
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa
File:                     0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (raw, json)
Hash identifier:          oNJE5bj6Ow/7pljSaqdBQ3poJgn7jCyxhJR6Se/yVrg=
Subject key identifier:   A5:86:78:E7:80:A4:F1:CE:6D:67:3E:B6:0A:A7:DF:88:89:07:D9:2A
Certificate issuer:       /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA
Certificate serial:       0A87
Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa
Signing time:             Thu 30 Oct 2025 19:39:04 +0000
ROA not before:           Thu 30 Oct 2025 19:39:04 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139680
IP address blocks:        103.143.150.0/23 maxlen: 24
                          2405:5640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl
                          rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:33:35 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA
        Validity
            Not Before: Oct 30 19:39:04 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6903bed8-8ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:d5:7e:5f:56:6a:52:bd:db:85:2a:c6:90:
                    50:ff:8e:92:6f:45:1a:63:bd:2b:49:c4:70:87:a2:
                    7c:c8:b2:2d:01:ee:98:ee:f3:ad:41:bd:31:60:d6:
                    a6:94:7c:35:71:b0:df:74:89:1b:2c:57:47:e4:ba:
                    33:79:d8:40:7b:6b:3a:58:94:77:31:b8:80:3f:4f:
                    9a:29:9f:d4:31:cb:17:64:7c:a6:06:02:d8:50:d6:
                    dd:5b:23:88:e7:79:d9:2d:2e:85:82:48:77:4c:e0:
                    37:b9:f7:ab:a0:21:2a:8a:a7:5a:32:53:92:9a:c0:
                    6d:9c:5c:83:ad:84:63:54:49:51:30:c4:40:73:96:
                    e1:86:cd:d4:7a:33:da:a8:5a:eb:b1:55:d4:0d:bb:
                    eb:90:73:74:31:0f:26:ef:40:80:e8:85:5a:f0:43:
                    00:81:6f:29:08:94:de:ea:4a:c0:8b:49:b0:c3:c7:
                    b0:68:97:0b:70:0a:22:0f:2e:15:38:76:a9:b1:ae:
                    d4:58:0d:25:37:fd:d1:3d:d2:9b:05:e1:e5:5d:38:
                    81:43:1e:5b:37:25:ce:f4:68:84:0b:f8:47:9f:b7:
                    2b:f3:08:dd:f1:dc:a1:e1:ce:1e:51:54:c3:32:7b:
                    84:ec:94:e2:7b:70:f3:fb:40:c4:d3:7d:8e:8c:76:
                    79:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:86:78:E7:80:A4:F1:CE:6D:67:3E:B6:0A:A7:DF:88:89:07:D9:2A
            X509v3 Authority Key Identifier:
                keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.150.0/23
                IPv6:
                  2405:5640::/32
    Signature Algorithm: sha256WithRSAEncryption
         13:37:e5:25:f7:b4:92:4c:a7:12:36:0c:85:57:f3:c2:3d:ae:
         7f:af:10:54:93:11:87:f2:27:f9:6f:16:d4:f3:09:ed:43:4f:
         fb:7e:3a:d3:1d:eb:3e:eb:1a:dc:5e:90:fa:9f:1b:3c:2c:07:
         94:65:87:b5:07:c3:7b:9c:90:67:68:cd:c8:da:3f:9d:c9:27:
         61:1e:6d:d2:fc:64:92:ac:72:ca:2d:38:e2:43:f2:ee:ec:1d:
         87:8f:5c:e7:ba:6d:51:a0:25:5a:8d:e7:8d:81:16:32:d6:93:
         2c:b1:7e:54:d8:2e:c5:59:bb:6a:40:33:fe:70:10:74:18:e4:
         cf:63:80:94:9e:c8:2f:b7:84:fe:4d:c2:93:a5:79:69:e1:7d:
         e1:bb:9f:d0:be:8e:6d:08:21:ac:f4:61:8d:bb:5e:d0:37:8a:
         53:64:db:31:f7:03:32:b7:3c:d3:c8:e5:6e:c0:4d:c5:b4:3a:
         21:c9:28:de:b9:44:fb:70:a7:7a:f1:4b:f9:89:44:8f:99:0b:
         84:2b:ed:8d:1c:0d:50:b9:1b:f6:94:4e:b2:a8:c4:5c:13:27:
         ac:be:e8:8e:d0:4a:a4:1f:b2:db:52:d4:88:ce:27:0f:7b:a1:
         a9:06:88:20:5b:82:7b:b5:a0:99:40:53:a3:9b:0b:52:20:4e:
         41:b5:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 01:06:00 2025 by rpki-client