
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa
File: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (raw, json)
Hash identifier: +SD5oyeqwCVbJIR3Rca7WRwH9ic0DsTEAz6kXO4nmEw=
Subject key identifier: 25:6A:30:82:AD:49:3D:A9:0E:3E:2A:5F:C8:62:39:EE:A9:CD:2A:4D
Certificate issuer: /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial: 0421
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa
Signing time: Tue 01 Jul 2025 01:06:19 +0000
ROA not before: Tue 01 Jul 2025 01:06:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 147179
IP address blocks: 45.248.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 00:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Validity
Not Before: Jul 1 01:06:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6863348b-993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:15:41:5f:86:63:16:b3:88:61:57:d9:3c:
b6:ab:9a:95:74:4d:cb:ff:48:a9:38:12:e1:b6:86:
47:51:99:dc:ea:ca:ed:be:46:a2:4a:84:55:66:bc:
75:e5:36:f8:1b:3d:fc:5c:19:32:e8:9f:10:f1:d4:
64:79:2f:c8:0f:35:83:af:66:e6:56:fc:15:d9:52:
51:c7:b2:6b:8e:82:5a:31:44:1d:e6:58:c9:05:c8:
b3:1b:93:b1:c3:d3:db:f1:b7:0a:22:9d:31:76:b4:
8e:c5:9f:46:01:65:27:f7:d8:96:6f:48:bb:41:eb:
f2:24:ec:3b:94:5c:0f:a2:b5:02:ef:bd:0b:8a:04:
14:58:ea:de:35:80:9f:fe:50:9d:4f:77:3f:6d:28:
f6:10:d1:db:46:bc:7d:15:1c:97:53:e9:ee:d9:96:
5c:a9:fb:54:2f:e6:ae:81:19:47:b7:b3:da:ee:52:
c8:cc:30:b3:56:4d:8c:67:34:04:82:02:c9:1f:b2:
c7:16:69:63:7c:26:b1:04:cc:46:cb:02:7f:e7:69:
31:08:50:ec:c2:c6:6b:5f:d3:ea:cc:e6:42:70:89:
fa:37:16:eb:a3:d0:70:18:f1:5e:1b:eb:13:1a:55:
9f:14:8f:25:18:19:ea:ac:87:12:66:ff:fe:25:1e:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6A:30:82:AD:49:3D:A9:0E:3E:2A:5F:C8:62:39:EE:A9:CD:2A:4D
X509v3 Authority Key Identifier:
keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/D694BD82DBBA11EEB4125A3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d0:78:81:3f:86:66:bf:e4:58:43:de:04:a1:f3:f4:ce:91:
a0:79:ed:8f:77:60:8e:73:af:80:7a:5e:81:c8:62:27:fa:82:
22:04:1b:bd:d2:33:fc:15:f9:c7:6a:d1:b8:1e:0c:02:35:4d:
31:1f:82:ac:19:a3:ab:61:31:2f:f1:2e:b0:fb:bd:4c:cd:4b:
bf:15:a4:9e:c5:3e:10:e1:9a:75:33:e4:77:d8:ab:c2:53:61:
89:8d:3d:fa:39:56:a4:6e:6f:e0:38:c4:72:10:b4:6e:55:d4:
a5:b0:49:52:31:7a:ef:3f:24:e7:2e:9b:d5:47:d3:74:06:7a:
2e:75:0a:d2:ae:f4:1c:84:9b:05:0f:1b:51:03:b3:b5:e9:3a:
f4:0a:12:ca:15:65:ed:fc:d7:04:ad:96:ba:08:2e:7b:0c:c5:
cd:2d:92:78:6d:49:18:61:5f:23:3a:c7:28:c4:0d:a0:dc:b3:
57:91:b1:2c:9a:92:9e:c5:d4:1c:f3:cf:29:d5:a9:d3:63:15:
eb:9c:f0:e0:19:90:5b:fd:4a:70:ca:d9:01:9f:b5:a4:11:dc:
c3:54:33:92:35:62:8b:39:ac:be:88:2f:e1:c6:3b:cc:70:c4:
14:d5:f7:e2:6d:3f:81:b4:12:78:7c:45:30:23:af:f0:9d:00:
14:eb:8f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 13:28:36 2025 by rpki-client