
$ rpki-client -vvf rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/710957A8559411EFA07E1C5AC4F9AE02.roa
File: 710957A8559411EFA07E1C5AC4F9AE02.roa (raw, json)
Hash identifier: kCmrnMtq0oO23W6srUkZmhxFZ7143rIIMei/dep36jM=
Subject key identifier: 13:46:44:A3:D0:91:DD:7B:D2:F4:97:18:F6:5D:C4:AE:2E:83:01:E9
Certificate issuer: /CN=A916DC7C/serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Certificate serial: 8B
Authority key identifier: 08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/710957A8559411EFA07E1C5AC4F9AE02.roa
Signing time: Fri 25 Apr 2025 00:56:07 +0000
ROA not before: Fri 25 Apr 2025 00:56:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136451
IP address blocks: 160.30.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DC7C, serialNumber=08AB5479AAF0C848A5142D6FE4DC99162B45C337
Validity
Not Before: Apr 25 00:56:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=680adda7-cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:73:9d:0c:8c:66:1a:cc:cb:31:07:cd:15:
9a:a3:c7:ae:25:5b:31:47:27:dd:c1:5e:da:f9:60:
fe:f6:ee:0d:b5:10:33:13:e4:4b:3b:f8:ad:84:23:
0a:28:ba:6f:67:28:08:17:93:3f:ae:bd:a4:99:37:
04:c9:06:7f:a6:a0:aa:4d:21:19:9a:ee:18:0f:cc:
25:0e:25:8a:cf:8a:d0:98:b0:f4:89:07:7f:9b:27:
74:44:4e:87:7e:6e:f8:90:33:35:42:10:bc:77:d5:
f3:c3:df:30:2d:b4:f1:bc:16:b8:b4:4d:78:62:75:
1f:e3:b2:de:3e:22:b3:72:c1:b6:50:7b:e4:af:67:
ed:8e:0c:a4:17:2a:07:84:15:c0:5c:af:3a:11:98:
53:0b:40:93:3a:69:1f:2c:37:fe:0d:36:11:c1:70:
c6:55:1a:c3:b8:f1:e2:37:45:da:56:ba:ae:83:79:
fd:ed:9d:24:2b:fd:61:51:9b:ba:1e:2e:3a:ec:e9:
91:ac:d5:ee:94:26:cf:12:e3:0e:56:a8:65:e3:6d:
14:73:80:05:9b:72:24:d0:d3:b0:eb:5e:18:31:30:
7f:fb:80:4e:06:b8:e8:a5:60:6a:36:82:b1:17:14:
cb:59:66:0b:f0:2b:56:c0:19:97:e1:f1:ec:8b:6c:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:44:A3:D0:91:DD:7B:D2:F4:97:18:F6:5D:C4:AE:2E:83:01:E9
X509v3 Authority Key Identifier:
keyid:08:AB:54:79:AA:F0:C8:48:A5:14:2D:6F:E4:DC:99:16:2B:45:C3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/CKtUearwyEilFC1v5NyZFitFwzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKtUearwyEilFC1v5NyZFitFwzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DC7C/A4C14628554911EF82B5D36FC4F9AE02/710957A8559411EFA07E1C5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.30.70.0/24
Signature Algorithm: sha256WithRSAEncryption
35:86:73:9a:88:40:fa:22:9c:4f:54:ce:cb:bf:8c:d0:da:df:
7d:f6:80:ef:b1:36:d6:96:67:c4:c4:a8:32:5a:ea:bc:ff:0e:
65:7a:f9:9d:d1:e0:8c:18:7f:2e:89:bc:89:12:4e:99:1c:3c:
5a:3a:b8:56:ed:e3:08:63:cc:04:a4:5f:67:00:54:1b:be:24:
28:17:5e:fd:a3:63:52:bd:87:f6:bf:c0:87:77:8b:ea:89:e8:
e9:90:0a:28:45:c4:44:64:2c:71:a9:85:6a:f3:6d:72:fb:56:
6f:79:08:1f:c3:a1:e3:bf:9d:cb:5d:1d:ab:bb:1f:3b:84:3d:
d6:6d:dc:b0:5d:d9:fc:c4:8a:74:8a:60:b4:a8:e0:d5:f9:2f:
70:42:56:0d:c9:6c:66:a1:3f:8e:37:d4:87:d9:5e:80:0a:0c:
fc:2b:a4:b7:c9:a0:f8:c7:22:66:80:bc:c1:1c:54:47:9a:32:
51:34:71:e7:cc:ef:0f:2a:fb:cc:93:cc:c7:d6:78:40:8e:4c:
77:fe:bb:77:11:be:70:38:44:2b:2b:b5:bd:37:75:e4:df:5b:
18:c1:c9:cb:37:d2:d0:03:c6:26:2b:d3:62:dc:7d:a8:be:3a:
f3:e5:bc:dc:d9:78:2f:9c:ed:cb:29:04:bb:7d:e6:b1:45:c2:
04:56:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:25:06 2025 by rpki-client