
$ rpki-client -vvf rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
File: F6E7CED8B8C611EEAC13CC11C4F9AE02.roa (raw, json)
Hash identifier: qU4UvdAU1Y7BCQ9LZ+rlqRsb/zU78HiYK5hb24/5BaU=
Subject key identifier: 32:0D:B0:71:5A:AD:3D:E0:4B:4B:C8:22:BE:38:5C:DF:72:6C:07:60
Certificate issuer: /CN=A91573B8/serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Certificate serial: FE
Authority key identifier: 8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
Signing time: Wed 21 May 2025 04:35:22 +0000
ROA not before: Wed 21 May 2025 04:35:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 131239
IP address blocks: 202.37.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91573B8, serialNumber=8CB96F0DCA84B20B49A07128E777372058A69053
Validity
Not Before: May 21 04:35:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682d580a-f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3d:ba:ea:4a:8e:2d:1b:2f:18:50:82:2d:30:
2b:55:0a:55:c8:47:bb:d9:4f:7b:19:1c:df:64:8b:
ce:07:4c:45:d8:05:c4:ec:c8:c4:1f:fd:b0:25:fb:
d2:ca:ca:d4:1f:61:89:e8:e7:27:ea:cd:ac:a8:0f:
63:06:48:ee:c5:99:16:6f:48:46:aa:46:50:f9:1f:
a9:68:6a:f7:a0:b6:b5:2a:9f:89:83:79:45:0c:b0:
1b:8c:e0:c2:b1:d2:1b:b7:dd:35:06:26:23:aa:94:
34:67:0d:1d:f9:73:f0:32:97:72:68:bc:6a:a0:54:
90:5d:f2:83:0a:9f:54:f3:51:be:be:88:6b:86:f7:
65:4e:5f:7e:0b:42:49:70:9d:50:bf:da:a0:98:84:
a0:b6:78:c0:49:3b:ed:28:c0:1e:fc:a0:1c:e0:01:
dd:fe:b5:d7:80:ba:39:9e:aa:0b:de:6d:55:42:20:
4e:3b:11:97:97:77:5d:d0:2d:06:fb:e0:18:07:2b:
c0:26:fc:10:51:bd:bd:f0:c0:d6:ae:1a:9a:67:bd:
0c:9b:fc:35:f2:04:5c:54:bc:b3:60:fb:49:8b:34:
43:3d:ba:d9:da:3a:fe:17:d5:f6:43:6e:16:ed:98:
42:1f:6a:e4:c6:fb:9e:79:e8:96:7d:d6:6c:ff:4a:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0D:B0:71:5A:AD:3D:E0:4B:4B:C8:22:BE:38:5C:DF:72:6C:07:60
X509v3 Authority Key Identifier:
keyid:8C:B9:6F:0D:CA:84:B2:0B:49:A0:71:28:E7:77:37:20:58:A6:90:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/jLlvDcqEsgtJoHEo53c3IFimkFM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jLlvDcqEsgtJoHEo53c3IFimkFM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91573B8/84A4A10CB8C611EEA3AFD610C4F9AE02/F6E7CED8B8C611EEAC13CC11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.37.64.0/23
Signature Algorithm: sha256WithRSAEncryption
46:d7:4b:6b:88:c1:da:fc:f7:2b:f1:83:c1:0b:c6:a7:9f:0c:
2e:e2:46:20:f8:28:6f:cb:3e:0e:d9:b7:6e:95:e8:4d:a1:d9:
16:14:c0:9b:d2:eb:7c:a1:0d:bc:e3:e5:22:d5:3e:64:32:2f:
2e:bc:74:b2:11:b8:64:ae:3f:8a:3b:c8:9e:bc:02:8b:09:e9:
19:b4:e1:bb:10:4e:4c:97:71:0d:dd:9b:95:b0:88:c8:96:46:
d2:1b:53:2e:1c:1d:9b:95:53:13:0e:53:81:c8:f7:a0:19:75:
59:75:b9:5f:8f:0c:33:d9:96:fc:2c:a6:ca:2d:13:9b:b1:11:
5d:68:ec:ce:e4:07:ef:95:14:cf:a7:e6:18:37:b5:de:60:5d:
f9:e9:44:05:26:31:52:dd:35:1a:28:f7:2b:d5:8e:d8:f9:dd:
e9:56:aa:bc:d3:2c:a6:9b:0e:68:f7:8e:ba:68:9f:26:d5:f8:
9d:5c:61:2d:fd:e0:a9:07:1b:62:4b:d9:fe:70:71:43:31:84:
c8:73:26:1e:ac:fd:f6:7b:8a:9f:bf:e7:fe:1f:f9:46:3a:e1:
ba:1c:6f:bd:63:56:c9:ed:b7:09:7a:93:18:71:5c:f7:33:e2:
ca:3b:3b:8e:94:86:8e:7c:9f:77:99:7b:32:62:76:c7:25:ac:
c6:84:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:57:23 2025 by rpki-client