
$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E08B634CAF4211F0903F6E35C4F9AE02.roa
File: E08B634CAF4211F0903F6E35C4F9AE02.roa (raw, json)
Hash identifier: LXLpGzuxg4U+uYCN/Ym9kmpPTivEKUiZsk8TKby87Gs=
Subject key identifier: FE:13:00:F4:EA:E2:62:0C:A4:E8:90:66:50:E9:B1:4E:2F:52:E2:11
Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial: 36E6
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E08B634CAF4211F0903F6E35C4F9AE02.roa
Signing time: Wed 22 Oct 2025 12:30:22 +0000
ROA not before: Wed 22 Oct 2025 12:30:22 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 38030
IP address blocks: 202.161.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14054 (0x36e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Validity
Not Before: Oct 22 12:30:22 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f8ce5e-a4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:b2:be:c3:c9:b6:62:c2:49:6d:a6:66:2b:
0d:05:57:ed:20:08:65:3f:f0:44:db:0e:4d:92:62:
5b:9c:49:11:e0:b7:ed:9c:85:7d:50:de:55:6d:13:
4b:81:46:8e:f1:dd:dd:de:d6:a6:34:11:3e:7d:43:
cd:ee:94:8f:6d:83:9e:86:cd:6e:5b:89:ca:16:b1:
3a:e4:22:20:6b:a4:79:c8:94:ac:d8:ab:eb:56:c2:
e6:5d:94:66:29:8a:d6:47:a4:5a:7c:1d:17:09:a7:
24:d3:bf:9e:ac:f5:91:3c:9a:61:dd:4d:c3:cb:ea:
09:27:a9:d3:63:d4:c4:fa:76:4f:a1:54:75:0d:03:
54:c4:64:60:59:8c:53:6c:91:48:c6:ca:76:81:1f:
65:c3:dd:d9:59:e0:2b:e0:8c:15:1f:9b:a9:9b:17:
57:bd:75:ab:e6:17:74:d8:8e:47:d1:4b:14:65:7f:
f1:aa:51:86:83:37:f9:c1:1a:b9:ff:20:97:1d:f7:
df:3d:fe:4a:3f:e9:b1:2d:b9:9a:a5:d9:da:cd:56:
63:e9:25:9d:93:0e:4d:cb:10:11:ed:26:b9:9d:be:
28:5b:b1:fa:49:fa:6b:07:09:87:b0:77:34:e0:b0:
fa:b6:6c:a2:31:1c:0c:0e:f4:d3:67:3c:d0:74:94:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:00:F4:EA:E2:62:0C:A4:E8:90:66:50:E9:B1:4E:2F:52:E2:11
X509v3 Authority Key Identifier:
keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/E08B634CAF4211F0903F6E35C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.161.176.0/20
Signature Algorithm: sha256WithRSAEncryption
ab:8d:e6:3a:31:fa:b6:71:b8:ae:81:6d:97:18:26:2b:d1:f5:
8b:b5:e2:0c:57:d9:c3:14:98:d6:a8:85:fb:5c:4c:ce:06:8c:
50:cc:15:bb:cf:79:35:60:03:b0:88:78:04:c9:12:30:ac:a5:
68:57:49:5d:ba:18:34:55:c8:8c:e7:d4:90:31:7f:95:fc:75:
3b:56:0a:46:f7:70:b3:48:89:ed:86:80:ce:89:5f:c5:e3:75:
7b:2d:d2:16:2e:30:16:6a:92:d8:6f:44:6e:89:95:53:ad:d9:
42:7f:59:78:d2:78:73:2e:57:08:e7:32:9f:b3:4e:81:fb:cc:
ef:53:ed:dd:53:44:2e:92:e4:c0:1b:86:a7:8f:8d:8a:78:be:
f1:1b:ec:5b:d3:28:4b:5a:66:d1:62:19:7c:14:8f:2a:7f:c6:
54:78:69:dc:e7:3c:1c:ef:3d:fc:9c:d3:65:73:38:e6:95:e1:
e4:c5:f3:d8:5b:ae:5d:26:4d:64:ca:60:c9:7a:20:11:53:18:
fa:a5:df:b5:93:99:7e:2e:99:f0:ca:77:bc:a4:b9:20:c1:ea:
89:a7:93:43:18:50:c5:73:35:e3:e7:19:2b:12:0c:f8:c5:07:
24:cd:a4:ef:19:68:a5:9b:44:99:67:2d:eb:4d:9d:c1:cb:e2:
3a:15:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:55 2025 by rpki-client