
$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
File: 421FF25E18AD11EF99EAA661C4F9AE02.roa (raw, json)
Hash identifier: 9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=
Subject key identifier: F1:55:09:D9:37:0D:04:23:5E:09:4A:EB:39:A7:3F:09:AB:C3:8E:0F
Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Certificate serial: C9
Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
Signing time: Tue 03 Jun 2025 05:25:45 +0000
ROA not before: Tue 03 Jun 2025 05:25:45 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 131314
IP address blocks: 103.28.144.0/22 maxlen: 24
2401:a2a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 06:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E
Validity
Not Before: Jun 3 05:25:45 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=683e8759-06f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:87:a1:ba:cd:7c:11:02:02:aa:9c:b0:66:
03:2d:6b:7c:24:08:9c:2d:5f:b5:0a:ca:b7:bb:17:
6a:66:9c:e5:4a:0b:3b:60:9f:ce:ca:26:5e:34:f5:
b8:15:31:90:30:18:42:c1:c5:80:3e:97:8b:fc:34:
27:ad:ab:55:34:94:f1:2a:5e:96:bf:cb:d4:0c:8d:
75:67:39:22:72:2a:36:aa:b6:95:a3:53:2b:65:eb:
30:78:06:d4:9a:5a:02:49:de:4f:7b:49:7c:27:e4:
88:98:e1:c0:25:86:a7:23:24:a4:0c:4f:8a:15:9e:
21:9b:d0:69:bd:79:ed:b8:ba:58:d9:80:a7:aa:33:
13:6e:e1:0e:00:4b:61:66:20:43:12:f0:36:46:0b:
78:bc:82:ee:43:fa:54:4e:b2:ba:7d:2b:70:8b:23:
49:59:4c:b2:c4:5e:c0:62:6d:b8:b8:e4:04:ae:42:
0f:94:03:b7:d3:ed:33:bd:97:fa:aa:1a:5d:31:d2:
2e:42:68:ff:4a:c8:2c:a6:c1:70:ec:56:6e:e2:0c:
89:42:41:23:05:60:6b:88:e4:a2:0f:1a:c7:39:4e:
21:29:be:2c:c1:ea:7e:57:11:3e:85:77:13:e8:77:
1c:d1:b4:43:34:d8:ce:fa:b0:eb:5e:1e:28:c8:b7:
d7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:55:09:D9:37:0D:04:23:5E:09:4A:EB:39:A7:3F:09:AB:C3:8E:0F
X509v3 Authority Key Identifier:
keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/421FF25E18AD11EF99EAA661C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.144.0/22
IPv6:
2401:a2a0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:f5:24:8e:cf:38:28:f8:50:23:bb:52:85:4a:20:34:4e:82:
a1:9c:91:55:f1:13:ec:bf:18:5c:71:81:a5:09:31:00:57:19:
70:25:e0:1c:aa:bc:7c:bf:51:6f:21:d2:6a:33:e4:04:ef:83:
98:7e:88:cb:ea:12:d4:74:90:9e:fd:c1:61:94:ca:ae:45:b3:
84:f5:7e:0c:06:59:e6:23:f5:33:69:e1:0b:53:87:0f:50:e3:
ab:3f:7c:02:75:f4:42:38:7f:85:1b:59:fe:71:d7:0a:7b:fc:
9a:85:21:18:47:14:04:23:6b:b5:a0:0b:3e:3f:0c:08:0a:1f:
6f:71:21:74:ef:c7:e1:c5:53:39:ab:c2:c0:7e:af:02:e8:15:
2d:e7:d8:03:97:b6:b6:56:47:ab:40:fe:eb:5e:1d:9f:10:08:
d5:7d:35:8e:7b:c8:e4:8d:12:78:0a:cc:e1:a0:10:80:69:fb:
d4:97:7a:e1:d0:83:84:7e:56:45:55:d1:8e:5e:c5:12:00:fc:
13:f8:62:11:bf:b9:24:be:2b:6c:f9:8d:34:3b:82:28:78:e1:
1b:4c:b2:e1:37:c1:90:25:59:f6:e9:68:a6:17:25:7b:dc:8e:
c6:94:58:2d:cf:cd:89:77:5a:2f:5d:b9:83:0a:5f:d6:fc:f1:
a0:e6:9e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 00:03:56 2025 by rpki-client