
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa
File: F6BDBBE2AC6411EF85E4707CC4F9AE02.roa (raw, json)
Hash identifier: 4buNpsqjVzrT4b5mx2ji/Z/fJ9vNVzZvP9Ey1iD/FnI=
Subject key identifier: 64:96:01:08:00:63:1A:DC:3B:59:F4:12:AF:7A:00:58:08:F5:B1:77
Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Certificate serial: 38
Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa
Signing time: Thu 27 Feb 2025 09:32:09 +0000
ROA not before: Thu 27 Feb 2025 09:32:09 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 8075
IP address blocks: 146.116.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 09:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC
Validity
Not Before: Feb 27 09:32:09 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c03119-894f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:b1:bb:9a:84:a4:20:0d:50:89:07:f5:90:
51:fa:00:1c:2d:6e:64:77:2b:30:69:ff:66:98:47:
32:c9:0f:66:0a:f3:24:05:3d:96:bb:d5:33:f2:d5:
a3:ff:57:48:44:83:00:dc:4c:4a:be:63:19:13:a3:
03:81:90:73:48:9e:95:1c:19:81:b3:29:87:65:0a:
ce:5e:54:4b:f9:28:c4:fb:f1:7d:52:18:84:bf:9b:
3d:0b:42:c8:3d:67:06:03:83:9a:10:fb:77:84:20:
34:46:a8:a0:5d:00:f2:1e:51:32:f1:76:2d:9d:05:
5a:5b:2e:05:9b:b0:eb:0b:75:95:60:c8:aa:21:9f:
2f:82:06:f7:73:3a:1e:d7:b4:b4:7a:e3:1f:8c:92:
27:c9:85:f7:d1:42:ef:a2:a6:43:ca:ed:67:a0:49:
f4:d3:b8:26:8d:df:51:14:18:94:65:8d:06:a9:36:
9d:d7:03:df:dd:08:f0:7e:db:fc:26:db:44:70:95:
5d:e2:b6:f3:72:b6:0a:fe:92:8c:94:07:5c:29:ad:
71:98:bc:36:1d:a2:a3:9e:90:a2:3e:de:11:55:b7:
5a:c3:5b:71:5f:01:5d:03:46:9f:07:16:47:41:71:
d9:97:cd:9f:4d:08:68:d7:8d:2e:22:f1:87:52:6e:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:01:08:00:63:1A:DC:3B:59:F4:12:AF:7A:00:58:08:F5:B1:77
X509v3 Authority Key Identifier:
keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F6BDBBE2AC6411EF85E4707CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
146.116.249.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:c1:d5:40:eb:ed:bc:9b:73:aa:7e:15:b2:8c:a2:25:53:
00:aa:af:8a:25:b9:24:24:d5:0d:94:5f:a5:36:bc:6b:50:13:
d9:2d:bc:14:71:0b:43:7a:dc:04:8f:d1:f6:e1:47:a7:1b:c7:
19:9c:86:ad:47:9c:51:7f:a9:fc:6b:80:46:12:52:3a:1d:32:
41:4e:7f:40:12:f9:12:7b:8f:f6:c9:10:ae:05:72:d6:f4:e8:
63:bb:8f:0d:a4:c4:2f:98:0d:b8:f6:0f:3e:e2:d7:60:21:f6:
03:71:aa:3e:be:c8:e1:4c:8f:64:22:0a:6c:65:2b:67:e4:98:
90:3b:c2:1a:ff:9c:89:80:07:0b:f4:63:0d:7e:e1:e8:3a:c1:
85:39:09:f6:9f:7f:60:05:d9:3f:1e:69:e8:bb:e9:fe:30:ac:
e9:ef:e0:11:7b:17:97:1f:f5:88:24:93:d5:2b:83:d3:3a:d9:
c8:5f:41:a3:b2:d8:b7:d1:de:7c:4c:0b:65:50:06:b5:94:2b:
d3:76:4c:4a:69:93:36:23:99:56:ea:44:9e:ce:65:8c:cf:07:
5f:a2:3b:da:c3:11:75:0f:36:dc:f6:73:ee:d5:85:9e:d5:b3:
82:cb:c8:fc:87:32:1c:e1:b0:60:19:01:6f:2a:f8:ba:6b:0b:
8c:a8:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:14:39 2025 by rpki-client