
$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
File: 43A05F96ABF111F0AF8F880CC4F9AE02.roa (raw, json)
Hash identifier: jHfK6IyCLOgzWRIKFIJt7aRe94FDSOoHp8+mPczDRNw=
Subject key identifier: 6C:99:9A:A8:12:21:F3:CE:B0:18:FA:3A:8C:94:5E:FD:4B:CA:26:BB
Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Certificate serial: E1
Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
Signing time: Sat 18 Oct 2025 07:08:36 +0000
ROA not before: Sat 18 Oct 2025 07:08:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.212.72.0/22 maxlen: 24
139.5.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17
Validity
Not Before: Oct 18 07:08:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68f33cf4-b73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:60:a7:4f:7c:16:85:d7:fd:01:56:46:84:
dc:2d:99:49:b6:9b:75:89:c0:84:49:58:e5:29:79:
ce:43:67:12:8c:8f:7f:b4:7f:d3:b4:f8:9e:fa:ae:
08:33:db:c6:41:e0:5e:55:db:84:46:e2:7c:14:5a:
41:79:46:7b:d7:cc:d5:a0:4e:2c:68:85:b3:56:61:
1a:48:17:a9:32:23:7b:aa:11:88:c7:37:cb:e7:14:
23:ab:e3:b5:25:e6:63:d7:ef:3c:28:e1:73:3d:67:
68:b8:ae:e7:15:8a:8a:8b:98:e9:f9:05:08:58:df:
8f:be:8a:b1:da:df:7f:41:6d:ab:d8:b0:a8:16:0b:
08:99:55:9b:88:ea:f2:13:58:00:35:07:26:e5:61:
9e:20:e7:5b:30:a4:66:e5:9e:bb:7e:b8:f1:13:d0:
92:3c:1b:aa:72:cd:85:da:46:7e:97:c7:df:91:b6:
18:53:f6:92:05:98:03:30:19:50:39:9b:7b:fb:7f:
97:2b:06:e3:b2:ac:e4:a6:1d:0d:13:93:bc:50:f2:
5a:aa:36:61:d9:17:8a:08:09:56:fb:42:ca:bf:81:
41:3f:55:6b:ac:2a:d0:49:7d:98:ec:2f:5f:60:df:
1a:87:63:a0:dd:90:55:25:23:fe:81:fb:e3:ba:d8:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:99:9A:A8:12:21:F3:CE:B0:18:FA:3A:8C:94:5E:FD:4B:CA:26:BB
X509v3 Authority Key Identifier:
keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/43A05F96ABF111F0AF8F880CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.72.0/22
139.5.180.0/22
Signature Algorithm: sha256WithRSAEncryption
76:bf:55:30:df:f9:a3:1f:93:85:14:b5:6c:c8:86:f5:79:12:
1d:bb:8b:f4:30:d3:bd:7c:33:48:28:da:da:a8:8b:a7:ab:7c:
d6:1a:87:43:c6:bd:8f:44:fa:95:85:43:0e:21:d5:96:06:f0:
93:63:f1:7c:0f:17:db:09:d1:9b:c0:95:2f:9c:54:17:33:97:
f2:04:33:09:d3:b9:74:72:4c:44:e9:82:8d:ce:3a:63:5c:85:
11:fa:96:89:d2:ea:fb:88:71:47:3f:98:e4:15:4f:88:50:8c:
88:5f:9b:c3:ee:9a:a6:d3:8e:62:76:35:4e:dc:f4:05:a4:d5:
64:03:05:56:aa:80:80:9f:17:7b:12:c9:c0:e8:85:d4:ac:58:
ba:15:e2:b4:6a:e3:b2:f4:a3:42:14:5d:fd:50:78:8c:4f:da:
c6:44:4e:6e:ac:a2:93:01:25:db:68:a5:79:1d:0b:8c:2f:14:
ec:a4:89:a8:93:b3:5b:26:06:84:51:96:48:81:c6:5d:bd:41:
d4:8f:14:27:ff:cf:e3:86:33:af:b3:9f:df:4f:0c:40:8b:b2:
af:cd:bc:25:30:2e:f6:83:04:41:02:e8:b2:63:8a:26:6e:02:
dd:df:87:e6:85:82:b5:4d:16:27:22:3f:5a:8c:38:5e:17:58:
e0:ff:07:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:43:39 2025 by rpki-client