76:4e:4a:0d:01:df:
c2:1c:5b:dd:0b:8f:8a:c7:84:d1:a1:b5:cc:e4:33:d4:28:40:
79:5f:83:93:0b:a4:b7:ab:51:1c:18:5d:b1:09:43:f6:70:85:
1d:12:f6:e7:97:e9:1b:8a:54:00:6c:6a:a3:91:b2:c0:20:67:
b4:93:c3:16:e1:fe:f7:ad:c0:7f:6d:aa:63:46:48:f9:a7:af:
7e:43:62:34:f1:71:07:50:8b:8b:b0:86:f3:ab:a8:6f:c5:44:
73:e4:db:da:ec:e6:dc:c0:49:37:d3:ea:60:e9:e1:33:93:4f:
43:00:6b:c1:50:95:2f:f4:c1:57:11:85:4a:a9:30:21:05:fa:
49:6a:8f:6b:a8:73:53:04:64:67:0f:af:19:06:c8:29:ea:1c:
33:e4:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 07:06:37 2025 by rpki-client