
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
File: 7BABB4BE884C11EE81C71A38C4F9AE02.roa (raw, json)
Hash identifier: eDj76E11Nc1+IGlyzMBJDLm0PsvVUG2jJEzd62VT4NI=
Subject key identifier: 28:DD:BD:D5:1F:98:A5:C2:A8:C0:4D:42:97:1F:29:9D:95:F2:72:5E
Certificate issuer: /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial: 0171
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
Signing time: Fri 17 Oct 2025 07:10:42 +0000
ROA not before: Fri 17 Oct 2025 07:10:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133126
IP address blocks: 180.94.0.0/24 maxlen: 24
2401:51a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 06:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Validity
Not Before: Oct 17 07:10:42 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=68f1ebf2-4ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:5e:f9:64:a6:a4:29:c0:ce:30:46:53:d7:
1f:3d:9b:aa:80:f5:29:98:f4:06:27:36:5e:11:91:
e3:02:d0:45:3d:74:d6:5c:7c:e5:83:96:a5:0a:18:
15:36:e5:20:35:ae:ba:6a:51:b5:a7:8c:04:61:61:
8c:d6:9c:f2:d6:3a:6d:5c:d6:5f:42:0f:a0:33:ed:
cd:17:70:7a:f5:f2:4c:c5:b4:e9:d0:5e:43:89:c1:
c8:f3:c1:b2:f1:83:ef:63:df:8a:bc:a6:c7:ce:d8:
a8:d5:e1:65:f3:81:13:38:39:7c:9d:15:f6:57:93:
df:69:55:6d:6d:fb:5c:d9:32:d6:14:00:d2:d0:be:
0f:d2:22:df:ba:d8:31:8c:ee:b6:41:1a:7d:db:09:
ba:f3:1e:da:27:4f:eb:4c:b9:48:d4:d6:be:1b:fd:
3a:f0:5e:e0:e3:4f:67:0e:a2:27:bd:d6:93:15:cb:
d0:0b:76:e7:08:f7:ee:b8:43:a0:cf:d3:78:36:2c:
6e:62:73:c9:3a:a5:a8:f2:3e:9d:6f:8d:69:46:e3:
8a:a3:d9:00:92:96:1f:2a:f3:5c:4e:40:6f:a3:34:
d2:e8:cc:09:2e:2b:9b:fe:ba:69:39:13:17:8b:1b:
a3:ba:17:83:d7:80:22:7f:cd:c6:44:43:d8:cc:18:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DD:BD:D5:1F:98:A5:C2:A8:C0:4D:42:97:1F:29:9D:95:F2:72:5E
X509v3 Authority Key Identifier:
keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.94.0.0/24
IPv6:
2401:51a0::/32
Signature Algorithm: sha256WithRSAEncryption
9b:a0:70:de:6c:8e:94:57:a2:35:92:87:d5:c9:99:e3:4f:52:
80:e6:d7:e3:b0:e6:ca:c0:ea:86:23:4d:c2:7c:27:ae:25:25:
14:25:f5:bd:c5:f8:25:0b:41:22:36:8e:55:9a:37:df:89:b3:
78:99:a1:e7:7c:51:5f:ee:84:ab:a1:f8:01:f6:a1:56:91:92:
be:02:f5:17:74:d1:79:eb:85:20:51:8e:9a:f3:09:82:c5:c0:
18:5b:a5:7b:29:1e:ee:af:44:80:f3:8c:89:be:6f:fe:8e:d1:
a8:29:86:b2:82:5e:65:97:cd:5a:51:39:ef:41:5d:c0:e8:80:
4a:86:a8:03:a7:5c:66:0b:dd:c7:65:d7:27:68:99:f6:42:23:
10:58:41:43:2c:17:5e:64:45:86:3c:46:82:a1:bd:82:6c:43:
99:08:62:d4:4b:86:26:92:26:25:79:d2:71:ee:b4:6d:07:29:
c1:68:3d:f4:64:44:f5:99:40:e5:46:65:f1:d5:34:23:b9:f3:
d9:b0:bf:fa:af:19:da:73:81:96:1b:cb:b5:0a:08:e9:12:aa:
59:10:78:81:43:c9:38:66:7e:0c:3d:9e:d6:b6:be:52:a9:90:
3f:c1:c9:c7:33:24:a6:0a:47:99:e8:d9:ea:7b:13:4e:cd:b6:
bf:d5:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:53 2025 by rpki-client