
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
File: B2690D6CCA5511EE9683413FC4F9AE02.roa (raw, json)
Hash identifier: YWkTzReKkMMdzbtmiqQAlufg4yqGT8wGaWwSjyH8UQU=
Subject key identifier: 2F:F8:BD:28:D4:79:1D:7B:7C:8D:32:30:25:72:EA:FC:C8:B9:BD:F0
Certificate issuer: /CN=A919EFDE/serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Certificate serial: 3567
Authority key identifier: 96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
Signing time: Fri 24 Oct 2025 14:30:25 +0000
ROA not before: Fri 24 Oct 2025 14:30:25 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151981
IP address blocks: 118.179.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 14:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13671 (0x3567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EFDE, serialNumber=9669CD5B3D8735815A65D659F2741B43E64732B2
Validity
Not Before: Oct 24 14:30:25 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68fb8d81-915e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:07:28:5d:76:1c:0b:5e:c3:e9:41:e8:51:
00:43:ff:fd:f2:d3:40:91:96:1e:f3:14:d5:ac:40:
b9:84:a6:26:9f:f5:6b:1a:47:e8:82:f2:4a:01:57:
46:cb:ed:a5:9b:af:15:97:94:b4:4c:8c:ff:8c:f6:
19:e0:54:d1:d3:38:cd:17:05:94:f1:7f:50:62:96:
f7:57:e8:3f:19:9b:d4:c5:1a:bd:22:11:e1:c5:45:
48:99:2c:bd:5d:fd:6e:3b:fb:75:27:19:8f:0e:5e:
38:bc:04:65:c5:2d:b5:7d:8e:7b:e8:35:92:9d:9e:
bc:e5:4d:cf:86:3d:a6:c5:79:b5:6e:9a:5b:1d:63:
9e:0b:81:c5:b3:0d:27:df:5b:a2:a4:ee:43:5f:ed:
fe:0a:1f:1e:00:2a:26:a8:f1:cf:4c:c3:aa:0e:9f:
1b:09:8e:71:f0:c5:45:4c:08:1e:fd:b0:6b:89:9d:
07:28:7c:23:3e:ea:4d:03:0c:65:5a:30:dd:56:81:
78:17:b6:18:d1:fd:7a:58:5c:8b:18:d6:7e:c9:4e:
cd:ab:a2:b5:c2:25:b0:36:63:7d:ec:2a:28:47:a0:
0f:08:df:0a:0b:7c:11:b2:53:4e:c9:c0:24:f2:d0:
51:f2:fc:46:7d:84:15:39:15:0f:d0:15:82:17:bd:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F8:BD:28:D4:79:1D:7B:7C:8D:32:30:25:72:EA:FC:C8:B9:BD:F0
X509v3 Authority Key Identifier:
keyid:96:69:CD:5B:3D:87:35:81:5A:65:D6:59:F2:74:1B:43:E6:47:32:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lmnNWz2HNYFaZdZZ8nQbQ-ZHMrI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFDE/CC45ECA81D8411E2956D03DB08B02CD2/B2690D6CCA5511EE9683413FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.179.57.0/24
Signature Algorithm: sha256WithRSAEncryption
77:61:f9:17:f8:73:c3:f9:33:5c:e9:bd:22:c8:78:90:99:45:
0b:c5:7f:2a:d9:2b:74:10:b0:16:17:5b:70:05:04:33:72:b9:
cf:7f:6f:92:b1:9b:f2:8a:f7:79:96:73:e7:43:3b:f9:f8:6b:
a5:d1:89:1e:3e:dc:ba:5d:29:2f:be:82:63:4e:7c:6c:7f:22:
4d:ef:83:a3:a8:a8:c8:c8:e8:2b:ce:38:a6:c6:89:3a:d5:02:
0b:3d:34:b5:b7:1f:18:f7:17:70:27:c4:95:71:00:ef:5a:ea:
09:52:75:ef:94:8d:0f:c4:1e:ec:3f:4e:1c:33:78:ef:a3:91:
de:e9:25:ce:64:76:1f:ad:64:52:b8:c1:c0:b8:f0:29:31:ae:
fd:76:4d:c6:b7:1f:38:70:6b:b3:11:5d:80:bc:36:47:07:fb:
ae:cf:97:51:e8:9d:06:1b:11:3d:97:89:b2:4c:62:6e:e8:40:
fb:e9:9e:2d:7f:3f:45:21:5b:5b:71:ac:bd:18:c5:29:58:98:
ca:ee:69:a9:51:0c:9a:04:ee:a8:c1:8c:2c:f0:8d:12:3d:7e:
f7:21:3e:31:71:84:61:7d:65:47:40:41:16:88:58:39:f2:9c:
0a:7e:ae:30:5c:a5:6b:53:1f:26:2a:df:c9:1e:98:d9:22:dc:
c1:dc:39:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:09 2025 by rpki-client