
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B07E339A257C11E79EE15E3CC4F9AE02.roa
File: B07E339A257C11E79EE15E3CC4F9AE02.roa (raw, json)
Hash identifier: 2qn9NXSOf21uSxk9HsnL18AqcQ0bhCjIV+9nqDhn33Y=
Subject key identifier: CD:57:C2:20:2E:7D:79:F0:44:B7:58:58:98:4E:DC:89:C7:7B:F7:68
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 1F6C
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B07E339A257C11E79EE15E3CC4F9AE02.roa
Signing time: Sat 30 Aug 2025 16:35:30 +0000
ROA not before: Sat 30 Aug 2025 16:35:30 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 17672
IP address blocks: 123.183.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 16:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8044 (0x1f6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Aug 30 16:35:30 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b32852-5120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:6a:0b:65:8b:c2:f7:f9:47:07:3c:b6:48:
66:d1:81:e7:e3:25:06:78:51:32:c0:5c:44:4a:01:
80:4c:b3:f0:96:47:92:f0:2d:71:77:aa:4e:c4:16:
bc:ed:79:fa:60:ee:7a:e9:95:6a:b2:8b:7b:bf:a9:
dd:01:29:93:26:c5:b8:fd:61:3c:dd:57:33:75:08:
cc:a1:80:28:2a:31:92:eb:ec:64:27:a3:6e:85:28:
04:bc:76:aa:a2:33:d0:02:df:bd:20:73:f0:da:a0:
ae:5b:04:cd:a7:9c:57:c4:e4:68:6d:d8:75:0a:18:
66:16:3a:2c:73:63:ad:40:ad:da:52:0c:ef:bf:d0:
00:98:ca:c1:b3:a2:63:cf:00:80:20:69:17:08:a8:
68:dc:0a:50:5b:fb:5d:de:3a:43:87:b4:52:68:13:
49:aa:76:5d:fd:cf:ac:5f:09:35:3d:19:74:62:eb:
a1:97:a3:1e:f7:6e:3b:b4:fc:06:7f:8d:a7:1c:48:
f2:3a:ee:55:48:86:39:4d:30:df:ce:44:c7:0d:7a:
41:63:cf:75:70:e7:bb:8d:25:76:ba:89:6e:9d:74:
3f:ac:75:e0:f2:b0:74:54:17:7f:0d:c5:9c:58:61:
c9:7d:7e:31:94:01:7f:47:54:f5:29:6b:b7:13:5a:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:C2:20:2E:7D:79:F0:44:B7:58:58:98:4E:DC:89:C7:7B:F7:68
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B07E339A257C11E79EE15E3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
123.183.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:07:3c:29:1a:6a:77:5e:cf:98:f1:f1:9b:26:ba:ad:5b:44:
fd:a5:3b:30:c8:16:4b:03:a0:8c:f2:a3:ee:34:86:49:da:a3:
77:ca:67:8c:d5:d6:c9:5c:7f:36:e7:64:0c:42:bd:4d:e5:5f:
04:f8:2b:4c:44:e1:3b:88:95:b8:b1:c0:6e:ba:7a:b2:92:c8:
2b:2a:95:5b:6c:8e:2e:56:da:ba:e7:8c:ad:1d:8b:9f:57:11:
43:3d:a3:61:6c:7e:9e:11:d9:14:69:a6:e2:41:d7:03:d1:b5:
d4:ec:0e:be:3f:9a:a4:86:20:8f:ef:d9:3d:16:1c:dc:ed:ee:
d8:f1:d8:88:18:70:33:5e:8e:2d:ea:77:8b:b4:63:e3:36:69:
24:93:23:52:0d:44:9c:3c:09:a1:fa:1a:1b:eb:33:4c:92:6e:
a9:b0:37:7c:35:62:82:81:3d:3f:76:15:ff:e1:96:a9:d7:e0:
9a:14:7f:d8:aa:45:df:f0:05:5d:eb:39:2e:b9:85:34:2e:18:
67:c1:95:be:ea:da:bf:d7:66:a6:5a:de:91:88:6b:84:83:a0:
b7:81:58:bd:37:e4:41:aa:f1:22:9f:c2:0c:39:94:65:8b:bc:
f4:42:f9:be:fd:cb:7c:19:f6:f9:68:ac:c4:81:b8:b1:7a:53:
b0:a4:44:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 02:51:49 2025 by rpki-client