
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/45D237A423E211F0A5DCED27C4F9AE02.roa
File: 45D237A423E211F0A5DCED27C4F9AE02.roa (raw, json)
Hash identifier: 3wfdkAiEkFODU6B4YeHm0vdAyiuwr8rUvXL2nV5+auc=
Subject key identifier: 68:96:85:8C:E8:E5:DE:57:F5:54:3C:A6:DD:A5:DF:C8:A4:08:20:6F
Certificate issuer: /CN=A9199656/serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Certificate serial: 02
Authority key identifier: C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/45D237A423E211F0A5DCED27C4F9AE02.roa
Signing time: Mon 28 Apr 2025 03:38:39 +0000
ROA not before: Mon 28 Apr 2025 03:38:39 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 45597
IP address blocks: 203.176.114.0/24 maxlen: 24
203.176.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 10:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199656, serialNumber=C9C30B7C57E2F016DB1F01C09E592E050474C9A6
Validity
Not Before: Apr 28 03:38:39 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=680ef83f-4c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e7:7e:92:46:42:47:38:97:b5:12:b8:22:aa:
92:b0:a0:0b:f5:a3:7f:5f:43:ba:0e:e2:13:72:f9:
24:d6:01:4c:60:16:cc:9e:49:63:4a:41:85:00:3c:
17:17:ca:49:22:71:80:13:94:bc:56:4b:65:0e:18:
72:8c:ad:fc:12:94:14:b4:95:8d:82:84:71:56:53:
d6:d6:93:e3:89:39:0c:94:65:87:95:09:50:6f:8e:
1d:49:d3:be:7b:e4:e9:17:1f:8c:3d:7c:da:57:21:
bc:f4:fe:01:20:a2:ff:5c:3e:e5:5a:61:79:85:f3:
e2:15:b0:eb:bc:a3:cd:b3:ba:2e:39:8b:b4:32:bf:
1a:65:e8:fb:21:93:d7:83:ee:ce:4c:52:61:db:9e:
81:b2:e2:59:da:00:5f:e9:a2:7c:a2:a2:ab:e9:56:
00:0f:5c:5a:6f:65:a1:c0:8f:d6:60:0d:8c:41:03:
b5:e2:81:c4:ba:ea:f7:ef:c6:45:31:af:e8:42:02:
f9:87:5d:9a:cb:7f:64:25:01:d5:e3:88:c7:36:de:
35:83:ae:6d:21:74:3c:18:8d:07:5a:19:d1:3c:86:
c4:bb:40:e2:fa:d2:91:29:7c:2a:a8:5f:ac:97:2b:
c0:7c:ee:d7:c5:70:e9:ec:73:ef:62:d1:d5:6a:f2:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:96:85:8C:E8:E5:DE:57:F5:54:3C:A6:DD:A5:DF:C8:A4:08:20:6F
X509v3 Authority Key Identifier:
keyid:C9:C3:0B:7C:57:E2:F0:16:DB:1F:01:C0:9E:59:2E:05:04:74:C9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/ycMLfFfi8BbbHwHAnlkuBQR0yaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycMLfFfi8BbbHwHAnlkuBQR0yaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199656/A5E7CD7623E111F0A650EA23C4F9AE02/45D237A423E211F0A5DCED27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.114.0/23
Signature Algorithm: sha256WithRSAEncryption
70:c8:08:1e:b0:3e:f5:5f:0f:e3:a4:a6:4f:a2:2c:dc:78:aa:
44:50:96:7a:5b:e2:a2:0a:ae:29:fd:84:9f:dd:85:cf:66:55:
3b:73:e6:47:33:52:cf:4a:23:eb:03:14:9f:64:99:bb:59:f4:
f9:1e:4b:fd:df:bc:29:5f:62:ce:3b:0d:17:1e:27:6b:90:96:
7a:09:de:5d:2f:4d:0f:2f:f9:b8:82:91:e9:b5:5b:66:da:a8:
dd:97:43:0d:74:f5:78:46:f0:34:35:83:f4:ac:95:8e:19:7d:
6c:01:1d:a8:01:06:7e:a3:cd:83:cc:4a:bc:9e:56:79:98:67:
a6:4d:f6:a3:c8:e1:7a:24:97:7b:2d:90:5e:73:25:c3:02:97:
d6:e8:b5:05:2c:22:d3:42:4c:2b:98:58:c7:f9:30:2d:4f:e9:
75:bd:c6:59:9f:be:e0:04:19:31:2c:f2:84:f8:92:e5:5b:4f:
b0:d8:e8:eb:9b:f5:b7:e6:73:fe:fe:1b:bf:67:e5:f2:69:cb:
40:54:31:c3:ab:85:0b:65:5d:58:a3:2b:09:13:e4:51:18:8a:
12:d2:5d:17:61:14:1a:3c:89:2d:96:0d:c3:8b:81:a8:b4:f2:
87:c3:46:a7:b8:ae:a1:66:f9:d7:3d:62:e5:85:03:57:75:74:
e6:82:c2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:13:04 2025 by rpki-client