
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6CE6E15ECEF311EEBCE7894DC4F9AE02.roa
File:                     6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (raw, json)
Hash identifier:          dEO++79BUk5ahAousLOU8sxWcE1quKezgUCE1Hu7wA4=
Subject key identifier:   2C:FE:B6:51:C4:B1:FA:67:16:9E:16:F3:AC:8C:1A:6B:84:C7:FC:9A
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       01F8
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6CE6E15ECEF311EEBCE7894DC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:17:24 +0000
ROA not before:           Mon 03 Nov 2025 03:17:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9268
IP address blocks:        103.25.115.0/24 maxlen: 24
                          103.74.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:17:27 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Nov  3 03:17:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69081ec4-708b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:23:19:c7:5f:73:5d:fb:ab:a1:e3:03:e0:9d:
                    56:2a:fb:b4:8c:90:b9:03:32:b6:ac:20:86:ce:67:
                    2e:54:e4:59:11:fe:85:02:91:75:be:1a:61:fd:46:
                    f1:ee:58:4d:cc:15:dd:d7:24:bf:57:e9:79:2b:b8:
                    3c:b1:e3:6b:2c:aa:1e:2c:61:ac:b8:81:d9:17:85:
                    ce:a0:28:a8:37:14:0c:e7:5e:ad:cb:5d:86:ec:b7:
                    9a:5a:75:98:90:53:a0:bc:7a:ec:14:a5:5d:92:9c:
                    46:14:da:65:75:69:0d:cb:5a:26:8b:f7:3e:df:77:
                    a7:9c:4b:ef:6f:63:d6:9d:d1:a9:c4:c4:9a:d6:3d:
                    1d:a2:98:df:fa:63:dd:dd:d8:c1:61:d3:a3:63:06:
                    16:86:a5:2f:c8:d2:16:a0:d6:a0:7c:42:5c:c4:44:
                    46:2e:67:6d:b7:40:65:7b:74:a2:1a:f0:cf:46:bf:
                    51:e3:8c:cb:38:bc:19:fc:ee:5b:92:10:69:94:b8:
                    42:2f:da:9b:40:1f:59:c5:44:29:38:9b:7c:14:df:
                    2e:bd:72:a7:ed:81:04:57:09:96:12:d8:44:f8:13:
                    a1:a3:0c:75:a8:8c:99:64:0f:f1:1a:63:8c:0b:0d:
                    37:d7:27:23:d9:1c:65:57:07:c6:cf:5e:69:50:1e:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FE:B6:51:C4:B1:FA:67:16:9E:16:F3:AC:8C:1A:6B:84:C7:FC:9A
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6CE6E15ECEF311EEBCE7894DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.115.0/24
                  103.74.216.0/24
    Signature Algorithm: sha256WithRSAEncryption
         45:10:4d:a8:a9:d4:ba:a8:1f:32:c3:da:75:d5:40:77:4b:8b:
         df:7e:fb:dd:71:d7:db:25:be:77:db:6a:7e:ad:ac:2b:ff:b2:
         66:ff:4f:fe:6b:f3:ea:78:ca:ff:01:1e:c9:2d:90:c8:6b:eb:
         72:9e:84:97:2e:1d:16:83:83:77:3d:61:f8:2b:d8:26:c3:e2:
         b2:39:8e:62:e8:75:8e:e6:f9:3f:79:da:b6:75:66:ff:0a:ce:
         38:48:5d:10:c1:d9:00:00:04:b7:9e:58:24:cc:e6:79:0f:44:
         01:51:b4:88:49:bd:a3:59:42:1c:f4:10:79:09:a4:77:c3:97:
         8c:00:a4:0a:27:6d:7f:75:58:91:da:4a:40:23:09:c7:2f:b3:
         5f:25:52:4b:e9:50:a2:87:b4:98:e3:f1:ea:b1:cc:cc:84:94:
         2d:7e:fc:02:ea:cb:23:6a:59:50:2e:df:76:ef:fb:04:b7:23:
         1a:1d:e5:b7:ed:bc:e3:ad:fa:d7:1b:42:28:6c:8c:07:87:f6:
         af:01:34:8d:fa:5a:75:94:69:ab:a0:1b:1e:9a:ec:83:73:a7:
         ad:18:c1:f0:a8:4e:3f:eb:b2:f4:87:e5:83:76:b0:58:be:cf:
         d7:4e:53:a6:8e:6a:38:ed:d9:48:4c:76:5c:49:01:68:7a:4e:
         4b:dc:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 13:20:54 2025 by rpki-client