
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
File: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (raw, json)
Hash identifier: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=
Subject key identifier: 05:03:BD:38:6C:7F:C1:55:0A:A8:03:48:27:AE:9C:B1:58:C5:A1:15
Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial: 31E1
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
Signing time: Wed 30 Apr 2025 15:52:31 +0000
ROA not before: Wed 30 Apr 2025 15:52:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4797
IP address blocks: 121.240.174.0/24 maxlen: 24
202.54.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 15:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12769 (0x31e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Validity
Not Before: Apr 30 15:52:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6812473f-b8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:25:fe:1a:d2:eb:fb:b4:89:20:f9:cd:da:
33:94:4a:b4:5b:6f:a2:cf:c5:14:c7:71:c3:3e:18:
9c:6c:e6:45:7e:cb:94:9a:4b:9f:2b:7a:89:db:79:
09:70:26:66:e6:b0:70:69:db:61:ad:90:78:78:b7:
64:88:3a:e5:e9:2f:ec:58:83:6d:8a:5a:97:f1:da:
ca:7e:7b:49:18:90:79:47:e1:db:8b:e8:45:fa:84:
6a:ef:78:b4:4f:4d:d7:6d:5b:89:21:17:42:57:bd:
c2:8b:83:1b:aa:c8:f2:ca:34:88:51:68:6b:be:81:
4b:7e:7d:56:ad:d3:72:9a:fa:1a:d1:b6:d9:fb:fc:
98:7c:8b:4c:59:b7:85:73:91:b8:37:08:f9:a0:32:
03:d3:85:b3:8b:65:4a:ad:db:8a:e7:1c:c9:8c:64:
dc:b6:80:ae:a6:e7:74:7e:9b:85:96:62:f8:03:39:
db:8e:8a:d0:75:70:8c:63:2f:0d:25:3a:7b:37:37:
bc:8b:c4:97:f1:98:c9:7f:0b:54:ea:5c:d7:44:03:
6d:5c:3f:ee:55:3a:12:da:b8:63:4b:0a:3a:1c:2a:
73:4e:d7:14:05:30:ce:ae:9d:f5:c3:35:6d:9b:12:
ae:d9:97:85:25:16:15:bd:34:79:6c:82:ba:ce:08:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:BD:38:6C:7F:C1:55:0A:A8:03:48:27:AE:9C:B1:58:C5:A1:15
X509v3 Authority Key Identifier:
keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/200B2C4804AB11EB8AAF5923C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.240.174.0/24
202.54.210.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bd:36:f7:43:4a:74:54:88:2f:dd:81:d7:ea:a4:65:d4:9e:
65:e9:cf:f2:9d:08:05:5b:89:8b:36:94:41:63:45:b7:55:8b:
89:e5:64:1c:e8:8b:4b:75:77:58:68:6a:f4:de:ea:56:aa:d7:
8a:73:46:ee:fe:30:91:72:b7:12:c1:9a:fb:2f:4c:58:31:91:
cb:ab:6f:46:c3:2f:23:3a:a5:2d:4d:d7:e4:32:93:ae:ba:6d:
f3:e2:76:c8:a5:7f:50:d8:ef:61:ef:8a:71:91:4a:5a:be:b9:
46:07:a9:e5:0e:c1:1e:bd:70:86:3b:ab:ce:bd:16:a9:14:65:
49:c9:fe:f8:97:92:fd:48:fc:c7:b4:4e:8c:8f:e6:4e:a2:03:
b6:1a:43:1e:2a:09:79:45:70:d7:0e:ff:6b:3e:cf:ca:5b:4c:
f9:a3:15:74:e1:11:ff:6f:28:09:0a:e7:de:d7:b5:85:1b:5c:
d8:80:10:bb:21:81:23:d3:36:e8:49:20:b8:df:06:69:35:de:
79:e8:97:29:f9:25:02:0b:39:db:c8:5d:95:d6:1e:b0:88:6c:
d1:c9:1f:a4:cf:08:70:ea:a0:d9:e2:65:59:10:e7:0e:6d:69:
7e:59:2b:31:11:1c:6c:02:98:d1:ee:25:15:3d:bd:a5:91:ec:
60:7e:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:51:48 2025 by rpki-client