
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
File: 76C5842CC3DD11EDAAED714EC4F9AE02.roa (raw, json)
Hash identifier: nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=
Subject key identifier: 0C:37:21:42:CC:69:39:9D:39:76:93:06:36:83:6F:21:A3:30:90:16
Certificate issuer: /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial: 060A
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
Signing time: Wed 30 Jul 2025 23:35:07 +0000
ROA not before: Wed 30 Jul 2025 23:35:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 38829
IP address blocks: 118.127.168.0/21 maxlen: 24
118.127.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1546 (0x60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Validity
Not Before: Jul 30 23:35:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688aac2b-7065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:fb:2a:27:ec:18:e5:bd:50:6b:08:ea:5e:
a2:8d:18:91:92:87:41:db:be:57:f4:c5:ac:7b:d8:
28:ec:e6:ee:b6:9b:30:25:d7:c8:ca:f4:e4:e0:51:
65:6f:da:e2:29:44:75:bf:af:b8:ae:d6:a4:e8:77:
21:10:3e:cd:30:9b:c1:f3:34:4f:8e:7f:be:e7:83:
6d:e9:0f:f3:95:0b:96:f0:e7:c0:7a:62:e0:e4:07:
e0:56:18:c8:d6:6e:5b:0a:67:cb:16:bd:bf:fc:6f:
67:b8:01:1b:83:3c:e1:09:a9:e1:26:c1:cb:1a:79:
62:96:6b:c6:52:f6:97:ba:0a:6d:a3:9f:23:2f:68:
bb:03:d1:ab:f0:e6:99:5a:75:2a:32:0b:8b:46:00:
ca:c8:8a:e2:6b:28:17:80:3b:db:4d:21:2a:f4:87:
03:07:89:97:82:80:f1:10:d5:73:6e:56:2b:35:7d:
c5:8c:4a:93:ce:34:30:a8:d4:57:9f:cb:74:39:2c:
ab:5c:16:3d:49:29:34:08:3d:5f:64:15:05:dc:04:
aa:c2:67:25:16:0f:51:e8:d3:c3:81:97:ff:db:7d:
c2:84:1c:91:58:80:c6:b6:b0:08:a2:9a:9f:47:db:
13:ee:6b:f9:de:6a:5c:6b:50:09:a7:d5:f2:eb:e8:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:37:21:42:CC:69:39:9D:39:76:93:06:36:83:6F:21:A3:30:90:16
X509v3 Authority Key Identifier:
keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.127.168.0-118.127.191.255
Signature Algorithm: sha256WithRSAEncryption
56:36:bd:d5:17:6b:60:2b:e7:19:75:ce:d7:60:1a:e5:9c:6d:
1e:b3:19:20:28:87:55:c0:37:c9:68:5c:86:35:09:87:7c:d7:
99:91:08:a8:5c:c2:ae:c6:28:85:28:ce:79:2b:0b:ec:d6:64:
02:27:31:83:b5:c8:dc:1a:96:4a:5b:56:66:aa:43:8b:b2:52:
d2:62:a9:74:11:d7:29:d4:79:79:ff:29:c6:fc:63:25:ee:34:
de:45:68:7f:b2:ac:d3:80:78:81:bf:3e:0a:da:d0:4c:0a:93:
e0:0d:1d:a3:dd:ac:b5:2c:02:8b:a4:71:c7:79:3a:bb:3c:41:
0d:48:94:b3:1e:9c:09:ce:5a:31:4f:2b:83:8a:6e:3e:98:e4:
c9:5c:a1:04:cc:8b:c0:8c:d8:d4:ff:62:fc:8e:10:03:91:b2:
96:28:57:e3:64:f0:0e:75:ee:fa:c1:e9:31:0d:fa:0c:4a:62:
62:13:68:64:bf:b5:15:55:c3:b3:3d:96:38:0f:f4:0d:f4:42:
03:80:0a:5b:be:91:60:d0:19:f7:e2:61:cd:8a:1f:ee:ec:81:
eb:ac:8b:01:63:3f:9b:70:c2:2e:65:1a:7e:77:e9:51:44:ae:
5e:63:e4:d2:ca:86:6f:d6:74:42:77:10:c5:5d:63:9c:29:71:
5f:af:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:38:56 2025 by rpki-client