
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6ABFFBC6F53811EDBAE7E351C4F9AE02.roa
File:                     6ABFFBC6F53811EDBAE7E351C4F9AE02.roa (raw, json)
Hash identifier:          yx0ON/sLrcGZFA/S/wuCK9bR9AtwCeJiAtm+emoP2GY=
Subject key identifier:   89:C6:2A:C5:EC:FF:2C:A5:71:93:48:98:E8:51:D6:56:62:D3:26:82
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       01F4
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6ABFFBC6F53811EDBAE7E351C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:17:21 +0000
ROA not before:           Mon 03 Nov 2025 03:17:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     132859
IP address blocks:        103.25.115.0/24 maxlen: 24
                          103.74.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:17:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Nov  3 03:17:21 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69081ec1-6a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:c4:77:8e:2b:9b:c9:e6:aa:fa:2b:d7:11:
                    fe:bc:93:08:52:11:69:89:eb:65:8a:6c:08:d5:a5:
                    c7:a3:1c:99:b9:90:e9:cb:c1:1b:5f:52:48:b5:c3:
                    3c:e2:83:36:3e:1c:15:41:ca:a7:99:91:0b:ec:24:
                    1f:aa:ed:33:0e:92:c9:47:02:41:0a:2e:4a:8a:0a:
                    60:60:5f:7e:75:85:fd:f5:7d:18:0f:34:a8:a1:45:
                    76:1d:41:0d:60:29:fa:da:7a:6c:0c:ec:81:8e:e4:
                    6f:b6:1f:42:8a:8e:2d:f5:5b:40:0f:fa:39:84:83:
                    7a:66:3d:07:79:d5:cc:e4:0f:8d:aa:02:1a:c7:5a:
                    96:e6:dc:f0:b3:83:78:1b:8d:b4:27:d2:69:1f:96:
                    4e:41:f1:a4:4e:44:3f:3f:18:16:79:d5:77:a9:6c:
                    5c:9b:63:8e:b6:51:95:c1:15:e5:2f:2a:67:fa:26:
                    06:96:ee:7a:71:b7:01:bb:c6:b7:08:f2:bf:da:f4:
                    2e:ad:d6:c6:31:23:18:b7:fa:59:35:67:72:fd:28:
                    da:73:3c:b8:a0:f8:39:02:7c:52:76:6a:63:df:1b:
                    a3:eb:b2:73:42:0c:7f:dd:be:06:0f:34:fd:8c:f5:
                    c3:ce:de:27:d7:12:fb:02:04:91:e6:d1:24:78:c1:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C6:2A:C5:EC:FF:2C:A5:71:93:48:98:E8:51:D6:56:62:D3:26:82
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6ABFFBC6F53811EDBAE7E351C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.115.0/24
                  103.74.216.0/24
    Signature Algorithm: sha256WithRSAEncryption
         0b:65:9b:4a:db:d7:61:39:85:18:b4:11:53:b6:87:42:8d:d5:
         7f:56:3a:80:d0:0e:ef:4c:76:4f:cc:dd:00:52:5f:fa:93:d0:
         d5:18:6a:48:a9:d6:ba:00:65:8b:65:5a:3b:dd:13:16:61:a8:
         cf:bf:d0:51:a2:62:8e:33:e6:73:4f:9b:28:a6:fc:6a:dd:de:
         9d:16:33:6b:f9:12:97:d0:b8:c7:d2:78:1c:ce:9b:82:89:c1:
         5d:9c:52:6c:9b:3c:e0:2a:46:f6:0a:3c:5e:3e:65:fe:d1:3b:
         7b:4a:0b:52:92:14:f8:76:81:0e:89:8e:22:e0:d5:83:6a:1e:
         c1:36:fa:4b:8d:e6:8c:9e:11:88:07:c3:ed:a6:31:25:f5:51:
         ff:08:b0:fe:20:b0:d5:df:16:44:02:e0:ac:0b:a0:b0:0b:2a:
         37:00:4f:cf:34:5b:35:7c:9b:1d:84:18:f3:64:de:c1:00:47:
         94:58:fa:79:0d:47:bb:ff:f2:c6:7a:e6:42:ae:9b:cd:6a:dc:
         04:00:df:7b:57:3d:8a:97:1d:aa:ec:a5:90:8c:a5:f2:a0:45:
         ca:2a:b1:c0:2b:ba:f6:cd:d7:42:1d:70:a2:90:6f:89:52:60:
         7f:1b:99:45:76:1d:5b:e8:62:47:f8:ea:25:3a:e1:0d:b0:df:
         f6:86:bd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 13:18:33 2025 by rpki-client