
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/72B2E8A0A16A11EEBD55132AC4F9AE02.roa
File: 72B2E8A0A16A11EEBD55132AC4F9AE02.roa (raw, json)
Hash identifier: QJic5b/HC6ZO9L9AzouyI1f/AhHlKpyjlXdUDRpV06s=
Subject key identifier: E5:22:7C:5A:85:5B:B8:FD:F9:D4:35:F8:5B:52:F1:F8:DB:1D:97:03
Certificate issuer: /CN=A9110321/serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Certificate serial: 0189
Authority key identifier: C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/72B2E8A0A16A11EEBD55132AC4F9AE02.roa
Signing time: Sat 07 Jun 2025 03:43:29 +0000
ROA not before: Sat 07 Jun 2025 03:43:28 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137450
IP address blocks: 103.212.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 06:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110321, serialNumber=C56172AA853904834D905D3C3001344DD2A18E9E
Validity
Not Before: Jun 7 03:43:28 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6843b560-e242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:e1:b5:49:19:e1:e1:69:98:59:d8:9f:3a:
ff:8d:28:3e:ba:da:bc:d1:f4:c2:5e:98:1c:44:ba:
79:db:fa:ef:44:0b:60:66:9a:b5:64:db:46:33:76:
65:c8:63:35:83:5f:1c:df:b7:87:62:83:b6:82:46:
85:b2:64:f1:c8:51:cc:a1:cd:47:7c:92:35:55:a6:
5c:35:dd:5f:5e:9e:ad:a4:26:b7:08:d0:1b:2c:1b:
d8:da:66:44:d1:51:2c:80:91:a9:36:d0:e0:c5:31:
f2:fe:53:0d:e3:35:82:85:fb:b9:b4:32:05:a4:af:
f6:13:9b:7b:ef:a5:97:1f:b1:ff:91:ab:a6:af:e6:
e7:57:e2:52:d5:93:3e:bd:29:fd:c1:1c:5b:e4:f2:
5a:f5:fc:1a:3a:17:42:34:0e:40:aa:e0:4d:a0:20:
cb:8e:de:2f:dd:dd:26:88:13:94:d8:80:9d:74:0b:
1e:44:8f:43:55:3f:b0:b5:ca:1a:9b:ae:6b:d3:51:
8a:64:1d:e4:1e:96:63:ab:cc:aa:25:eb:fc:e3:ae:
22:d2:47:92:13:55:29:5e:35:e3:24:1a:fb:5f:ae:
d6:26:b0:15:86:1c:f2:c2:2f:cd:78:a6:39:89:89:
57:5e:67:f8:3f:c2:34:9a:e6:c4:d0:01:65:78:4f:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:7C:5A:85:5B:B8:FD:F9:D4:35:F8:5B:52:F1:F8:DB:1D:97:03
X509v3 Authority Key Identifier:
keyid:C5:61:72:AA:85:39:04:83:4D:90:5D:3C:30:01:34:4D:D2:A1:8E:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/xWFyqoU5BINNkF08MAE0TdKhjp4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xWFyqoU5BINNkF08MAE0TdKhjp4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110321/52B2E01600C311EEA4ACCD6EC4F9AE02/72B2E8A0A16A11EEBD55132AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ec:b5:4e:fc:48:e9:00:77:81:b8:5b:48:8f:ed:f5:0d:d8:
e9:b7:bd:44:69:62:07:cd:43:8f:7e:43:7c:26:31:ba:3a:d7:
f1:55:17:21:2f:8b:24:df:31:0a:37:6f:1c:31:58:87:8c:82:
3a:5c:7c:49:cb:9d:53:81:82:9b:bf:b2:81:59:63:62:6d:3b:
1e:91:0f:cf:0b:90:22:ae:6e:62:f6:fb:ff:5e:43:05:87:e8:
9b:6a:19:92:48:67:35:15:d1:5d:58:d3:7d:23:b3:8b:27:1b:
eb:4e:00:aa:dc:eb:e9:61:f5:9a:82:87:4a:cd:1b:47:6b:ad:
4b:b9:ee:e5:be:60:4c:76:ce:66:02:0f:9b:9a:ad:e2:4d:5f:
ed:26:8a:97:17:4f:ad:12:3d:ec:63:2b:d1:46:52:41:b1:dd:
2e:95:14:37:20:5f:81:7a:2f:cd:e5:5b:e8:1d:bc:3b:48:43:
3f:ab:71:6e:e4:51:fa:b8:28:4e:b4:2d:38:c7:3d:c7:eb:08:
94:85:40:11:f8:e1:4a:cc:a7:24:a2:1e:60:fd:6f:ad:19:3a:
34:c4:78:e8:21:66:60:6f:e4:8e:8a:ab:b6:df:b9:e3:ac:71:
90:c3:4e:7e:60:b2:66:ea:2a:15:8d:72:6f:9e:bc:a9:9c:79:
88:28:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:40:27 2025 by rpki-client