
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/5DB3B5AA145C11EFAE012A55C4F9AE02.roa
File: 5DB3B5AA145C11EFAE012A55C4F9AE02.roa (raw, json)
Hash identifier: IjBd7XUR2i0dTIqKZWCJ7zm+gZSogWBX4IMREVDmhgQ=
Subject key identifier: F6:13:24:F7:2A:2B:17:5D:C9:73:A6:27:63:80:FA:06:8D:97:22:2F
Certificate issuer: /CN=A913AD90/serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Certificate serial: C9
Authority key identifier: 88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/5DB3B5AA145C11EFAE012A55C4F9AE02.roa
Signing time: Wed 07 May 2025 05:12:50 +0000
ROA not before: Wed 07 May 2025 05:12:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137922
IP address blocks: 103.111.180.0/23 maxlen: 23
103.111.182.0/24 maxlen: 24
103.111.183.0/24 maxlen: 24
2402:a0c0::/48 maxlen: 48
2402:a0c0:1::/48 maxlen: 48
2402:a0c0:2::/48 maxlen: 48
2402:a0c0:3::/48 maxlen: 48
2402:a0c0:4::/48 maxlen: 48
2402:a0c0:5::/48 maxlen: 48
2402:a0c0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Oct 2025 07:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AD90, serialNumber=880918A8756F04931A32F4CEA341C4F23FAD50EF
Validity
Not Before: May 7 05:12:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681aebd2-b5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d5:9d:8d:f5:9a:fe:f3:b8:18:fb:68:4a:7a:
89:22:a3:11:34:de:d9:97:16:15:7d:88:06:d0:74:
99:d3:8f:30:d7:72:dd:f9:8a:97:c8:01:56:bf:6c:
fb:f6:87:00:82:69:3f:9a:28:d7:ed:8e:91:83:2c:
e0:49:b6:97:2f:91:ca:37:15:a0:c7:43:4c:64:5b:
81:09:ec:18:a9:73:71:29:04:21:3c:4d:f1:be:ac:
74:d4:91:b1:15:e6:19:6b:2f:16:90:7a:c1:9f:89:
b4:46:81:f2:57:47:b8:8c:71:a2:44:19:af:06:1b:
fd:b6:cd:15:10:61:6e:a5:3e:c0:70:6a:78:08:65:
89:34:f8:48:51:b8:7d:5a:3e:53:e9:11:f0:78:bd:
f4:76:fe:fa:22:cf:29:88:63:45:82:3b:56:ab:27:
f5:ff:6d:2c:bc:7d:f1:da:5b:72:83:9c:32:91:d7:
a1:92:f8:d5:7c:97:f5:54:d3:4d:e2:37:58:d7:bd:
7e:81:d2:50:6b:f8:b4:0b:6d:43:51:05:d3:46:c5:
d8:ee:76:16:98:9b:6e:ec:dc:06:d5:27:87:82:d9:
2a:49:b0:1c:1b:6d:30:f4:55:c1:31:28:39:e3:7c:
84:b9:69:34:eb:74:8b:ee:92:a5:54:55:13:4e:a4:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:13:24:F7:2A:2B:17:5D:C9:73:A6:27:63:80:FA:06:8D:97:22:2F
X509v3 Authority Key Identifier:
keyid:88:09:18:A8:75:6F:04:93:1A:32:F4:CE:A3:41:C4:F2:3F:AD:50:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/iAkYqHVvBJMaMvTOo0HE8j-tUO8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAkYqHVvBJMaMvTOo0HE8j-tUO8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AD90/0300C5140F0A11EF90C8A132C4F9AE02/5DB3B5AA145C11EFAE012A55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.180.0/22
IPv6:
2402:a0c0::-2402:a0c0:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:f7:d9:d9:ab:66:92:49:69:a7:ba:d5:b9:b5:7c:91:be:68:
4a:4a:0e:22:4e:bb:c8:55:a0:22:a6:43:7a:4a:89:6f:9d:5f:
f1:56:c8:c6:18:9a:e9:95:46:5e:23:1f:44:1e:35:0c:03:e9:
46:19:71:2d:c4:70:4c:95:14:8b:07:8a:34:eb:30:6f:e6:68:
30:83:72:23:c0:a8:82:cd:62:79:33:52:9a:73:03:75:4d:23:
93:3b:04:18:4a:95:67:30:22:6b:6d:3c:37:9c:68:95:81:9a:
91:62:9b:b6:0e:38:b2:8c:08:c8:6e:3b:09:b1:bf:52:df:6a:
78:1a:24:d7:72:9f:04:72:de:ed:74:a2:ff:64:d4:fb:4f:80:
20:40:83:c1:fe:33:5d:62:1c:f7:bf:24:17:0c:54:b1:41:98:
c4:78:dc:7f:26:4b:2e:28:39:ba:ce:29:3a:98:4b:09:7e:88:
5a:f0:58:39:90:60:a7:fa:e1:84:5a:19:64:e5:3c:ab:05:89:
62:dc:fc:f3:0b:83:7f:53:1b:c5:84:92:d7:fd:c3:42:88:14:
a0:70:9e:97:48:8f:83:9e:ad:a1:52:04:03:fe:ba:b9:64:8a:
b7:af:72:ef:37:18:3d:7a:5c:bf:eb:65:3d:b3:37:b3:d8:98:
77:45:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 10:31:41 2025 by rpki-client