
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa
File: 25C6FD9CAE0511F187A47F574B11F970.roa (raw, json)
Hash identifier: wjJhmmUUiWYFdBshacAhxjyibepzAQTbTNK9qOb1a0I=
Subject key identifier: 09:35:03:E2:8A:BA:EB:C0:75:AB:F6:56:AE:77:14:1A:80:0A:5D:B8
Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial: 0523
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa
Signing time: Thu 01 Oct 2026 00:47:19 +0000
ROA not before: Thu 01 Oct 2026 00:47:19 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 218692
IP address blocks: 103.91.217.0/24 maxlen: 24
103.99.208.0/23 maxlen: 24
103.99.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1315 (0x523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Validity
Not Before: Oct 1 00:47:19 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abdad97-48d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:44:7e:9a:3f:b1:76:65:57:59:86:47:09:
88:8d:ba:b3:93:78:3c:94:f7:6d:4e:96:27:fd:81:
93:b2:d7:12:0b:b5:32:8c:1d:aa:65:c7:dd:aa:e4:
bf:94:1a:2f:0c:08:d9:16:ef:e3:50:a1:2f:57:ba:
0b:00:d7:24:90:4b:27:06:85:df:56:a7:9d:29:10:
f0:fb:6d:77:d6:a7:8a:01:29:06:cb:ca:bd:22:22:
9c:36:2a:af:e7:54:fa:00:7e:11:4b:00:3b:8b:2b:
20:12:09:20:79:55:63:17:56:ef:d1:68:61:a1:e1:
21:f6:87:af:8c:c8:16:03:75:80:da:df:e6:93:3b:
be:4b:b6:79:0e:af:1b:1f:1b:3f:47:de:f6:e5:30:
05:37:64:4c:7c:c0:4e:3e:91:40:78:0e:ad:f3:f6:
08:d9:ee:86:01:47:35:dd:95:f4:6d:bc:94:6d:ac:
22:9d:d8:6d:e5:71:29:9f:23:b2:a1:89:ef:29:fe:
39:69:be:25:45:cb:da:cc:cf:db:ab:e9:12:bf:f1:
42:1a:68:d3:5e:78:ef:af:8d:00:5c:48:d7:87:62:
46:0c:34:b8:74:c2:1a:cb:e7:17:b9:a4:f9:db:73:
a1:f4:29:43:9e:07:26:af:94:c3:d0:e5:5e:71:f7:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:03:E2:8A:BA:EB:C0:75:AB:F6:56:AE:77:14:1A:80:0A:5D:B8
X509v3 Authority Key Identifier:
keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/25C6FD9CAE0511F187A47F574B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.91.217.0/24
103.99.208.0-103.99.210.255
Signature Algorithm: sha256WithRSAEncryption
9e:88:27:79:31:e9:21:5a:2b:e8:c9:db:7e:67:48:11:b3:1a:
e1:13:f1:aa:fd:7c:f0:99:4f:06:1c:10:8d:6d:18:b1:10:cb:
00:aa:f4:90:63:1c:41:29:ea:6b:b1:c3:37:49:ff:da:89:53:
59:06:99:18:6c:b2:28:12:48:da:90:11:ef:46:50:cb:fd:fe:
4e:e4:5e:18:c0:ed:dd:96:63:35:e8:6c:f2:01:ed:61:b2:99:
92:d3:f8:3d:ad:88:d5:20:7b:4c:6a:db:ab:e0:0b:4c:b8:4b:
88:0f:90:2c:df:ea:f6:ba:6c:23:db:68:eb:b4:b8:59:7f:f9:
d8:5f:1e:7c:c5:3d:f5:3b:51:37:81:e7:8b:45:8d:67:5a:17:
d0:5f:a5:04:00:45:b3:08:76:a5:a3:03:4d:af:db:b0:52:08:
75:44:60:61:7c:b2:c3:47:89:b1:4e:18:c4:f3:52:70:48:f4:
fa:44:40:0c:8b:7f:a4:ea:1c:e4:cf:9a:3b:dd:79:7c:70:36:
d7:4b:d5:03:f3:62:f5:0d:52:6c:e4:ae:62:3a:a2:33:fe:23:
b5:76:3e:75:09:2d:32:d6:50:24:55:a8:b4:9e:cf:21:87:71:
f3:2e:02:91:7f:72:1b:b4:d3:2c:a2:10:46:6b:c0:2c:1a:e8:
c0:85:23:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:50 2026 by rpki-client