
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa
File: 6F09FF784B3111F0AED6945EC4F9AE02.roa (raw, json)
Hash identifier: I1sNkwrJ9A9oI4DVJU2qBgFfehpgUx5dO53gjYthp7w=
Subject key identifier: 0E:B8:7E:4D:A0:37:45:22:4E:A0:E9:EB:82:C8:5D:7F:62:9D:64:69
Certificate issuer: /CN=A9185B6D/serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Certificate serial: ED
Authority key identifier: 8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa
Signing time: Tue 17 Jun 2025 04:13:34 +0000
ROA not before: Tue 17 Jun 2025 04:13:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 152459
IP address blocks: 2401:7d60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237 (0xed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185B6D, serialNumber=8E02B5C4DEB53F2B712FF077DE04908375E813DB
Validity
Not Before: Jun 17 04:13:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=6850eb6d-481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:ac:6d:18:6c:2d:7d:bd:36:36:75:00:47:
d2:28:7f:ce:90:10:fa:74:46:bb:48:8c:05:b1:3a:
c8:59:23:5c:d0:d3:95:39:7c:68:62:3c:17:38:f8:
7e:7d:31:20:9f:8c:ae:dd:3e:ab:04:69:18:f3:ab:
2f:29:4d:fb:99:4f:22:7c:1d:a5:43:1a:2f:a2:50:
a3:bc:12:8e:e7:58:d6:77:aa:00:ca:93:d7:85:77:
f6:69:80:dc:17:3b:62:17:f1:c6:8a:62:1d:98:e8:
27:69:a3:d3:f5:c1:16:a4:94:e8:64:58:71:d4:06:
ab:73:4a:ec:e7:1a:a0:cd:4a:cc:37:69:6d:ac:61:
cb:4a:f3:f3:9e:cb:2e:b9:5a:f3:63:a7:f9:34:43:
01:f5:40:84:5a:04:a0:65:e9:cf:42:69:71:23:08:
4f:a5:ab:8c:8f:16:12:5b:e4:2c:c7:0d:88:41:1c:
ff:67:be:8a:d7:06:0e:f2:fb:01:c8:c1:b7:5e:3a:
99:ff:a6:2e:92:6a:ce:37:dc:93:61:f2:e2:0a:40:
ad:28:5f:68:7c:47:19:40:30:b0:40:22:ee:e4:56:
f7:39:7b:b1:4f:13:b8:e5:8d:29:dc:47:70:f3:c5:
f5:2e:3d:24:78:b1:6d:97:71:61:6c:8d:52:71:cc:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B8:7E:4D:A0:37:45:22:4E:A0:E9:EB:82:C8:5D:7F:62:9D:64:69
X509v3 Authority Key Identifier:
keyid:8E:02:B5:C4:DE:B5:3F:2B:71:2F:F0:77:DE:04:90:83:75:E8:13:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/jgK1xN61PytxL_B33gSQg3XoE9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jgK1xN61PytxL_B33gSQg3XoE9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/21522182E78E11EE9831EB7EC4F9AE02/6F09FF784B3111F0AED6945EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:7d60::/32
Signature Algorithm: sha256WithRSAEncryption
bd:cb:42:37:40:cb:db:32:16:6a:dc:8b:58:4a:ae:ff:b5:fc:
ec:f6:87:f1:24:e5:e3:1d:8c:71:0c:ef:72:c6:2d:e5:16:6f:
d5:fa:65:47:76:71:60:50:53:49:ed:9e:b1:fb:71:cc:9e:9c:
9a:19:e2:a1:10:d8:91:9a:6c:1a:9f:eb:1a:63:e3:b4:dd:f8:
84:bb:a5:3e:14:ed:3e:85:94:83:bc:7b:f2:68:79:6e:65:e5:
c9:da:7b:a5:3f:d4:80:f9:bc:fc:ec:0e:a7:53:56:cc:ed:85:
f4:89:2d:6c:a3:8e:54:2d:73:a1:b4:1e:4a:bc:ac:4c:b7:3e:
65:b7:51:c4:71:63:d6:75:46:6f:83:e3:b0:3c:1d:5f:0e:82:
04:39:cc:5c:43:64:e4:d9:8a:b0:2f:b9:a5:47:2f:98:28:aa:
4f:c3:05:f7:39:66:35:79:c5:93:af:c2:e9:68:ce:05:ff:6d:
d1:c2:0a:71:90:59:93:df:83:2c:ea:ac:97:24:56:1b:81:68:
53:7b:f4:d6:1e:5f:d0:66:62:7f:4f:ae:81:b5:22:8b:e8:4f:
33:1c:4e:30:9b:c0:91:4e:1a:06:67:d6:c8:24:6c:e1:01:c4:
11:50:fb:a4:dc:4b:83:fc:c4:47:74:4f:a7:1b:34:c8:89:63:
aa:9c:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:35:43 2025 by rpki-client