
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
File:                     34386BAAB90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier:          GX5lhFzUfDSRhzC4rRKwgz4v57unXFgUaq97vSDQYt8=
Subject key identifier:   9F:02:27:A8:58:CF:8D:52:2F:00:39:F1:4F:22:AA:31:4F:FA:62:95
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       023C
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 02:16:50 +0000
ROA not before:           Mon 03 Nov 2025 02:16:50 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     151354
IP address blocks:        103.210.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:16:53 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572 (0x23c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Nov  3 02:16:50 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=69081092-7d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:c2:9d:54:5c:8c:28:eb:10:71:9b:fe:d2:
                    5f:33:5d:51:ab:04:2a:15:5b:8e:1c:ad:7b:0c:90:
                    65:9e:a3:16:dd:04:7b:cd:d6:e0:75:c5:32:c0:70:
                    83:07:e8:13:25:e8:ab:45:de:7e:99:18:29:c1:05:
                    83:bb:0d:73:89:5a:5a:15:a2:2e:41:51:22:e0:39:
                    10:90:6a:04:03:71:2e:28:d7:61:38:d3:d5:1a:2f:
                    84:ce:8e:9e:a7:6b:87:4e:dd:a0:3d:c9:d4:63:62:
                    ea:82:a5:28:73:df:0c:00:35:3c:ee:98:c1:91:37:
                    c6:5e:f2:e5:25:bd:8b:8f:80:d1:8f:04:85:2d:e8:
                    d3:6e:c0:e5:09:88:b4:e0:68:60:18:83:f0:e3:5d:
                    4d:4e:2f:9f:49:1f:40:be:7d:7d:38:96:9e:23:ca:
                    46:c1:27:7f:f7:15:a5:34:d8:90:d1:b5:72:b4:38:
                    3e:a2:42:de:b4:da:c7:ea:87:3d:07:3d:c1:51:71:
                    b3:1e:52:f3:6f:ab:e1:ad:e0:ad:83:b1:4c:68:20:
                    bf:19:44:de:51:e1:d3:40:34:45:36:a9:e3:15:0e:
                    11:b3:96:b0:fc:dc:78:d0:96:fd:dc:d6:81:28:4f:
                    3a:32:36:76:c4:c4:f3:34:8f:4a:ed:ba:32:d1:8d:
                    68:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:27:A8:58:CF:8D:52:2F:00:39:F1:4F:22:AA:31:4F:FA:62:95
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.115.0/24
    Signature Algorithm: sha256WithRSAEncryption
         25:fa:a8:d7:33:be:f0:4c:be:f4:ee:d6:7c:7f:6c:48:9b:03:
         ca:9c:05:82:72:01:ca:eb:e3:3a:14:22:69:69:5a:fc:9e:ac:
         56:b2:0e:6f:aa:e9:40:ca:f4:1b:88:6f:fd:95:3d:10:1c:5e:
         d6:fd:b4:03:28:28:99:0c:35:10:c9:55:f5:a5:d7:27:33:dc:
         50:91:f1:2c:61:6d:cd:e7:cb:b8:91:e8:e2:9f:bd:db:1e:bb:
         3f:3b:e9:cc:c3:9e:21:91:62:f6:e8:5e:32:d3:b2:a4:4f:bf:
         16:72:d3:69:85:de:41:c8:27:56:09:43:19:dc:2b:4a:26:86:
         c5:23:26:58:0e:7c:93:66:5e:9a:3b:ce:74:78:3c:e6:8a:93:
         b5:15:15:b6:c8:48:bd:1f:64:98:5e:ab:74:58:04:74:ba:c6:
         54:9a:7b:c0:dd:37:7e:43:b2:c7:c2:2d:cb:24:f5:4d:5c:73:
         c0:45:72:4f:e1:58:f2:eb:2f:aa:bb:63:c9:08:12:10:14:f3:
         09:7a:e5:72:d3:2d:5d:63:6f:ae:9d:27:1e:42:b9:9a:f7:bb:
         12:75:82:47:19:d3:7f:0e:ab:cd:a9:75:fc:bf:ea:30:c4:56:
         7c:84:c6:a7:07:1f:42:23:37:22:46:1e:b2:30:c5:9b:5d:c6:
         7a:27:08:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:35:51 2025 by rpki-client