
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa
File: B119B7D2D03311EBA12FCF3CC4F9AE02.roa (raw, json)
Hash identifier: vVMb+Mh0+K4YVqpi+DBa8Ml321CNHJvpASTVTLLag2Q=
Subject key identifier: 20:92:75:1D:2B:2D:31:11:3E:3A:A6:5F:8A:C9:40:47:25:17:24:F3
Certificate issuer: /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial: 0EAC
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa
Signing time: Thu 22 May 2025 20:06:59 +0000
ROA not before: Thu 22 May 2025 20:06:59 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142438
IP address blocks: 2406:840:8000::/36 maxlen: 48
2406:840:fef8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:09:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3756 (0xeac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Validity
Not Before: May 22 20:06:59 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=682f83e3-fd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:9d:7d:b1:47:e1:cd:21:67:98:4c:15:7d:
17:65:8a:19:f8:43:99:ab:9e:d8:3b:37:20:3e:a8:
c4:e5:87:c4:88:37:a2:d0:c6:6c:04:2b:d1:ca:a6:
a9:99:2d:49:2a:de:9a:d6:3d:ca:44:a8:9c:47:51:
00:19:48:7f:b6:e7:3a:c7:a2:be:33:1a:cd:c0:b3:
fc:35:be:66:fb:e8:0f:1f:d9:1e:11:92:41:2a:a6:
6a:8a:6d:03:5b:62:d4:56:c0:3c:92:25:cf:6e:ac:
8b:bc:e3:37:9d:9d:3e:a6:50:72:61:c6:01:2f:97:
2c:f9:6d:bd:8a:f0:92:4a:f6:3d:c1:b9:97:c1:c9:
09:8b:24:c4:f3:a5:76:c0:54:8a:71:9a:64:de:8d:
99:a0:1c:56:04:fd:2a:ff:e1:d2:05:2c:05:dc:9d:
35:20:bc:78:d6:56:43:99:c4:95:80:c5:24:6d:32:
9a:b6:70:39:89:7d:5c:df:b0:76:be:ad:3d:06:18:
0b:21:1e:fd:81:30:d1:04:d4:22:81:e8:01:32:24:
93:75:96:8c:7c:0d:ea:b4:33:1e:ff:6b:64:ea:3a:
5c:2e:36:d0:f3:81:86:c4:a3:08:b0:db:e3:97:f9:
14:ef:fb:5b:c9:0a:1d:b6:56:5a:2a:53:51:45:f5:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:75:1D:2B:2D:31:11:3E:3A:A6:5F:8A:C9:40:47:25:17:24:F3
X509v3 Authority Key Identifier:
keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/B119B7D2D03311EBA12FCF3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2406:840:8000::/36
2406:840:fef8::/48
Signature Algorithm: sha256WithRSAEncryption
46:ff:9b:13:e5:b8:b0:6c:47:b2:7e:bd:7d:54:ff:6c:4e:d3:
b1:59:2b:ff:4b:6a:46:17:7d:c0:60:cf:34:eb:7c:c8:79:5d:
1d:a2:fa:83:b4:60:a6:0e:7e:e0:02:53:91:08:85:fe:7e:9c:
5c:c7:7d:71:5b:00:52:b4:7f:11:7b:8d:36:cc:b2:be:4a:8a:
3e:0b:4f:0a:78:0d:9b:bb:6a:9b:b0:47:c8:1e:6c:cd:b3:3e:
fa:89:71:9c:d8:0a:df:e9:bc:ac:06:50:92:2f:e2:cc:57:62:
e8:d5:aa:58:49:fc:ce:4e:8e:96:19:3b:73:e5:d2:b3:56:50:
d7:52:95:5d:38:4d:d1:eb:ac:3d:56:ce:6c:09:73:b3:b8:f6:
9f:43:0e:4b:10:45:61:2e:ce:0b:3e:98:6d:42:3c:1a:70:39:
cb:a5:3c:0b:1e:ae:ce:0e:0e:75:ce:9e:64:9e:5e:8c:8b:c4:
f0:67:cc:ba:9c:4f:5f:8a:7b:91:2a:db:37:c2:20:8c:6f:bf:
3c:af:a2:a6:12:13:35:39:07:93:56:3d:d6:6e:62:86:41:4a:
ac:43:6f:2e:5e:17:8b:7e:67:87:61:63:d0:e1:f2:d8:4c:bf:
5f:9c:34:6c:b5:2c:36:a9:da:69:8d:f6:52:54:e5:0e:3f:6d:
57:0e:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 23:19:03 2025 by rpki-client