
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/364089B4D75511EF80E68A39C4F9AE02.roa
File: 364089B4D75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier: NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=
Subject key identifier: 74:3F:78:ED:10:AF:EA:D3:8B:76:A9:49:DF:30:B7:66:64:2B:C4:D8
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 06EE
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/364089B4D75511EF80E68A39C4F9AE02.roa
Signing time: Wed 02 Jul 2025 22:32:02 +0000
ROA not before: Wed 02 Jul 2025 22:32:02 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 967
IP address blocks: 2401:e9e0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Oct 2025 22:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1774 (0x6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Jul 2 22:32:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6865b361-c19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:9e:12:9d:90:e7:7e:73:30:a3:71:99:ec:
a7:1a:72:d1:09:bc:23:bb:64:0b:52:60:80:21:27:
46:a8:aa:7a:c5:df:16:77:72:84:16:ba:f7:31:a3:
f5:b2:a4:f9:60:e8:dd:3c:f5:94:b0:8a:d8:90:9c:
5b:ac:77:76:54:c3:f5:bf:40:c9:b5:9b:72:fa:ab:
0c:dd:b3:c3:e0:8a:9c:b6:63:0b:15:ca:37:c6:b8:
c6:50:b1:e2:76:e4:1c:95:78:0b:7b:78:55:c0:43:
1b:3a:b9:1a:4d:63:4c:67:70:f1:90:37:8c:16:94:
7c:32:68:62:61:b1:37:20:ca:b8:05:5f:33:a0:84:
40:ff:21:91:37:bf:69:15:48:1c:45:63:35:b5:06:
72:00:c5:22:c4:e2:27:81:58:b6:07:64:bd:97:c6:
9e:04:a0:b8:6f:ba:47:14:36:62:6f:98:ad:44:7e:
2f:21:87:d5:b0:e7:99:8d:51:f5:f0:36:c4:b1:ae:
45:16:31:d5:c7:d8:1a:ce:99:c3:30:60:6f:b8:0e:
47:60:76:72:84:04:66:66:ac:a7:a5:8f:02:7c:8e:
12:aa:89:21:15:de:ff:bb:82:4c:59:a1:57:6a:a8:
71:65:57:08:13:6e:4e:7b:bd:95:98:d1:a2:f5:f1:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3F:78:ED:10:AF:EA:D3:8B:76:A9:49:DF:30:B7:66:64:2B:C4:D8
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/364089B4D75511EF80E68A39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:e9e0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
62:3e:71:51:ba:14:55:9f:b1:92:19:48:59:62:87:26:c8:b6:
04:34:b6:8e:f4:b1:aa:53:d7:4b:11:a5:1b:5c:f5:d9:14:85:
3d:5f:3f:ec:49:32:98:a8:ff:f7:b4:5e:5e:17:04:64:27:9f:
b2:69:f7:fc:0b:75:34:c2:ba:58:7a:fb:76:3a:85:c9:fa:35:
6b:2e:4d:7b:a9:0f:98:1d:b9:73:ee:a8:8e:d9:c9:35:14:f7:
7b:f1:6a:de:74:00:6d:5a:45:15:1c:95:43:f9:da:b6:c8:15:
71:b4:7c:fd:c9:0e:0d:1f:0d:17:63:4b:eb:02:3f:42:c9:25:
65:1c:f8:d3:e5:7e:55:35:62:81:b4:ea:1d:4f:cb:8f:8c:3f:
c2:5f:41:ad:ce:1e:4a:de:a2:65:b4:4c:cf:1a:4d:d6:1d:5f:
cb:a2:cc:36:69:96:22:93:dd:0f:47:27:8d:94:bf:4f:93:a2:
98:76:f1:09:f5:6c:78:1e:dc:19:19:70:3b:81:98:29:c2:58:
b0:b7:89:5e:86:ea:02:51:1a:fb:97:e0:2b:c2:69:93:b5:a6:
fe:5d:02:2b:cf:27:27:0f:df:de:83:06:91:c8:0c:26:16:d0:
83:cb:5a:59:f6:62:78:cb:b5:e2:81:f1:4f:79:da:ea:6d:ee:
58:17:45:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:30:26 2025 by rpki-client