
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/1E00C58C145C11F094FADD38C4F9AE02.roa
File: 1E00C58C145C11F094FADD38C4F9AE02.roa (raw, json)
Hash identifier: XjpAhwEE1pSxcomjAf7JGmGOWyetZlZpCZkZjy+8eHs=
Subject key identifier: B2:7A:89:C9:59:F8:74:FD:49:23:89:75:A6:BD:C4:B8:2A:F6:CC:7A
Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Certificate serial: 0278
Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/1E00C58C145C11F094FADD38C4F9AE02.roa
Signing time: Tue 08 Apr 2025 09:30:32 +0000
ROA not before: Tue 08 Apr 2025 09:30:32 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 149006
IP address blocks: 2400:1fe0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 02:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 632 (0x278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C
Validity
Not Before: Apr 8 09:30:32 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=67f4ecb8-7d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9c:29:27:f5:56:cc:cc:f1:91:ca:d7:31:8e:
3b:37:34:fa:01:d5:79:c2:fd:30:61:ce:10:56:ea:
30:eb:fc:09:2d:19:6c:4f:ca:cc:3b:2b:4a:39:42:
58:c1:20:1e:90:38:73:24:37:56:84:18:3f:43:cb:
d3:c1:87:2a:af:b2:d8:e7:f7:67:51:d7:e6:8d:07:
a6:c1:e1:45:69:d9:b6:b1:2b:d4:4c:cb:25:e1:34:
39:fc:21:a7:01:eb:11:03:c7:ef:fd:e9:2d:33:f7:
f7:e0:7d:02:24:51:20:61:50:e9:60:af:cf:f3:0d:
b7:25:ac:71:41:fd:e9:24:fa:66:25:a3:80:b0:88:
ca:86:f0:ff:90:1f:0f:d8:59:c8:32:9b:32:bb:89:
8c:a1:00:f6:6f:2f:68:64:5c:67:cf:ac:3e:22:75:
8a:f6:c2:0a:67:93:65:37:98:d0:0f:7e:60:27:ee:
c7:3b:6d:77:67:2d:ca:44:55:c6:b2:95:6f:81:7f:
6c:96:84:f4:4b:14:f2:21:98:c0:c9:73:99:18:5a:
50:60:a1:e7:da:dc:6a:8b:40:d8:62:bc:20:bd:73:
7a:e1:57:fe:f8:33:c8:13:ed:bb:ef:d0:bc:65:c7:
e7:46:fa:13:10:60:0f:48:d0:8f:d1:6c:56:e6:5a:
cd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7A:89:C9:59:F8:74:FD:49:23:89:75:A6:BD:C4:B8:2A:F6:CC:7A
X509v3 Authority Key Identifier:
keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/1E00C58C145C11F094FADD38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:1fe0::/32
Signature Algorithm: sha256WithRSAEncryption
12:bc:8e:43:6a:cd:03:58:12:c8:54:f6:1b:76:8d:ea:53:35:
0a:5a:7c:3e:ba:df:61:96:12:79:f5:8f:cd:57:e4:c8:da:4e:
a4:e1:6c:07:c7:45:b7:0e:86:9d:ed:74:9c:0b:2e:0d:d6:89:
90:57:69:0e:e0:8d:2c:02:a1:89:c1:b8:2d:54:ee:9f:f2:98:
89:f3:0a:11:a3:14:34:31:75:4b:74:5d:d8:72:89:87:4b:1b:
1e:be:8a:8e:99:1a:0a:ea:75:b5:9a:f1:9b:04:c0:b8:a3:12:
e9:82:63:23:7b:f8:52:01:73:22:ec:c6:89:a2:55:1e:1c:b9:
b0:7b:40:fe:e8:4d:bf:27:cb:31:35:31:0c:7d:96:70:ee:82:
41:bf:75:20:e2:a8:7f:8f:91:1d:e8:1a:3d:6c:76:b1:30:98:
07:e4:88:61:62:78:d6:6e:09:fc:a1:36:5b:78:2f:c7:10:08:
3a:ab:34:c8:e0:02:08:ea:99:9e:e0:98:cb:85:26:f4:f4:7e:
ef:8e:25:15:16:c3:d3:ff:84:aa:79:e9:8f:0d:15:d0:6f:05:
3d:d7:c7:9a:da:ed:c2:99:ca:dc:33:65:f9:ca:98:ef:9c:65:
39:f9:c6:cd:19:7b:72:48:e2:48:b8:61:e5:1b:c2:72:41:2e:
68:28:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:54:49 2025 by rpki-client