
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
File: EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (raw, json)
Hash identifier: iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=
Subject key identifier: 44:27:3D:E1:3F:D1:37:0A:7C:85:51:5A:22:1A:48:94:CA:83:0F:47
Certificate issuer: /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial: AC
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
Signing time: Fri 03 Oct 2025 07:02:31 +0000
ROA not before: Fri 03 Oct 2025 07:02:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149506
IP address blocks: 160.187.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 09:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Validity
Not Before: Oct 3 07:02:31 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68df7507-5c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:8f:37:c4:cd:30:82:f6:a6:5c:e4:40:ac:
17:a5:68:f1:ec:58:e7:b7:ce:a1:39:72:e3:86:77:
90:55:13:a3:9e:75:de:f0:bc:f1:05:d1:93:2a:60:
d8:c9:48:66:85:81:8b:c9:47:9b:95:19:18:38:a7:
e4:2e:7a:23:2c:1e:c5:bb:e5:a7:53:fb:68:53:34:
33:e5:18:b4:c1:24:a9:f2:98:07:99:63:aa:d2:a2:
7f:29:35:92:ef:36:9d:7e:3b:50:f0:59:12:26:f8:
03:57:b5:9e:f5:93:22:83:3c:b7:db:07:88:4d:b9:
ed:be:e6:3e:47:91:e1:d5:4a:2b:09:ce:c6:c7:e4:
31:23:53:6a:b2:bb:93:35:23:b2:33:fe:e7:63:16:
06:e9:36:65:22:fb:e6:3a:a3:4a:05:6d:25:ad:5c:
f6:66:86:50:c4:1a:99:e0:10:f2:cf:03:b2:d5:de:
9f:ec:bc:12:46:ba:68:1c:2d:e2:ac:bc:ad:ce:fa:
74:bb:3d:8c:e8:a3:8e:e7:74:ef:83:f9:a0:e2:6c:
7e:d8:e1:2e:ca:fa:a1:c4:72:5d:22:bb:08:9d:9f:
99:9d:89:63:dd:58:74:54:fa:ef:2a:43:50:bc:c5:
bd:5f:8b:8c:f3:58:d3:af:bb:1f:40:48:6b:5f:13:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:27:3D:E1:3F:D1:37:0A:7C:85:51:5A:22:1A:48:94:CA:83:0F:47
X509v3 Authority Key Identifier:
keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.187.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:9f:16:99:02:bc:f2:c5:bd:bb:b7:1c:88:84:2d:95:12:0a:
d4:d3:ee:80:22:7e:eb:d6:e1:d8:59:5f:b0:70:55:c5:63:8e:
88:89:c6:9d:af:79:b4:7e:7f:32:24:5d:83:93:50:68:3f:12:
62:b0:84:8c:05:cb:8f:bc:b8:c3:41:20:db:d0:e7:89:6d:ef:
90:7d:74:a8:6c:9c:36:a6:5d:a6:5e:44:88:be:9e:59:5b:26:
04:47:e6:a5:2b:51:57:7d:c5:69:f3:9c:a6:20:91:9b:1a:00:
f6:61:7f:9a:ed:aa:14:76:63:8c:b3:bd:16:15:2c:32:25:fd:
e6:41:cb:50:11:50:c3:f3:07:10:82:d8:62:30:cb:9b:0d:8f:
ca:35:de:d1:d5:13:80:4c:9e:33:94:96:14:17:f9:15:50:63:
17:cd:2f:4b:d3:59:d8:f0:3b:a5:70:6c:5d:22:cb:19:43:c7:
3b:54:ca:73:46:db:a1:e1:31:5a:12:d8:30:18:e5:15:4e:b1:
54:ad:91:2f:bc:86:b0:84:ff:7a:d7:b0:5b:cf:f6:15:54:2e:
a1:8d:51:f0:fa:30:96:ac:00:7c:23:40:a4:1a:8d:b0:8c:ee:
8a:bb:da:da:83:b2:5d:a9:8b:f1:56:b5:08:07:a1:89:75:c5:
a6:3c:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:18:52 2025 by rpki-client