
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa
File: A4FC1E34519311EE85CE2811C4F9AE02.roa (raw, json)
Hash identifier: FZUjzlxQzgZF6JDMRzeJhcRgNYq3dhICyuyYGYZj5hs=
Subject key identifier: 0F:3B:F3:E6:03:03:66:12:1E:F1:01:C0:75:21:6E:9E:64:81:67:93
Certificate issuer: /CN=A9110BE2/serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Certificate serial: 0189
Authority key identifier: D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa
Signing time: Thu 09 Oct 2025 04:02:55 +0000
ROA not before: Thu 09 Oct 2025 04:02:55 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151798
IP address blocks: 103.77.212.0/23 maxlen: 23
103.77.212.0/24 maxlen: 24
103.77.213.0/24 maxlen: 24
2001:df2:ea40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:34:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BE2, serialNumber=D39A10E61A8CA9504EDB15486936B37743A24DCE
Validity
Not Before: Oct 9 04:02:55 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68e733ee-8cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:55:b4:21:c5:ff:a5:b8:78:82:5e:58:8b:
a7:7f:49:53:23:66:8f:47:51:d6:0a:42:8e:9f:a4:
6b:b0:e4:a6:4f:6d:6b:8e:3b:4f:0b:ac:77:f5:b8:
06:7d:b9:86:26:a9:75:95:ea:16:69:86:3f:70:dc:
c7:75:77:aa:34:98:0a:a3:af:4c:c2:f7:77:1d:7e:
0e:71:97:86:4a:9f:48:ff:01:c7:4c:7d:de:5b:17:
b2:ce:35:14:c5:fd:98:63:9b:8b:1b:42:f3:99:fd:
ad:76:fd:5a:5c:62:13:ce:22:9e:2c:8e:c6:49:85:
23:8d:da:77:aa:a6:f8:b2:4e:29:a7:59:44:27:c6:
bd:8f:64:f8:a6:2d:21:8c:46:a1:4a:66:d9:7f:16:
94:5e:38:0b:5d:be:70:1a:69:9b:e8:4d:36:30:e5:
7a:3e:71:de:8e:ab:29:73:c1:38:64:62:eb:35:07:
93:f1:ab:b8:45:38:2e:f4:0d:3c:1f:18:d1:05:71:
d7:6d:20:85:72:9e:90:63:51:47:86:46:c1:80:9c:
70:3b:37:f4:b4:c3:97:fc:fb:55:a9:ea:aa:bc:7e:
10:50:5f:b2:8f:02:ba:24:bc:8a:41:df:9c:28:48:
e7:44:0b:74:fe:3a:5c:4d:c1:a8:cd:2c:11:8a:76:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:F3:E6:03:03:66:12:1E:F1:01:C0:75:21:6E:9E:64:81:67:93
X509v3 Authority Key Identifier:
keyid:D3:9A:10:E6:1A:8C:A9:50:4E:DB:15:48:69:36:B3:77:43:A2:4D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/05oQ5hqMqVBO2xVIaTazd0OiTc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05oQ5hqMqVBO2xVIaTazd0OiTc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BE2/6CB9A966519211EEB90A330BC4F9AE02/A4FC1E34519311EE85CE2811C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.212.0/23
IPv6:
2001:df2:ea40::/48
Signature Algorithm: sha256WithRSAEncryption
c3:bf:49:49:cb:e2:56:7b:e7:f0:7b:2c:66:e1:b3:c4:3a:df:
62:3f:41:26:55:f6:8d:51:06:5c:86:ef:47:61:af:d2:eb:42:
19:1e:2e:f5:b6:6e:66:3f:7b:a4:85:a7:25:c0:42:44:44:65:
1d:88:2d:9d:5b:2f:05:25:2c:ab:3b:1d:85:36:f1:20:0e:76:
54:b0:d7:8b:e7:93:30:c6:a7:c9:86:b0:04:da:91:df:f7:5c:
32:d2:e2:0f:cc:2b:80:31:19:d3:0b:27:2c:c6:d5:8f:58:c8:
ac:25:27:e4:fd:24:ff:c1:eb:f5:8e:50:1a:11:41:76:52:9b:
4e:79:96:e4:bf:e2:93:59:88:ee:22:ee:26:87:8c:e5:e0:0e:
94:2e:06:ea:e3:c7:16:82:21:0f:2d:cf:58:c4:dd:d4:9d:36:
35:9b:77:d2:7f:7b:c5:b0:55:d6:2a:85:77:47:66:b1:d1:e7:
d7:74:82:36:88:c3:e5:1a:57:23:db:ae:c0:58:72:a2:81:94:
55:57:9a:0b:d6:c6:e4:e1:6a:9b:d2:d4:c0:cd:79:e4:be:8d:
db:a2:aa:71:7f:92:77:45:51:27:b0:56:c9:31:c3:6a:b6:f8:
36:64:44:e8:92:e8:7a:ff:bd:b7:eb:6b:10:3d:23:53:3f:d7:
38:3c:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:26:51 2025 by rpki-client