
$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
File: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier: 5+MRoBA+rOp6HemFzB+KMhs/OCqWXA66uUpcbDP4GD0=
Subject key identifier: EC:AD:6E:FE:F5:4F:1D:ED:D2:FF:A7:53:E4:68:F5:92:AD:7D:6E:A4
Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial: 35D5
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
Signing time: Thu 24 Jul 2025 14:50:32 +0000
ROA not before: Thu 24 Jul 2025 14:50:32 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 38554
IP address blocks: 58.181.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Oct 2025 14:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13781 (0x35d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Validity
Not Before: Jul 24 14:50:32 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68824838-e467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:9d:2f:a7:a0:dd:7a:28:81:9c:5e:78:0a:
4b:ca:e3:b0:7d:cf:fc:dc:cc:8a:df:20:34:34:dc:
4d:73:bb:73:06:61:79:99:d8:c4:2c:78:88:4c:0a:
9b:e6:39:be:6a:df:ea:b7:95:31:7c:52:d6:73:e9:
80:96:38:02:d3:a0:ea:1e:75:ab:a6:e4:61:a2:27:
85:7e:70:c3:09:dc:08:fb:71:b1:2f:e5:90:de:1e:
0b:0b:e7:47:0c:ee:25:cb:bb:d3:3e:da:f1:34:5d:
ab:64:71:fd:bc:7e:49:cc:7d:8f:db:71:84:09:18:
3e:03:a4:43:c7:bc:cc:ba:d0:32:51:77:d0:fe:b5:
5a:4e:33:b5:aa:d8:4c:84:3a:07:75:d2:94:df:17:
06:7f:27:b7:22:80:ff:5d:46:7c:78:af:f7:e1:46:
54:1a:b1:79:69:f9:70:b2:4b:fd:84:2d:48:1c:9e:
3b:05:2a:da:83:b6:88:28:77:43:ca:a7:95:79:32:
06:52:ee:a5:8d:18:39:d1:f4:f7:2c:f4:36:2f:9d:
46:9e:02:70:ee:0a:44:b8:8e:30:25:26:e6:2a:99:
d2:8a:fa:e8:bf:cf:e5:8d:56:de:4a:c4:8a:3d:3b:
ee:af:cf:3f:e8:34:ff:2e:69:e1:ae:b9:cc:00:6a:
fd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AD:6E:FE:F5:4F:1D:ED:D2:FF:A7:53:E4:68:F5:92:AD:7D:6E:A4
X509v3 Authority Key Identifier:
keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/453F8E988DB811E98ACC9F7EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.181.154.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:95:72:26:0d:2f:bb:c0:56:46:8d:56:82:d3:83:16:76:fd:
08:31:70:32:c3:0c:b2:f1:33:37:81:d8:ff:0e:fc:07:be:6c:
81:4b:1e:b1:58:16:0d:c0:12:cb:88:4a:87:ac:75:08:cc:8f:
43:d1:31:3f:d1:af:86:d3:78:7d:71:f7:32:84:5d:b7:22:4d:
a6:21:cc:84:23:09:0d:08:4d:63:46:7b:90:46:3c:18:47:71:
01:e9:a2:7f:6a:dc:97:d6:ff:f6:25:1c:a9:2b:95:1b:6f:3c:
d4:a3:a0:5f:03:c9:57:14:e3:8b:8e:89:7c:98:60:16:f1:3e:
e7:bd:a7:e2:82:92:89:9b:6d:9a:b9:5c:41:33:8e:85:4e:94:
38:32:1f:94:0f:63:60:7f:f1:5f:02:9c:7c:b5:31:5e:64:8c:
71:c9:41:b7:64:51:0e:68:6f:31:f2:a2:cc:eb:14:6e:60:15:
bf:11:bf:0e:1a:9e:0c:9d:8e:8e:e3:01:71:ff:ab:6c:1a:ab:
ba:9e:82:cb:12:4e:ee:13:56:17:a4:e7:43:42:a5:37:48:16:
7b:32:3e:57:0e:30:71:d2:3c:aa:73:a1:81:89:a3:8f:69:3f:
0c:ff:37:c9:96:c4:ba:89:72:14:d2:ab:9f:4c:4e:31:07:1b:
44:b8:bd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:25:01 2025 by rpki-client