
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa
File: E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (raw, json)
Hash identifier: bbIc0AasFC0EBwn4UjgSa63ViDg31XHR/SePlovtje4=
Subject key identifier: BB:A2:77:A0:12:CA:33:14:E6:EA:FF:CD:17:CB:30:DE:C7:17:39:5A
Certificate issuer: /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial: DB
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa
Signing time: Wed 01 Oct 2025 07:18:52 +0000
ROA not before: Wed 01 Oct 2025 07:18:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133051
IP address blocks: 103.241.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Validity
Not Before: Oct 1 07:18:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68dcd5db-ddf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:02:0d:db:6e:d0:2c:3a:39:0b:14:ec:f6:
89:d9:3d:13:e6:3d:1a:5e:a4:81:2c:73:ff:ca:8d:
da:44:a5:ee:48:d5:a4:7f:48:78:44:3f:37:38:16:
b7:ff:b3:22:ba:42:ab:ad:fe:20:98:53:22:eb:17:
c4:32:f8:a6:04:46:f2:b9:16:a0:63:56:1f:41:d4:
84:9a:05:23:b2:56:b5:bd:0c:86:e5:61:53:d2:b6:
fb:e9:19:a1:a9:9b:d3:03:c8:5f:c3:9f:a5:b6:49:
52:ce:d6:e0:91:03:81:f2:36:c1:4a:73:c9:de:a3:
ac:a8:67:9a:08:07:02:b9:ae:74:c7:5e:2f:1c:38:
74:89:a2:3d:1d:da:5e:11:30:ea:01:15:59:19:88:
d3:ef:fe:88:a6:17:a0:61:40:9b:5a:a7:37:f7:24:
2e:ca:6d:39:fe:a0:bd:8a:c7:72:e5:06:e8:96:af:
09:bd:e7:b7:0c:17:62:18:27:f9:29:56:8b:41:eb:
8b:53:80:57:80:64:49:f9:87:fa:09:8c:fb:9b:86:
d6:5b:87:93:b2:24:4b:9a:f6:3f:9a:a1:d8:16:c8:
bb:06:43:2e:1a:b6:78:3a:fc:92:1e:7c:2b:89:d7:
cf:8e:e7:48:08:31:d3:b9:70:e8:72:8e:2e:fa:88:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:77:A0:12:CA:33:14:E6:EA:FF:CD:17:CB:30:DE:C7:17:39:5A
X509v3 Authority Key Identifier:
keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.241.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:db:58:e6:c0:9e:0c:93:b7:41:d2:c5:1a:16:9c:1b:52:12:
7c:0f:ad:b6:d6:88:8e:db:26:f3:9f:0b:06:7c:62:db:92:e2:
f2:38:3f:66:67:66:f0:89:54:73:4f:ac:18:fa:2a:6d:ce:57:
0f:80:47:55:2c:72:2b:d0:0a:69:cb:55:3f:07:7b:be:1f:71:
00:83:f9:15:c3:c4:04:c9:f8:ad:80:16:45:0e:07:81:ec:d6:
36:9e:e2:3d:b9:15:bb:22:35:78:98:4d:ba:33:78:c8:28:af:
72:a6:d6:d3:fb:ed:26:9b:c7:d4:41:de:1f:c3:4e:93:6b:c8:
62:ff:f0:a5:d4:ff:53:7c:6a:8a:d9:ba:48:54:4e:50:aa:bf:
7b:58:03:33:d6:56:df:a3:e3:25:47:8e:b5:03:17:fc:f9:cf:
d3:ad:10:eb:36:67:35:4c:fd:68:8f:a1:d2:75:c8:58:48:1e:
90:c3:dc:57:30:29:92:08:e4:e4:5e:fe:8d:55:42:75:5b:d7:
d4:02:2d:13:94:f2:b3:c3:e7:b7:97:a2:43:de:03:1c:ce:37:
3f:2f:24:be:b2:78:c1:45:83:b2:cd:30:3f:4c:c1:3e:9d:9a:
d6:58:e6:3a:10:0c:9f:0b:c9:ab:bc:da:ee:ca:c0:ca:86:42:
92:2c:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:22:03 2025 by rpki-client