
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
File: B1B36E8A691911F08409AD61C4F9AE02.roa (raw, json)
Hash identifier: MstGvfkW4GBYfFu6ex+YssVwSg/+x1eym31kTHP8Xuc=
Subject key identifier: 83:E9:FC:D0:E0:7A:AE:E0:DD:E5:C4:99:47:0B:C3:C0:2A:EA:41:C6
Certificate issuer: /CN=A918A2D9/serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Certificate serial: 02
Authority key identifier: 7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
Signing time: Fri 25 Jul 2025 05:39:13 +0000
ROA not before: Fri 25 Jul 2025 05:39:13 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 154083
IP address blocks: 2402:1c60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 07:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A2D9, serialNumber=7C2CA1783093A9B9AF8EE457DA0948824215250B
Validity
Not Before: Jul 25 05:39:13 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68831880-53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:04:9a:34:fe:61:e4:77:75:ed:03:e0:5e:
45:85:7e:37:61:28:76:2e:65:e0:8f:c2:00:1c:5a:
d6:e2:2f:67:54:9e:f2:8f:a5:e8:3d:eb:e5:d9:ab:
02:3d:8b:0f:cd:32:24:cc:5b:77:5f:5b:96:67:d7:
25:7d:6d:62:fb:4a:d0:a4:8f:ce:e6:a4:b1:dd:c7:
38:74:a0:45:80:39:02:90:df:fe:33:54:87:19:40:
3c:ee:69:f3:0e:63:88:3a:da:4c:b4:1a:b5:47:4e:
d1:aa:a8:26:69:1f:c9:61:f6:46:92:5b:4d:10:43:
c9:84:17:32:0a:ad:4e:26:e1:2d:28:bf:7f:60:7c:
cd:65:6f:65:87:44:f3:65:9b:50:3d:a9:0d:48:a0:
77:d1:2e:b4:6e:1e:b5:1a:36:11:4f:7d:ef:2a:46:
af:e5:c5:98:62:a0:43:2f:bb:8d:41:1d:63:53:32:
2b:f1:a1:ed:0c:98:d6:9f:a8:6b:a1:a6:22:55:bb:
00:ca:e3:2c:0d:94:3a:a0:56:d1:7f:75:72:03:6f:
c6:92:21:2a:f7:cd:f5:59:f4:86:b0:c5:85:9a:41:
63:ee:0d:d5:c2:07:f6:2a:6c:a4:41:55:f7:58:0e:
2d:79:20:45:b0:e6:c6:68:31:be:1e:1f:d1:37:8b:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E9:FC:D0:E0:7A:AE:E0:DD:E5:C4:99:47:0B:C3:C0:2A:EA:41:C6
X509v3 Authority Key Identifier:
keyid:7C:2C:A1:78:30:93:A9:B9:AF:8E:E4:57:DA:09:48:82:42:15:25:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/fCyheDCTqbmvjuRX2glIgkIVJQs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCyheDCTqbmvjuRX2glIgkIVJQs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/F2966688691811F0A10F8B5FC4F9AE02/B1B36E8A691911F08409AD61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:1c60::/32
Signature Algorithm: sha256WithRSAEncryption
5f:2f:38:62:f5:1c:8c:b1:0f:ed:27:c5:c8:ec:57:3a:7f:63:
0d:3a:85:55:5f:91:ae:d1:27:cf:49:51:d4:b6:35:57:1e:2b:
1c:33:86:b4:6f:d9:f9:ab:5c:8b:41:a9:8a:0a:cd:67:ed:2c:
25:19:9e:96:94:ef:c1:09:dc:4c:aa:e0:4b:d6:06:9f:6d:fc:
36:19:90:ad:e8:0d:1e:da:10:0a:cf:bb:eb:4d:1a:39:b8:96:
91:27:68:5e:e9:49:b5:41:c3:78:80:c5:86:f2:3b:86:38:46:
fc:ea:26:e9:4c:2e:5d:d1:5b:a6:ab:d7:b6:11:91:dd:6e:3b:
eb:a6:53:65:eb:47:6f:62:de:48:25:d4:d9:a2:1d:4d:86:bd:
77:61:05:0c:f5:de:6f:d3:78:2b:c5:27:4d:03:c0:d8:a7:ec:
73:46:b0:fe:3d:e0:dc:9b:97:52:bc:04:1f:86:9e:0c:96:6d:
f1:7e:34:e4:d8:1e:13:c3:2a:ea:29:93:57:e4:cd:12:42:94:
d7:fd:5e:0c:f2:2e:63:14:7e:d9:e0:42:d0:63:36:50:86:2e:
f3:6b:20:8c:e4:19:47:5b:93:c5:d4:e3:87:67:e2:e1:e9:4e:
71:b1:bb:e4:1b:2b:c6:7e:09:e2:1a:18:65:e7:58:ae:ee:b3:
94:bf:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:10:23 2025 by rpki-client