
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
File: 68005612A19211EF9444186DC4F9AE02.roa (raw, json)
Hash identifier: I8WaXI8yHGLpuVw4P8ETRUbWjO9zaTONFtyBe4x2ewE=
Subject key identifier: 73:3F:E6:D9:78:87:C3:37:99:F0:11:89:65:B8:E4:5A:90:B3:AB:DC
Certificate issuer: /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial: 0138
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
Signing time: Fri 31 Oct 2025 01:17:41 +0000
ROA not before: Fri 31 Oct 2025 01:17:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38220
IP address blocks: 202.27.206.0/24 maxlen: 24
202.27.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Validity
Not Before: Oct 31 01:17:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69040e35-b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:59:ad:99:92:85:65:45:26:db:fa:84:2b:
21:97:0c:dc:91:fc:cf:0e:74:89:40:e2:45:4e:2d:
6e:53:0a:95:2b:85:f4:c8:7b:93:cc:37:f9:76:9b:
f2:2c:cf:d8:c6:12:d2:f2:0b:d6:54:d3:5e:e2:c1:
c9:a3:da:a5:fa:84:ae:72:09:7e:57:51:6b:81:b3:
dc:f6:7f:3b:c6:7c:2e:4d:c7:83:96:b2:ab:51:c6:
ea:b4:98:5c:22:35:9b:f6:c6:01:4b:d9:f7:8b:b3:
21:19:65:66:80:25:b5:33:bb:a7:e2:ab:ec:76:32:
fc:64:5f:6a:f7:57:58:64:9f:4d:77:fd:9c:30:87:
9a:67:d7:ce:26:3a:0c:69:bf:19:54:59:c9:49:81:
f3:a5:02:10:49:f2:45:57:b9:58:33:7e:1d:be:cb:
60:58:5f:d2:0a:85:3a:6f:d3:08:fb:b4:07:a6:63:
b6:53:1e:42:fe:37:b5:93:c5:51:b1:82:53:a9:a6:
13:8f:5a:17:a9:12:bb:8e:1a:6a:f3:19:60:07:32:
c1:2f:bb:e7:f9:23:46:06:1c:13:77:78:c3:45:17:
cf:d9:fd:24:ab:86:4d:ce:ce:f2:14:0c:a3:b3:4f:
4b:ff:92:2f:ad:b0:3b:b2:58:c5:cc:4f:f2:85:3d:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:E6:D9:78:87:C3:37:99:F0:11:89:65:B8:E4:5A:90:B3:AB:DC
X509v3 Authority Key Identifier:
keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/68005612A19211EF9444186DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.27.206.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:5c:1c:52:73:7d:0b:bc:ac:0e:e8:7e:f1:b3:bd:e8:0b:96:
a0:ed:b0:e6:c2:42:e7:fa:b2:97:99:4f:70:3b:d1:d7:81:4c:
62:25:4c:7f:1b:cc:0b:8b:1a:69:28:05:eb:05:76:48:a2:c8:
95:44:2e:d6:09:8b:d4:3f:79:33:a1:d3:85:37:5b:5b:76:3d:
f7:4b:29:f7:de:ab:5c:d3:2f:62:5a:e1:d9:d9:1b:de:71:08:
2f:e2:21:ac:80:fe:63:32:5a:37:cf:db:bc:42:08:20:9b:d3:
be:e1:0e:ff:bc:b6:c6:ac:5a:68:3d:b4:7c:58:a9:75:ac:db:
a5:fe:02:fe:a7:cf:d1:ea:46:1e:4e:b3:6e:4d:a6:b8:e7:9b:
64:c4:d5:ea:2a:aa:86:50:96:21:7f:9a:c9:fb:0f:69:45:ff:
10:0c:63:9a:da:3e:fc:64:c0:f0:45:27:db:29:e0:f4:b1:49:
f7:7d:a1:ad:2f:0a:99:cc:5e:1d:cd:b9:0a:96:2e:c2:38:20:
0a:d5:92:48:56:71:b7:5c:53:42:d6:4a:b3:e7:89:7a:d2:03:
8c:69:37:f4:aa:6c:0c:9d:ed:95:36:57:a3:49:5d:2c:56:b0:
ad:43:b5:bd:b5:0d:53:da:5d:cf:db:f4:f6:1a:76:8b:fb:a4:
e9:00:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:59 2025 by rpki-client