
$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
File: BC6E83E0D4E411EC976A7E55C4F9AE02.roa (raw, json)
Hash identifier: gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=
Subject key identifier: C2:BF:69:D0:F5:4F:C1:04:CA:86:A8:10:9B:69:85:5F:66:C6:44:05
Certificate issuer: /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial: 0311
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
Signing time: Thu 05 Jun 2025 01:08:07 +0000
ROA not before: Thu 05 Jun 2025 01:08:07 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134732
IP address blocks: 103.187.94.0/23 maxlen: 23
103.187.94.0/24 maxlen: 24
103.187.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 04:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Validity
Not Before: Jun 5 01:08:07 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6840edf7-586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:97:be:00:23:6e:5f:8b:16:c4:99:8e:5b:2e:
63:ba:2b:68:6e:7e:83:e1:b1:34:a3:e7:3a:7c:1b:
62:37:70:0e:b6:32:8c:50:c2:e9:3f:f0:58:3d:13:
cd:ff:28:85:db:e8:01:93:cb:d0:c2:1a:67:35:91:
78:e0:5a:6f:e4:19:f3:9b:c8:6c:e6:1d:ac:1a:53:
af:d0:e5:9f:3c:81:9a:36:27:46:c4:bb:90:31:0a:
40:67:ef:98:0b:d4:ae:7d:dd:71:b2:a8:4b:83:d1:
11:75:85:c9:b2:82:6a:d6:f7:73:0c:e5:8b:99:54:
19:2f:1d:e0:d6:4c:1c:19:52:36:d6:d4:e8:e6:0a:
ab:d7:3d:21:20:d8:5f:4f:86:fd:ac:be:2e:f7:4b:
76:a6:2c:f2:cb:9c:34:55:13:1f:61:33:49:74:b6:
dd:af:f6:c9:af:3d:2a:e3:33:ff:20:55:0a:73:99:
f8:4e:31:c8:68:cc:90:f4:82:5e:09:bc:5d:2c:ae:
74:05:08:9a:38:5c:71:b1:4d:76:0d:1e:46:eb:67:
77:f5:97:6a:98:e6:4f:2a:7a:46:ef:3d:0f:89:49:
d7:90:7a:0e:32:db:a8:90:30:67:df:79:fc:8e:45:
b4:dd:c0:63:96:b3:e1:44:fd:25:9f:b7:ce:15:64:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:69:D0:F5:4F:C1:04:CA:86:A8:10:9B:69:85:5F:66:C6:44:05
X509v3 Authority Key Identifier:
keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.187.94.0/23
Signature Algorithm: sha256WithRSAEncryption
94:a6:e0:c7:fe:be:2b:73:fc:ee:aa:cf:15:8b:f9:eb:c3:6b:
b5:6f:56:90:b3:62:33:07:a3:b5:f8:aa:b0:c9:c7:37:63:ad:
e2:94:ad:80:62:24:71:89:3d:55:e9:00:63:36:d7:65:40:d2:
83:ee:85:a0:64:98:b2:62:bb:d8:e3:55:22:84:cf:61:5c:a9:
a1:9a:74:1d:43:39:38:41:77:d6:08:11:95:07:2e:be:89:e2:
84:c9:4a:f4:fc:4b:c6:fc:aa:ae:fa:7f:d2:c9:f7:76:9e:37:
02:9a:02:f0:ae:d3:cc:e2:91:52:75:e2:95:ac:1e:3b:b2:5d:
94:8d:27:68:93:c7:51:ff:16:fb:27:e2:94:81:63:43:ad:bd:
6b:b8:a0:95:eb:f3:eb:42:2c:93:45:7d:80:7a:89:f7:01:b3:
a4:c9:11:3c:2f:9d:a0:c3:7b:f9:af:8b:ad:af:d3:66:cd:4e:
f2:36:58:86:fe:8f:ef:c8:71:72:23:29:4e:4e:89:d1:af:60:
4f:f3:70:b7:3c:08:09:28:33:fb:d1:16:86:bd:9c:50:f0:cf:
9f:15:eb:8c:81:f8:bf:64:1d:56:c5:ad:b7:bd:e4:08:89:d7:
63:ae:69:c7:42:6a:8f:0b:f0:0f:3d:b2:fc:71:5c:0a:e7:b8:
f1:8d:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:20:48 2025 by rpki-client