
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/C5D7AFBA502411F0881DEB19C4F9AE02.roa
File: C5D7AFBA502411F0881DEB19C4F9AE02.roa (raw, json)
Hash identifier: Ti8eJO2oAD+cInPnRMrFT32zgx0G9iPebdag3c53iUo=
Subject key identifier: 0A:6C:DD:7B:CF:69:BA:56:65:C5:C2:76:89:82:42:D8:97:B4:B5:8D
Certificate issuer: /CN=A914E0FE/serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Certificate serial: 75
Authority key identifier: 96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/C5D7AFBA502411F0881DEB19C4F9AE02.roa
Signing time: Mon 23 Jun 2025 11:25:32 +0000
ROA not before: Mon 23 Jun 2025 11:25:32 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 153038
IP address blocks: 160.250.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 06:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E0FE, serialNumber=964D08727DAEDAC74037AB9C43A508BADBCFDAFD
Validity
Not Before: Jun 23 11:25:32 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=685939ab-7f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:c5:e3:e4:d2:6b:7f:74:67:97:d9:10:88:
cd:60:96:65:56:95:74:15:0d:81:9c:52:1f:cb:b4:
30:97:43:fd:fa:0c:b2:24:fc:4f:ca:5a:d3:02:e9:
2e:dc:eb:8b:9f:38:ba:39:b8:c1:6e:01:f2:25:9b:
ca:48:a2:01:60:9e:2c:75:70:60:16:ee:14:f1:f4:
96:84:d6:12:37:7c:88:47:d6:92:a2:50:56:28:67:
4c:7a:21:c1:f3:90:d4:11:51:57:b4:50:d3:4a:8d:
91:e6:86:ef:55:4d:52:8e:2d:90:66:34:2d:bc:89:
e5:63:0d:b2:e1:ca:6e:08:59:02:9f:b0:74:ad:bd:
85:0b:cf:2f:e7:be:7d:f1:c9:02:4d:9d:f3:df:fc:
9f:2d:80:d0:04:76:60:87:99:50:85:32:58:ec:89:
09:c9:43:a3:25:32:45:b0:4a:64:48:e1:7f:df:1a:
43:d0:f9:49:9e:43:ae:d6:bd:f8:21:98:a3:1d:78:
82:7c:4d:db:da:70:94:28:45:68:54:9d:0c:35:2b:
b6:3a:d8:cf:7a:af:21:60:4b:9d:7a:8b:fe:da:ab:
6c:80:1f:ac:6b:45:7e:e9:42:62:6e:ff:b9:5e:08:
80:3c:13:96:32:3d:69:53:8a:b9:de:67:7b:57:95:
78:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:DD:7B:CF:69:BA:56:65:C5:C2:76:89:82:42:D8:97:B4:B5:8D
X509v3 Authority Key Identifier:
keyid:96:4D:08:72:7D:AE:DA:C7:40:37:AB:9C:43:A5:08:BA:DB:CF:DA:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/lk0Icn2u2sdAN6ucQ6UIutvP2v0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lk0Icn2u2sdAN6ucQ6UIutvP2v0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0FE/2F2B6FE2ABCA11EFA994D129C4F9AE02/C5D7AFBA502411F0881DEB19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:13:c0:7a:69:f9:89:59:40:c2:5b:b0:2e:97:3c:5a:c7:49:
c7:16:12:d3:32:09:cd:8d:f4:89:53:02:dd:b1:3b:af:8c:b2:
70:6f:c5:91:97:11:4a:d6:8e:13:31:f3:bd:b1:d8:84:de:35:
1a:87:6d:cb:6c:fb:f0:4e:e0:9d:ad:3e:b9:a1:60:64:fd:59:
06:13:9b:af:78:4c:5e:42:28:8d:8e:e1:f3:09:91:6a:0e:fe:
a1:e3:d3:6b:c7:50:9d:8b:b0:06:a6:2e:9f:92:06:a4:6d:b7:
ab:db:78:d8:21:21:14:89:71:e2:c7:a1:17:7c:71:ff:fe:d8:
32:1a:a6:b6:74:a3:f9:74:a7:38:ad:d7:d7:d7:af:f5:26:15:
98:30:70:51:7a:92:da:e8:ba:cd:c6:be:d6:22:1d:a6:0c:dd:
ba:f0:8b:bf:97:6e:6e:9f:ce:13:ee:22:b2:8c:20:95:2c:0f:
5d:f4:28:72:1c:35:3a:8a:8d:79:7d:e0:61:b1:5e:19:97:90:
de:3c:93:65:1c:b0:96:f6:64:08:36:1a:79:99:52:6a:e0:8e:
86:fa:c4:70:fe:e8:cc:24:77:d9:ba:93:92:77:b5:60:b0:5c:
11:0a:f5:9e:70:f4:11:c8:df:b8:8b:17:1c:3e:91:3a:8c:9b:
d6:ee:20:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 00:04:38 2025 by rpki-client