
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/F8E93410A85C11F0A2A48E76C4F9AE02.roa
File: F8E93410A85C11F0A2A48E76C4F9AE02.roa (raw, json)
Hash identifier: uSc+a7UP/AciXljHJWSm6FJ7cB1ozyvjX6O58aed8lU=
Subject key identifier: 76:80:F0:45:29:6A:E8:B0:14:8B:87:2A:09:B8:85:E8:D6:24:9B:BE
Certificate issuer: /CN=A91EC5DE/serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Certificate serial: 2A
Authority key identifier: A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/F8E93410A85C11F0A2A48E76C4F9AE02.roa
Signing time: Mon 13 Oct 2025 17:49:31 +0000
ROA not before: Mon 13 Oct 2025 17:49:31 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138596
IP address blocks: 210.56.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 10:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC5DE, serialNumber=A6136E50E9498E049D0B4D2F1867FA1B1891C4EF
Validity
Not Before: Oct 13 17:49:31 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68ed3bab-5e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:7a:35:cf:54:78:0f:e9:e8:2b:8d:c8:7c:
13:4a:76:18:21:0d:42:a0:d0:5f:64:6b:31:be:b1:
bf:bb:ac:17:27:49:fc:83:fd:e8:e2:72:d7:2e:9d:
5b:db:1a:27:41:5a:fe:b6:b6:8b:9a:06:82:93:78:
9f:22:65:19:fa:22:83:1c:22:1f:a0:eb:dd:e6:17:
9d:03:93:49:4c:b3:2f:6b:74:d5:db:48:6b:9a:3e:
4f:40:e8:e6:3c:62:7d:f8:ad:b9:05:3e:79:ed:f8:
a4:4f:6e:d3:9e:25:89:f7:28:71:d0:9f:d5:9b:65:
18:d5:1d:25:ca:ee:4c:bf:10:df:1a:ba:9b:92:0d:
54:ec:ae:c7:62:22:4c:ef:6f:cc:5b:ee:ba:b2:b9:
84:38:ca:24:51:f1:48:69:2c:c9:19:e5:6b:f0:db:
c9:c1:5c:c1:76:2c:d2:1e:7e:10:5f:e4:64:47:da:
28:8a:38:5d:15:59:c4:1a:bb:6a:1a:b1:a2:75:57:
d5:ea:59:4f:3a:db:58:4e:62:8e:90:8d:e4:90:f5:
49:c6:ef:8d:9e:e2:f1:eb:c6:28:3b:f0:2a:23:d1:
54:9e:9d:c2:1c:4a:18:70:4c:1b:26:c3:6b:5b:32:
ce:0e:23:d5:57:f0:77:8f:ea:2e:a2:f6:e7:dc:36:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:80:F0:45:29:6A:E8:B0:14:8B:87:2A:09:B8:85:E8:D6:24:9B:BE
X509v3 Authority Key Identifier:
keyid:A6:13:6E:50:E9:49:8E:04:9D:0B:4D:2F:18:67:FA:1B:18:91:C4:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/phNuUOlJjgSdC00vGGf6GxiRxO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phNuUOlJjgSdC00vGGf6GxiRxO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC5DE/8762CD1A742211F0875CAC33C4F9AE02/F8E93410A85C11F0A2A48E76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.56.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e1:f0:1e:97:f9:37:2b:d0:b1:2d:b8:76:23:65:19:fb:3f:
f0:65:73:0f:6f:66:53:64:52:16:e7:b5:b5:2c:d6:25:78:71:
f0:9c:11:23:06:d6:ad:5d:91:8a:d5:0e:11:58:be:dd:13:6a:
90:90:b6:d3:79:c9:88:7e:fb:4f:bb:13:65:26:6e:b1:2d:18:
3f:7b:0d:4b:b4:df:af:ec:98:1f:5a:ce:48:5e:a9:e7:e9:ae:
a9:33:b2:de:2f:ae:c2:b3:67:85:77:91:cb:c6:16:02:68:03:
7d:58:86:a5:22:3c:aa:b7:a0:85:ee:29:97:ed:0c:b1:79:67:
16:b9:8f:90:b7:26:3c:33:06:5a:2c:11:1d:d9:21:69:c7:0f:
4f:7b:c8:22:f9:86:ed:c2:83:51:1a:32:5a:46:c0:41:51:76:
49:f5:35:85:65:51:14:0f:8a:de:a1:18:f6:50:a2:73:50:ce:
5a:52:d2:32:7f:52:a4:ec:dc:b0:01:71:4a:dd:61:8c:e9:35:
82:81:26:ea:1c:1c:d3:b3:b9:94:2e:2b:04:9b:50:6b:26:9a:
79:47:08:c9:f2:e6:e0:aa:05:86:af:cb:3c:8a:45:a4:70:6a:
b4:d8:2b:63:2a:5e:84:65:51:17:2d:80:76:12:02:d1:e9:c2:
08:05:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:54:57 2025 by rpki-client