
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
File: 9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (raw, json)
Hash identifier: 4J+Nn/bjKR28nk40OXzQpDjnmTjR/SOYeS05cuCBwyo=
Subject key identifier: 67:0C:D0:B7:D1:59:EB:AF:93:FF:99:DD:0B:9C:DA:C6:80:D8:B1:79
Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial: 049C
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
Signing time: Mon 03 Nov 2025 00:14:55 +0000
ROA not before: Mon 03 Nov 2025 00:14:55 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 147033
IP address blocks: 103.173.106.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Validity
Not Before: Nov 3 00:14:55 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=6907f3ff-e655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:77:86:b9:e6:ca:39:11:73:78:be:f9:36:
7f:82:9e:38:39:99:2d:0a:45:5a:e4:9b:14:b1:10:
b4:fc:b9:44:cc:e7:94:b8:b1:01:46:03:23:cd:bd:
e8:8d:a2:9c:ad:2e:81:bb:28:ee:62:67:95:a1:65:
50:19:a2:b1:68:c4:6c:6e:6f:e1:7c:eb:b4:91:af:
46:9a:00:4e:3f:df:c8:52:1b:bb:04:83:e2:4a:8e:
91:9b:64:14:58:a7:7b:49:7d:ea:27:cc:de:b2:fa:
77:3d:23:03:38:0d:75:fa:5b:7e:02:03:20:23:c5:
b2:08:7e:66:2f:ec:71:ca:8b:2d:3d:0b:c1:d4:0f:
37:26:2a:75:85:c1:98:4b:e1:50:7c:37:d6:31:98:
71:87:65:65:f3:83:a6:06:18:39:65:3e:29:b7:40:
5b:49:e4:92:68:5f:77:21:f9:f1:c3:28:22:88:79:
dc:4d:f8:b1:8d:d9:b9:71:c7:a3:3e:6f:92:15:fa:
c4:7e:e1:82:34:18:be:42:8d:0b:df:6a:c1:8d:fe:
cb:30:19:80:d8:b7:0f:c2:9f:da:41:53:1b:08:d5:
4c:31:2e:75:87:2c:52:b9:6f:5f:33:f3:7f:e0:01:
f3:e8:c1:1d:bf:de:62:7e:34:d5:34:14:f2:6d:5f:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0C:D0:B7:D1:59:EB:AF:93:FF:99:DD:0B:9C:DA:C6:80:D8:B1:79
X509v3 Authority Key Identifier:
keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.106.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:e8:6f:cb:20:98:1e:79:d5:7a:19:f5:a7:38:36:79:6b:aa:
e1:0d:4d:25:48:dd:a5:b8:cb:ba:44:39:ba:bc:bd:29:08:1a:
e0:64:fd:88:34:9f:d2:49:ca:64:13:20:d9:91:0d:07:2e:77:
9b:dc:c5:5a:fb:0f:7b:02:de:87:24:c4:ee:8f:2f:7b:7c:8f:
dc:18:7c:54:09:cf:00:27:e9:2c:7f:0b:31:f3:c9:4f:32:58:
09:e7:e9:c7:66:a5:a8:e3:b9:e3:67:c6:ce:70:a1:d4:fc:a4:
5f:61:54:31:94:6d:67:87:06:4c:12:e6:ff:05:6e:38:66:8b:
29:26:5c:d9:7c:74:3d:ae:41:3d:5f:ab:8a:90:4d:3b:e8:78:
d7:f0:62:9a:d7:6c:75:14:1c:6b:04:f7:1f:fd:81:fe:27:de:
59:79:b6:b8:f6:d4:73:ab:f6:e6:7e:93:72:33:ea:46:06:8e:
08:06:5a:1f:4a:e6:bc:81:85:01:18:ca:42:e4:d9:f7:09:46:
88:10:2d:a3:48:a9:67:6c:77:fa:94:78:95:3a:4f:4c:c7:7f:
5a:d6:f1:4a:bb:69:47:bf:bc:a8:f3:f4:60:84:11:8e:cd:83:
41:13:9b:f2:ce:d8:ef:e2:ae:07:e9:bc:35:3a:f1:bc:0f:16:
a1:7d:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:14:20 2025 by rpki-client