
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F73A3EA458FF11F0831F6664C4F9AE02.roa
File: F73A3EA458FF11F0831F6664C4F9AE02.roa (raw, json)
Hash identifier: AwPQ2C0JmEfPKukGC3Ro3WYtZg4y6hLp5m6xMhubTwE=
Subject key identifier: 75:44:48:85:67:C6:DE:76:40:1F:89:2D:C9:51:C0:26:87:9A:66:A1
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 014D
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F73A3EA458FF11F0831F6664C4F9AE02.roa
Signing time: Wed 03 Sep 2025 05:54:44 +0000
ROA not before: Wed 03 Sep 2025 05:54:44 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 53356
IP address blocks: 2403:ad80:5012::/48 maxlen: 48
2403:ad80:5016::/48 maxlen: 48
2403:ad80:5017::/48 maxlen: 48
2403:ad80:5019::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 07:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Sep 3 05:54:44 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b7d823-255b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:43:32:94:9c:db:fa:4a:dd:e6:b7:52:23:
6a:12:9b:a5:ab:3b:14:77:73:90:40:49:17:b5:50:
1e:87:6c:bd:e3:31:71:29:9c:59:75:55:86:a7:0c:
63:cf:c5:83:5c:29:c6:04:22:d7:2e:51:11:b0:fc:
2e:9b:2e:4d:ed:fc:75:8d:1b:2a:a8:87:d8:69:6a:
2b:5d:25:e5:75:aa:1d:31:42:2e:57:81:43:6c:89:
e0:de:1f:51:cf:41:00:2d:6f:57:77:3f:71:c8:2d:
e5:41:c2:4b:c2:79:7f:46:e9:9e:b8:08:c2:f5:d7:
49:3d:83:3f:c6:d6:3b:80:cd:e1:ac:5e:76:41:a6:
57:e7:0d:53:b6:3f:cb:af:fc:a0:a1:a6:b7:2e:92:
67:e3:99:17:4b:93:47:13:58:ae:12:03:f4:8e:6f:
3b:0f:3b:37:c3:5c:56:29:d3:09:5d:0c:f6:f5:7d:
b0:c8:df:92:96:51:95:bd:9b:ce:58:7e:85:67:f2:
7b:cb:84:cd:d9:4d:55:45:2a:2e:85:41:1d:8a:54:
8b:f4:e8:bd:41:c2:92:ef:f1:45:d0:20:c4:4d:3c:
3c:fe:53:9b:76:e0:4a:8f:ab:2a:2e:59:03:ae:e4:
73:24:85:76:ab:c3:29:8d:39:bf:c3:71:4f:ec:36:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:44:48:85:67:C6:DE:76:40:1F:89:2D:C9:51:C0:26:87:9A:66:A1
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/F73A3EA458FF11F0831F6664C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:ad80:5012::/48
2403:ad80:5016::/47
2403:ad80:5019::/48
Signature Algorithm: sha256WithRSAEncryption
5d:70:43:b6:c9:fe:99:66:7e:98:ff:b9:d4:90:a0:a7:09:c2:
cd:47:bb:e8:36:8f:fd:fc:74:18:1d:3f:4f:92:bf:1b:d3:9d:
9c:51:94:51:a5:4e:fa:8c:b7:1a:a3:cd:69:85:f9:87:f8:cb:
e4:92:1a:1a:11:8a:b6:28:c5:33:18:9b:6c:ce:29:0c:94:fd:
f2:45:19:23:01:55:ef:4b:f5:49:0f:50:e6:6b:37:4b:68:1b:
01:02:7e:49:fe:ff:63:ea:db:97:9b:35:b2:45:ba:61:62:4a:
1e:6b:d9:a4:f4:2c:60:f1:ff:4d:5d:41:49:91:0d:e6:89:68:
a3:34:cf:f2:47:0a:26:27:31:ac:2b:be:0d:94:e7:a8:a2:fd:
94:b8:00:30:1e:96:91:9f:c0:56:35:b8:3c:fc:fb:30:63:3c:
ec:db:62:a3:37:0d:c5:91:e9:b6:d1:60:9c:51:34:e8:8b:30:
a9:fa:6c:d1:b5:e3:b3:a7:74:1c:c6:cb:1e:d6:ef:bc:7c:68:
f7:bf:56:7d:3c:d8:3e:3f:f2:34:de:d3:4f:73:8e:dd:c6:8b:
24:fc:1e:c5:f5:f2:6f:01:29:0f:76:c0:c6:48:39:58:6e:f6:
6d:4e:a2:44:04:2e:eb:9b:91:58:4e:94:01:5e:d6:0c:65:43:
30:4e:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:25:27 2025 by rpki-client