
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/349D4A7AB90A11EF97D24653C4F9AE02.roa
File: 349D4A7AB90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier: sJy5pshkDUnbouI1mvCets72eh7H/oS/xnD04CW6At4=
Subject key identifier: 11:4E:47:E3:68:B3:B6:6A:DF:BF:3D:5B:E7:9C:A6:0B:E8:50:3E:DF
Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial: 0243
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/349D4A7AB90A11EF97D24653C4F9AE02.roa
Signing time: Wed 05 Nov 2025 02:16:42 +0000
ROA not before: Wed 05 Nov 2025 02:16:42 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 152131
IP address blocks: 103.210.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Validity
Not Before: Nov 5 02:16:42 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=690ab38a-3470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:a6:86:b7:92:2d:28:54:72:53:84:0e:1b:
bb:08:24:e8:48:80:29:e7:b4:1a:2c:33:88:89:b5:
10:ab:10:06:6a:4d:a0:4c:df:4f:ce:a7:80:ab:cf:
5d:af:4d:ed:07:0e:99:32:f5:7d:4e:40:73:dc:30:
be:35:f6:a7:5c:91:ce:8f:e9:19:d0:c3:50:aa:11:
b5:2a:3c:85:ab:04:74:16:00:b8:b7:d8:ba:c8:54:
97:13:cd:5e:1b:5c:36:2a:88:30:90:60:76:25:5f:
a7:42:02:42:20:4c:86:0b:27:63:4a:32:b0:d5:19:
a9:5f:c5:a5:06:8c:2c:a3:22:2d:ee:92:3a:d4:d8:
2f:eb:af:aa:fe:17:05:f0:88:03:db:21:2c:64:fd:
bd:53:71:3d:ec:d6:3f:7e:e2:fa:e7:7a:f1:28:33:
3a:6a:91:df:5e:be:17:33:77:27:f0:72:7e:1c:44:
21:0e:10:eb:a6:a7:9f:f0:27:66:d4:c1:4b:bf:5b:
72:5f:6d:30:9e:0e:b0:92:14:7b:f6:9e:fb:40:e3:
36:92:ce:1a:0d:12:ac:51:5f:53:c1:d1:2f:03:33:
c5:8e:a5:74:0b:34:42:cb:75:34:09:00:4a:9d:83:
e9:d6:0f:7b:3b:ba:48:01:8c:79:d4:7b:a0:12:98:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:47:E3:68:B3:B6:6A:DF:BF:3D:5B:E7:9C:A6:0B:E8:50:3E:DF
X509v3 Authority Key Identifier:
keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/349D4A7AB90A11EF97D24653C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.114.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b7:d4:8e:a4:63:33:89:5d:79:a0:cf:98:1e:5c:b1:ed:79:
32:2f:22:75:18:cb:07:4c:fd:ec:e2:19:11:42:a7:dd:e8:5c:
ea:e5:81:ab:f7:b4:70:32:a4:a9:a1:2e:90:0a:ed:53:12:c1:
c2:19:b8:a7:36:ea:85:3f:69:53:45:d6:5a:dc:d9:cb:1f:e1:
2c:0d:4e:1d:a5:2d:ea:17:c8:d4:73:f9:56:62:5e:41:b8:ef:
cb:41:79:02:75:dc:6d:ad:c5:53:1d:32:74:74:54:1c:53:a5:
2e:55:9b:49:c6:1b:d2:fe:2f:de:cf:06:f8:de:c2:7a:d7:2e:
df:98:65:99:f2:99:7b:a3:c9:66:3e:26:2b:b7:21:68:4f:79:
dd:71:1d:95:97:c7:90:56:d2:aa:cd:16:14:f9:84:7e:e5:9f:
7e:5d:27:d3:28:c9:b3:a6:b9:37:06:4d:66:ec:e9:4d:74:b7:
37:c3:06:1f:5c:19:b5:7b:e6:45:fb:bc:47:54:72:e5:bb:8e:
42:bc:69:2a:ce:ae:37:79:dc:b6:2d:0f:29:13:42:00:31:4d:
5c:13:64:e6:5d:5c:a1:49:06:be:6e:d0:28:74:d2:02:a0:8e:
cd:f1:ad:4f:e9:5f:58:b7:45:63:07:cf:65:c5:5b:74:15:12:
eb:98:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:30 2025 by rpki-client