
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/47B1ABEA005711EF9DA70542C4F9AE02.roa
File:                     47B1ABEA005711EF9DA70542C4F9AE02.roa (raw, json)
Hash identifier:          EKbBGVNf6UZGjGH5PT+x5TqElAgqJbm8pSoP/IIyglU=
Subject key identifier:   88:93:5F:02:F3:76:1F:C0:1D:9C:85:44:24:9C:86:94:89:98:E2:44
Certificate issuer:       /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B
Certificate serial:       0126
Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/47B1ABEA005711EF9DA70542C4F9AE02.roa
Signing time:             Sat 01 Nov 2025 05:19:00 +0000
ROA not before:           Sat 01 Nov 2025 05:19:00 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55720
IP address blocks:        103.175.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:44:41 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B
        Validity
            Not Before: Nov  1 05:19:00 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69059844-ecac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:18:4c:f3:bb:79:c9:0b:01:99:2a:63:80:f3:
                    36:a7:c7:aa:bb:b0:ae:f3:11:71:63:36:8e:2f:21:
                    49:80:4c:fb:5c:b8:2e:bd:27:34:56:f2:66:59:e5:
                    3b:c6:64:09:9a:6c:69:c1:d8:5a:7d:a8:20:45:02:
                    fb:ac:62:d8:67:c1:77:3f:b4:d2:59:05:c4:70:79:
                    42:5d:c2:ad:9a:c1:27:19:72:02:46:67:ec:b9:7f:
                    78:a8:44:f1:66:60:64:90:b3:f3:d5:4e:f5:b6:5c:
                    71:2a:93:33:28:37:d0:3a:03:21:00:ca:a7:e7:53:
                    08:09:b8:75:bd:24:e9:a7:42:bc:6e:fd:ee:4b:ce:
                    0e:ad:95:49:1b:8b:b6:37:a2:b4:0a:7c:53:53:22:
                    bc:83:42:08:ae:b4:30:02:16:51:de:e7:e5:0b:08:
                    b5:fb:1e:ca:a3:3c:c1:17:a6:d7:c2:9d:15:b3:1a:
                    ee:90:cf:99:5c:3b:50:f2:3f:9e:04:9b:c5:24:1c:
                    6c:48:f8:88:d9:63:45:f8:61:a5:f0:13:b5:a0:1e:
                    c9:89:24:cb:e2:ca:f8:bf:89:51:49:90:fd:ff:3b:
                    ef:29:05:ee:48:e4:6a:51:ec:f8:be:5d:da:da:07:
                    18:76:04:c5:80:e3:13:51:cd:b9:99:2d:f9:35:80:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:93:5F:02:F3:76:1F:C0:1D:9C:85:44:24:9C:86:94:89:98:E2:44
            X509v3 Authority Key Identifier:
                keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/47B1ABEA005711EF9DA70542C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.16.0/24
    Signature Algorithm: sha256WithRSAEncryption
         04:21:94:55:ab:c9:53:cc:a3:73:44:3a:df:41:e0:b6:ce:85:
         33:d1:f0:d5:d3:99:ae:be:51:fb:f2:64:10:a7:6b:41:2b:4f:
         97:ff:2a:29:63:97:77:d3:c1:5c:a5:65:b1:70:08:1e:ab:6f:
         fc:d1:9b:6e:aa:8c:e9:a1:94:07:d6:8d:02:be:44:f8:41:5a:
         4f:28:62:a9:69:0b:8c:c5:87:32:e7:c8:2e:7c:b1:17:fb:39:
         63:f0:99:af:48:66:f9:36:41:68:32:c0:1c:ae:88:69:e7:a5:
         a5:07:d8:c7:fb:f1:d4:17:55:3e:a7:4d:c9:e1:9b:4c:b9:61:
         67:76:e7:8b:2f:a7:57:0a:b0:35:39:e8:2c:19:ec:05:66:0a:
         0d:8c:71:33:35:fb:70:1c:dd:32:e1:5e:66:b3:36:43:8e:69:
         d4:37:bf:b2:c8:f9:a5:f2:83:21:d0:90:cf:37:8e:57:70:0d:
         06:cb:6d:62:14:0f:a5:32:19:13:93:1d:c9:c2:77:18:2f:ce:
         18:83:dd:21:24:0c:78:f2:3b:d9:ae:cf:4c:b8:6d:ad:00:29:
         a9:a9:97:29:f2:6b:ea:75:10:5c:0f:32:f9:f1:bd:24:fe:d2:
         91:0b:6c:94:07:35:cf:51:9e:1a:7f:38:df:90:e7:36:c7:fd:
         d1:92:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:17:35 2025 by rpki-client