
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
File: E727A05600FD11EB9286115AC4F9AE02.roa (raw, json)
Hash identifier: MzWbilqvJU/bA0pbUK90+TSc+f/XjXTcVvnJOFhs0gQ=
Subject key identifier: 7E:55:85:41:4C:89:5C:11:47:07:3C:B8:CA:A0:61:04:0A:94:F8:DE
Certificate issuer: /CN=A91D9162/serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Certificate serial: 0D65
Authority key identifier: 84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
Signing time: Fri 31 Oct 2025 18:36:28 +0000
ROA not before: Fri 31 Oct 2025 18:36:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24341
IP address blocks: 180.178.120.0/24 maxlen: 24
180.178.121.0/24 maxlen: 24
180.178.122.0/24 maxlen: 24
180.178.123.0/24 maxlen: 24
2401:8180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3429 (0xd65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9162, serialNumber=84774F46B6920A05DADD42477BAAB36EE7246B94
Validity
Not Before: Oct 31 18:36:28 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690501ab-0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:32:ea:25:3c:e5:14:79:29:9b:ae:b9:65:
c9:b7:c5:c1:88:33:be:fc:93:bf:30:b3:ca:a7:d0:
62:2f:79:c6:b8:77:13:a6:50:c3:f2:0a:41:28:53:
f3:dc:70:50:9c:92:f2:17:97:78:dc:5f:3b:02:6d:
44:6e:55:48:37:a7:1d:8c:74:b2:d7:a4:4c:3a:76:
cf:52:2e:6a:60:81:b0:ad:f3:b4:21:10:3a:21:1d:
45:3e:6e:4e:e6:7c:d7:0d:e6:7d:c8:2e:78:02:4c:
63:84:d2:31:ee:f4:c4:d0:88:b0:c0:8a:fa:16:78:
aa:ae:c2:21:26:75:19:25:21:db:2d:65:0a:2d:a8:
64:5f:4d:37:b0:93:e8:5a:1c:5e:d5:50:aa:df:c7:
97:b4:b7:83:98:66:46:41:91:49:2b:b0:37:10:62:
1a:7f:66:27:a2:98:40:f4:18:52:a7:01:22:50:65:
7c:fe:23:18:70:0e:47:96:48:f6:33:b4:25:ce:44:
b9:b5:a7:cb:64:c4:79:6b:50:c2:9d:3a:17:07:10:
ca:89:2b:92:d4:69:0e:b8:d1:b2:e4:37:52:52:96:
93:c6:18:df:df:38:11:51:fa:e0:53:2e:ca:49:d7:
4b:8e:08:27:23:5f:e4:ac:22:3e:2b:e0:ac:5a:fb:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:55:85:41:4C:89:5C:11:47:07:3C:B8:CA:A0:61:04:0A:94:F8:DE
X509v3 Authority Key Identifier:
keyid:84:77:4F:46:B6:92:0A:05:DA:DD:42:47:7B:AA:B3:6E:E7:24:6B:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/hHdPRraSCgXa3UJHe6qzbucka5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHdPRraSCgXa3UJHe6qzbucka5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9162/26A82E0ADDC111E9984DE811C4F9AE02/E727A05600FD11EB9286115AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.178.120.0/22
IPv6:
2401:8180::/32
Signature Algorithm: sha256WithRSAEncryption
72:b1:95:c4:9d:f5:1a:3e:a2:43:7e:89:42:40:dd:7a:e5:ab:
04:67:0d:2f:2e:e9:be:1e:ee:86:b5:9a:60:16:9f:57:b0:5e:
29:c8:c8:56:ba:12:d1:26:de:b2:17:51:0c:ca:4b:88:42:59:
ae:8d:99:fb:8b:a1:7b:74:ed:63:61:e8:4b:ec:9b:97:68:dd:
06:2f:73:94:d2:c2:18:93:1a:b0:f9:d0:90:fb:f9:d5:cc:01:
6d:a5:a8:71:60:42:79:e7:cb:9a:3c:1a:80:33:16:c1:ec:c8:
bd:78:1f:2e:d7:e2:fa:ee:54:02:3c:ec:73:17:ae:e1:5f:7d:
49:1b:7d:dd:7d:16:41:ae:14:d6:62:92:55:b8:e7:0a:66:a1:
d6:bd:e4:27:71:ce:77:e1:be:75:7d:fb:b3:37:e1:3e:4f:8e:
22:32:08:2f:a7:3f:86:b9:28:2a:57:32:23:86:d9:18:d7:f7:
79:97:3f:c0:33:21:21:d3:e5:bd:3f:29:e3:a5:63:46:6e:e6:
86:98:6d:24:0e:15:c3:e0:9d:8d:8e:d9:85:38:06:4e:a9:d4:
07:33:88:98:62:cf:f0:d1:a2:5c:59:e9:9a:e2:1a:db:ae:7f:
03:e2:93:78:3a:18:d0:a1:5e:16:27:93:f7:cd:95:96:3f:12:
ef:7e:20:7e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDkxNjIxMTAvBgNVBAUTKDg0Nzc0RjQ2QjY5MjBBMDVEQURENDI0NzdCQUFCMzZF
RTcyNDZCOTQwHhcNMjUxMDMxMTgzNjI4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA1MDFhYi0wMDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQwy6iU85RR5KZuuuWXJt8XBiDO+/JO/MLPKp9BiL3nGuHcTplDD8gpBKFPz
3HBQnJLyF5d43F87Am1EblVIN6cdjHSy16RMOnbPUi5qYIGwrfO0IRA6IR1FPm5O
5nzXDeZ9yC54AkxjhNIx7vTE0IiwwIr6FniqrsIhJnUZJSHbLWUKLahkX003sJPo
Whxe1VCq38eXtLeDmGZGQZFJK7A3EGIaf2YnophA9BhSpwEiUGV8/iMYcA5Hlkj2
M7QlzkS5tafLZMR5a1DCnToXBxDKiSuS1GkOuNGy5DdSUpaTxhjf3zgRUfrgUy7K
SddLjggnI1/krCI+K+CsWvuHewIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFH5VhUFM
iVwRRwc8uMqgYQQKlPjeMB8GA1UdIwQYMBaAFIR3T0a2kgoF2t1CR3uqs27nJGuU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTE2Mi8yNkE4MkUwQURE
QzExMUU5OTg0REU4MTFDNEY5QUUwMi9oSGRQUnJhU0NnWGEzVUpIZTZxemJ1Y2th
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hIZFBScmFTQ2dYYTNVSkhlNnF6YnVja2E1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDkxNjIvMjZBODJFMEFEREMxMTFFOTk4NERFODExQzRGOUFFMDIvRTcyN0EwNTYw
MEZEMTFFQjkyODYxMTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAK0sngwDQQCAAIwBwMFACQBgYAwDQYJKoZIhvcNAQELBQAD
ggEBAHKxlcSd9Ro+okN+iUJA3XrlqwRnDS8u6b4e7oa1mmAWn1ewXinIyFa6EtEm
3rIXUQzKS4hCWa6NmfuLoXt07WNh6Evsm5do3QYvc5TSwhiTGrD50JD7+dXMAW2l
qHFgQnnny5o8GoAzFsHsyL14Hy7X4vruVAI87HMXruFffUkbfd19FkGuFNZiklW4
5wpmoda95CdxznfhvnV9+7M34T5PjiIyCC+nP4a5KCpXMiOG2RjX93mXP8AzISHT
5b0/KeOlY0Zu5oaYbSQOFcPgnY2O2YU4Bk6p1AcziJhiz/DRolxZ6ZriGtuufwPi
k3g6GNChXhYnk/fNlZY/Eu9+IH4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:29 2025 by rpki-client