
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/8F32CF70B52911F0A8B8B043C4F9AE02.roa
File: 8F32CF70B52911F0A8B8B043C4F9AE02.roa (raw, json)
Hash identifier: vUmHCD78RedRd12UP8mqfZgdiHuJBLp1eyOnA5nPDjA=
Subject key identifier: F1:A9:F4:44:DB:A9:ED:F6:49:D2:71:3A:50:86:5B:13:3C:B3:5C:2B
Certificate issuer: /CN=A9192A47/serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Certificate serial: A6
Authority key identifier: A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/8F32CF70B52911F0A8B8B043C4F9AE02.roa
Signing time: Thu 30 Oct 2025 00:44:15 +0000
ROA not before: Thu 30 Oct 2025 00:44:15 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 15695
IP address blocks: 2404:e00:853::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=A86E5D40AA1529D4FF22B32C4E93006D0FA2CA74
Validity
Not Before: Oct 30 00:44:15 2025 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6902b4df-5b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:e8:71:95:5a:a7:dc:f1:d6:b7:5a:18:52:
38:01:2e:f2:da:36:a9:dd:51:38:e5:ec:5e:c0:2d:
a6:fa:29:9a:ca:2e:7d:17:5d:cd:ab:ce:aa:ef:27:
e1:3b:01:5d:3b:21:21:67:2e:3a:d2:dc:41:d2:03:
ae:7e:d8:d6:64:2a:9c:ae:50:99:e7:06:88:89:2b:
a7:e9:33:56:4a:25:79:55:a7:71:e2:af:5a:7a:1c:
da:5e:9c:83:7f:ed:5e:85:53:41:d1:8c:82:11:2e:
21:49:6c:a7:f7:fb:80:30:b2:a3:60:df:8a:41:65:
6d:5f:fd:1c:82:59:96:4d:6d:83:fb:41:7a:c8:4c:
a0:b6:11:66:55:48:e1:f0:4a:e8:ec:a5:71:04:c1:
ca:cb:34:33:86:de:77:0a:0e:cf:ae:36:fb:a5:52:
7d:66:40:04:88:19:4d:31:fc:5f:ea:c8:2b:5b:73:
0c:26:96:c0:68:da:6b:f0:ad:e3:1a:5a:99:51:e3:
1f:e0:5c:6f:6b:6b:b6:ff:10:3d:19:99:ca:f2:7f:
7e:9c:85:58:2e:32:d2:28:bb:f3:1c:81:a3:b5:9d:
af:15:33:c9:20:51:7f:74:32:45:f4:35:cf:f7:bc:
0e:4c:5e:d3:82:ff:27:1d:c3:a9:52:11:41:20:c1:
bb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A9:F4:44:DB:A9:ED:F6:49:D2:71:3A:50:86:5B:13:3C:B3:5C:2B
X509v3 Authority Key Identifier:
keyid:A8:6E:5D:40:AA:15:29:D4:FF:22:B3:2C:4E:93:00:6D:0F:A2:CA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qG5dQKoVKdT_IrMsTpMAbQ-iynQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/EEB94D72B82011EFAAE6F567C4F9AE02/8F32CF70B52911F0A8B8B043C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:e00:853::/48
Signature Algorithm: sha256WithRSAEncryption
bb:e9:1b:a0:dd:6e:05:d3:8f:47:bc:ce:36:65:82:91:b0:ef:
87:53:40:3f:b0:5a:4e:27:54:ab:b6:47:ec:f8:92:f5:97:2a:
ff:08:ec:e3:47:9f:8b:92:14:2d:73:35:8a:fb:93:53:cb:f0:
a0:b6:3c:20:51:aa:0d:55:a3:43:86:a6:46:01:a5:50:ff:c7:
d9:83:32:80:62:42:10:90:bf:28:08:5a:a5:c9:81:f4:c4:fe:
dd:13:6b:24:c4:0e:72:72:77:4d:6d:a0:4e:75:14:cd:bc:e6:
f9:e2:b8:31:7f:6b:b0:a2:2e:64:bb:8e:59:68:58:4a:85:18:
ec:3e:88:58:a3:0d:5d:77:8a:c3:dd:ec:f6:be:d3:44:6f:27:
c8:60:75:03:ad:56:27:86:8d:cb:d2:ed:29:8d:e6:f7:3a:d9:
67:b4:83:3a:f0:12:d2:d0:a4:bf:f1:08:0e:c0:7d:38:80:09:
de:6b:73:9b:0c:78:3d:78:47:79:d8:7a:0e:b3:7c:c1:2b:3c:
62:32:7e:93:0c:fd:7b:df:da:1c:49:d5:58:56:8f:ab:b0:a0:
7d:ce:7f:d7:14:6b:30:78:bb:bd:e5:58:9f:82:b3:51:5e:6e:
5d:3f:70:5a:00:ae:b6:fa:5d:9f:fa:40:a0:32:88:d9:b0:ec:
b6:1f:c6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:51 2025 by rpki-client