
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
File: 682125602A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier: YyMxfaGjaUTR1RTEiaJ/8xWo+/v0LKLkSrPTK2mFwLE=
Subject key identifier: 21:96:44:56:73:A6:93:CF:7B:F8:C3:0C:39:D0:99:96:D9:D9:F6:BA
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 088E
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
Signing time: Tue 20 May 2025 21:51:00 +0000
ROA not before: Tue 20 May 2025 21:51:00 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55932
IP address blocks: 203.151.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 22:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: May 20 21:51:00 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=682cf944-5cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:d1:35:d9:05:c8:2e:30:8d:c6:ea:26:16:
17:2a:d6:a3:b2:a2:b5:16:36:4e:72:af:79:16:c7:
05:b8:28:23:ed:ca:15:de:e9:59:c9:dc:13:ee:31:
d9:b8:21:4c:ff:24:8b:5f:af:a7:0e:05:3f:c6:26:
67:9d:cc:40:88:c7:15:d6:2d:b2:e1:c7:47:9b:69:
25:1c:9b:37:77:05:e3:fb:2c:eb:26:42:a1:9b:d5:
52:f0:60:c8:bc:cf:73:3c:5b:31:1e:d9:cd:7e:ec:
11:c1:c0:f1:26:e8:6d:a1:ff:4f:4a:8a:fe:0d:20:
ec:dd:c6:02:0a:5e:fd:04:11:ea:6c:ed:a6:dc:00:
b6:4c:d7:71:fb:f8:cf:11:71:76:a6:87:58:52:8d:
56:1e:e3:a0:3e:44:59:5a:46:10:80:62:f6:de:db:
a2:dd:9f:3a:00:fa:4e:a5:8e:28:61:59:1f:5c:7e:
94:b2:76:8b:8b:2e:f6:54:8b:fa:3b:0f:13:34:eb:
38:2f:bc:48:c9:6f:48:14:8d:0d:92:3a:0e:f7:3d:
6a:71:8c:c6:dd:e5:56:2f:62:3b:67:ae:ff:1e:db:
15:74:62:f2:b6:4f:cc:c1:2e:2d:19:15:a1:02:90:
e2:95:7b:b7:fe:e3:7d:8c:16:b1:b0:2a:53:4a:1a:
45:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:44:56:73:A6:93:CF:7B:F8:C3:0C:39:D0:99:96:D9:D9:F6:BA
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.151.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:5d:2a:b4:96:80:ed:b2:cf:63:2f:1a:5d:95:03:3d:33:97:
63:e3:95:d0:44:32:fb:48:2e:b6:74:35:f4:e4:f8:04:c3:e6:
4f:f2:ad:ab:91:cc:3f:ba:b2:96:18:41:c9:14:a7:d8:a3:0b:
90:33:a7:37:de:7a:77:32:8d:ae:c3:55:02:70:d1:40:eb:0b:
4e:da:53:9c:d7:91:f7:be:ad:aa:99:ca:97:2d:2f:fb:46:d6:
3e:1a:59:86:50:0c:0e:61:11:98:1f:30:a2:8b:7c:e1:a8:d7:
de:44:3e:1a:03:a5:34:01:97:68:2e:2b:d8:19:c6:a8:be:b7:
bf:c0:09:52:1e:0f:07:af:95:b8:bf:26:38:4e:22:95:b4:15:
5c:8f:cf:c9:81:4b:45:30:47:b9:90:df:40:1a:39:70:f6:11:
a0:26:05:f9:f2:04:a4:68:11:7d:e5:22:4f:e4:38:ab:c4:3e:
4f:f3:2b:f8:2a:3e:01:db:ee:95:08:4b:8e:e9:c5:ff:f6:0e:
a8:b3:66:cd:56:56:67:1f:0d:60:ef:3c:de:6c:fd:6a:68:0a:
b2:bc:02:c0:39:3f:3b:87:b4:cd:96:93:c7:19:3b:15:f8:b1:
7a:64:a7:a3:bc:54:1b:e9:e1:4f:c5:0e:5a:0b:31:b2:e6:dd:
2e:e1:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 16:48:33 2025 by rpki-client