
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa
File: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (raw, json)
Hash identifier: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI=
Subject key identifier: 4D:70:FF:19:19:75:C6:4B:B9:DF:BE:2E:B0:40:E5:3F:D7:12:7C:1E
Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
Certificate serial: B1
Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa
Signing time: Wed 19 Mar 2025 05:21:56 +0000
ROA not before: Wed 19 Mar 2025 05:21:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132528
IP address blocks: 103.73.108.0/22 maxlen: 22
2406:f780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl
rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149987, serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A
Validity
Not Before: Mar 19 05:21:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67da5474-dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:f2:df:c2:dd:96:0e:f8:7f:6d:65:09:9d:
9c:20:36:8e:20:90:44:a1:32:f2:55:39:91:fd:9e:
22:09:20:5d:17:c6:65:2e:08:14:3e:66:28:4d:91:
cc:04:59:eb:dc:ff:e0:06:ab:25:8a:cf:44:50:ab:
56:26:3b:16:61:f5:c7:20:4b:32:ed:b4:e5:ce:ab:
8c:00:1c:01:fd:7d:0d:79:2c:ed:86:81:e2:00:a4:
8e:f2:3f:61:f4:f7:3e:cc:51:b1:9f:af:f3:98:e6:
33:15:e4:a2:67:19:bf:dc:e0:8e:e1:6b:2d:ef:f2:
ba:d2:0c:ec:b5:35:93:7a:2b:e9:e5:b8:2e:a3:3b:
be:19:bf:12:45:8c:86:a8:79:d6:fa:a4:35:a2:72:
a8:95:53:9a:0e:03:39:ba:63:90:23:32:c9:a1:89:
dd:fa:d4:f4:4c:5b:3f:ad:09:ec:e9:d3:0a:6c:05:
15:91:15:a0:6d:f6:62:2a:2a:1c:9c:23:01:28:35:
d0:20:90:83:a7:e9:38:a8:ba:01:43:28:48:58:a2:
01:2d:ed:bf:5a:e8:8d:38:aa:7d:48:7d:bb:f7:3e:
4f:83:ec:c5:e1:77:c7:d5:4e:58:42:67:0a:a7:11:
21:1d:5e:7f:22:99:1b:58:70:0b:4b:97:bc:87:6f:
1b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:FF:19:19:75:C6:4B:B9:DF:BE:2E:B0:40:E5:3F:D7:12:7C:1E
X509v3 Authority Key Identifier:
keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/3576AA9EFC2311EE8CA4916BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.108.0/22
IPv6:
2406:f780::/32
Signature Algorithm: sha256WithRSAEncryption
2e:af:23:da:43:c4:45:e1:13:28:26:3b:6c:ef:3b:b2:59:d3:
53:45:63:c0:b0:2e:2f:85:69:58:60:58:e0:f7:23:d8:6d:01:
a5:2c:4a:d2:7f:09:e8:32:7e:a4:90:94:4f:0a:b1:10:eb:47:
75:91:fb:b7:93:0b:4c:b8:a7:d0:d6:1c:d5:50:67:04:0d:a2:
bf:11:68:4f:6f:6c:ef:ab:11:1e:33:7e:18:f0:bb:b9:f6:0b:
31:d4:c0:c4:37:23:83:91:45:a8:53:aa:2f:93:1c:0f:a0:a3:
1a:a0:51:52:dd:5f:e4:ce:cc:c5:5a:91:55:31:ec:6f:88:68:
d2:6e:11:c5:dc:14:ae:97:d3:57:89:24:39:fa:06:78:cb:cf:
93:5c:e2:e7:05:7c:54:d8:4e:be:6e:4c:50:10:ce:22:2b:36:
d5:d2:8b:76:3a:27:88:17:e5:a1:b7:4a:27:0a:12:25:6a:11:
24:7b:e5:e4:65:aa:fa:2f:f9:d6:0c:a1:a2:15:46:71:b3:b6:
4a:3b:bd:d2:1e:c0:26:2e:a1:e3:1a:e6:cf:14:08:ef:bb:f0:
86:96:a5:8a:57:f7:19:d9:ea:1e:66:e9:09:7a:50:87:82:38:
da:a4:fb:95:07:30:b3:58:90:c2:a1:c9:06:0c:b7:51:f0:30:
ab:b4:fc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:44:45 2025 by rpki-client