
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/D94F8742B58811F091229E53C4F9AE02.roa
File: D94F8742B58811F091229E53C4F9AE02.roa (raw, json)
Hash identifier: Mr+/4/FtMx1UeLYPbgbLjrv6pPKctIBiSp3IkHkxYAk=
Subject key identifier: 69:9E:B3:83:62:07:4C:33:BB:E7:52:C0:1C:13:32:46:1E:20:81:29
Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial: 0275
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/D94F8742B58811F091229E53C4F9AE02.roa
Signing time: Thu 30 Oct 2025 12:06:21 +0000
ROA not before: Thu 30 Oct 2025 12:06:21 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141448
IP address blocks: 103.7.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Validity
Not Before: Oct 30 12:06:21 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=690354bd-ccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:43:04:2c:48:23:45:2b:53:84:a9:d6:ae:
ca:70:94:e0:78:5d:ee:c4:60:a6:b6:df:fa:57:ca:
a7:0a:3e:49:ee:e8:f3:d2:c7:fa:73:83:7c:f5:24:
86:96:75:56:91:8f:9a:71:87:6b:44:d2:c1:e9:50:
c8:9d:f0:39:a5:55:24:c3:08:5e:38:da:21:86:81:
17:ec:54:44:01:b6:59:75:15:0f:08:20:e5:1d:97:
ce:0d:19:8a:49:39:09:07:64:99:25:a5:d6:cb:40:
0d:d9:6a:e9:25:29:95:3e:e1:36:2e:42:9d:1f:c2:
aa:f2:44:6e:18:23:97:cf:e4:f1:c1:1c:d3:7c:6a:
b8:24:c9:b1:31:51:5a:ef:fe:ad:8f:c5:f7:dc:90:
6c:12:ef:3d:79:11:e3:72:4c:02:9e:d6:31:4a:63:
83:f4:9e:9f:ac:80:cd:87:63:a4:c9:03:d5:d5:f3:
64:2f:dc:87:79:1d:fd:01:41:19:d6:e8:0f:a9:67:
26:f6:6b:52:59:d8:d7:30:ef:c1:45:12:eb:c5:5e:
cd:c8:2e:74:c7:77:6d:16:a3:fc:15:e0:d6:74:64:
b0:f7:77:c6:20:69:7c:dd:af:9d:92:21:31:24:4b:
27:86:b6:91:1d:d4:9a:b4:61:fe:0b:db:b2:ec:02:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:B3:83:62:07:4C:33:BB:E7:52:C0:1C:13:32:46:1E:20:81:29
X509v3 Authority Key Identifier:
keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/D94F8742B58811F091229E53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.7.123.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b9:10:ce:ba:e5:58:3e:ff:76:a7:33:90:f7:40:70:36:86:
93:96:d9:11:dc:fe:9f:1b:ca:c3:2d:a6:01:bd:be:05:62:82:
5d:b3:39:a4:b4:e5:a8:35:76:73:51:6c:53:c2:ac:d4:c8:56:
bb:78:62:ae:a2:87:eb:0e:e1:26:38:9b:ac:77:26:5c:c0:f6:
35:05:0e:fd:f9:0b:12:ec:f1:37:09:52:32:35:f4:eb:a5:f7:
3c:cc:f7:24:bc:90:4f:6d:25:78:b8:a1:86:5f:f5:6b:86:e5:
a0:a0:70:a6:f2:38:68:9f:99:ef:6e:e9:b5:73:88:be:56:dd:
fd:d4:c8:c7:59:be:da:6e:be:bf:3e:62:d9:38:7b:94:19:19:
5a:10:0b:e5:40:3f:5c:d4:18:f6:e0:08:e5:32:c6:3d:d7:c2:
d9:f2:e2:29:cf:06:ea:fc:d9:95:64:21:ee:b0:b4:38:65:cd:
b7:82:e2:1d:49:a1:d4:48:b1:96:ca:78:3a:25:a1:c6:83:9f:
a4:53:df:d2:2c:f7:56:4a:a5:9e:cf:42:56:74:ae:78:c2:ea:
28:c9:4d:df:a1:f3:a0:8c:a2:05:2a:46:b9:eb:e0:49:58:98:
df:f7:e7:86:f1:5e:7b:49:33:ed:96:57:0b:18:fa:0c:39:be:
ca:17:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:56:24 2025 by rpki-client