
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
File: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (raw, json)
Hash identifier: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk=
Subject key identifier: 61:5C:27:5F:67:1F:50:05:00:25:C1:B3:32:7A:8A:6F:06:75:5E:BD
Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial: BC
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
Signing time: Thu 11 Sep 2025 06:45:58 +0000
ROA not before: Thu 11 Sep 2025 06:45:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132372
IP address blocks: 160.187.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 07:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188 (0xbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Validity
Not Before: Sep 11 06:45:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68c27026-520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:e0:a1:74:90:06:47:72:7e:3a:bb:a4:de:
5e:dd:70:5f:69:7e:cb:8e:d8:f5:b6:79:84:a5:c7:
80:58:a0:05:e0:b6:fe:c7:dc:23:1c:23:80:74:04:
ca:14:2a:6a:cf:6c:02:a6:e7:2c:2e:31:30:e6:a8:
60:0f:a0:4b:11:7f:bf:46:ee:77:c0:ff:28:b5:d6:
f7:cf:8e:0d:0f:af:35:5f:e7:97:44:d7:57:06:4c:
8e:69:7e:46:1c:8a:09:1b:9a:f1:a4:d6:49:53:39:
4e:6b:93:a0:9d:21:25:32:43:92:70:eb:5e:39:75:
a1:a1:73:09:7f:b9:53:45:85:b1:1a:1e:3f:cf:a9:
3b:0f:66:be:f2:3c:96:31:06:48:5f:cd:59:83:17:
2c:77:06:f9:35:6b:8a:63:f1:c7:92:34:45:33:79:
30:1d:fa:dc:85:e1:9a:4a:83:77:86:d5:45:6f:6c:
26:6f:18:e0:70:df:86:78:66:c2:39:95:af:2d:33:
0f:20:9f:2b:ae:aa:37:5d:8a:db:a7:44:3e:85:54:
35:80:d3:de:9c:3f:23:2b:bb:d7:fd:f6:dd:bc:ca:
14:bf:47:ee:d2:3d:b5:8a:92:bd:b4:b6:90:96:7e:
13:9b:d4:16:93:1d:ec:cb:ae:15:88:6c:6f:71:13:
fa:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5C:27:5F:67:1F:50:05:00:25:C1:B3:32:7A:8A:6F:06:75:5E:BD
X509v3 Authority Key Identifier:
keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e8:e6:2a:08:80:cc:0b:f3:55:ba:b2:4f:25:68:2b:e8:6b:
a2:33:4e:e3:da:ca:78:1e:a4:42:44:2d:dd:92:eb:f9:6d:3a:
da:9e:bc:08:68:94:cc:9f:da:dd:ca:04:19:70:20:7c:9d:5d:
83:b6:a2:b9:4b:77:35:0c:6d:cb:1e:33:c4:e4:6b:cd:71:bb:
a1:c7:7d:f7:b4:43:53:08:4d:dc:b7:cd:16:ce:ef:a2:75:dd:
e4:b0:82:bb:a5:53:39:9a:a6:9e:63:19:82:34:f5:1e:3f:31:
a1:c8:e2:26:17:23:c8:c1:2f:05:46:e6:49:a6:04:54:a4:3f:
03:e2:51:61:0f:26:35:f7:a2:a0:79:79:f8:20:64:42:e0:19:
df:22:35:56:37:41:42:8a:5d:ba:4e:ac:e4:d6:59:c2:9c:9d:
28:15:70:6c:51:24:ef:ec:7d:f2:83:85:62:09:d1:8b:48:24:
2f:9b:ee:a5:1a:94:98:b7:c3:b5:7e:f0:40:41:66:48:6f:3e:
53:56:93:39:c2:e2:cf:12:89:2b:80:ab:68:3a:8b:51:01:ca:
d5:1d:08:ec:bd:5b:f0:bc:6d:c7:4e:8f:7d:aa:98:8e:19:72:
0f:60:61:f0:68:80:c8:e7:72:5b:17:1b:5e:ac:7a:3f:40:88:
3e:f4:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 06:34:57 2025 by rpki-client