
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A07DBC62B03911F083346261C4F9AE02.roa
File:                     A07DBC62B03911F083346261C4F9AE02.roa (raw, json)
Hash identifier:          EDobCAZFBGKOU5DazXWApk+QjAwkkGRuH0JD5kFy8s4=
Subject key identifier:   AC:D4:5A:1A:37:B6:11:E4:B4:E8:2D:27:3B:23:CD:FA:45:21:6C:0C
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       03A4
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A07DBC62B03911F083346261C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 17:56:41 +0000
ROA not before:           Thu 23 Oct 2025 17:56:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138619
IP address blocks:        103.187.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:56:13 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Oct 23 17:56:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68fa6c58-2813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:be:68:a8:17:12:6d:df:8e:ac:2c:04:5a:
                    c7:19:42:e1:23:d4:6d:b5:ec:e9:c6:43:6e:7b:61:
                    99:f6:84:20:b5:e6:b9:cd:8d:37:37:6e:be:e7:83:
                    18:87:ba:bf:87:e4:ec:44:ce:1d:5b:5e:93:0c:f0:
                    ba:99:df:3a:f4:fb:7d:46:ea:be:5a:35:ec:5e:83:
                    69:58:83:c8:69:72:74:92:6b:30:ad:df:d6:79:42:
                    f3:93:4a:0f:20:3b:2b:11:e1:8b:91:25:25:6c:49:
                    83:63:df:b9:0a:78:51:24:36:d8:52:7a:3f:d4:e9:
                    0e:62:46:c1:a6:3e:19:5a:5c:3a:b8:8a:34:eb:ee:
                    60:76:16:de:33:14:19:74:87:24:77:14:bb:4a:db:
                    02:a6:87:e8:be:af:3d:fc:a2:97:dd:76:07:be:84:
                    c1:f7:36:cf:8a:2d:39:9f:7e:fb:48:8e:d5:0b:5c:
                    4a:b0:a6:a9:8b:dd:c5:83:1f:c5:ec:30:e0:e5:11:
                    0b:09:07:33:83:79:e4:db:08:1d:a5:57:73:d7:b0:
                    09:4a:7a:1f:44:93:78:44:b6:67:eb:96:5d:c2:8a:
                    44:29:2f:15:7c:0a:4b:14:09:07:09:e4:b8:5d:99:
                    7d:cd:53:30:88:91:36:50:8c:71:16:88:e8:c7:e1:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D4:5A:1A:37:B6:11:E4:B4:E8:2D:27:3B:23:CD:FA:45:21:6C:0C
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/A07DBC62B03911F083346261C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.244.0/24
    Signature Algorithm: sha256WithRSAEncryption
         7d:59:09:25:38:ae:9f:3a:4e:75:63:86:99:02:9e:f9:63:8d:
         6c:3d:a5:d2:99:2c:2d:55:02:5e:db:ba:39:33:f5:9e:32:18:
         72:98:b2:fd:24:12:c0:e1:6a:89:7e:9b:03:73:c1:5a:fc:19:
         79:79:77:ae:49:f7:bb:6f:9d:31:cd:45:9b:cc:72:d1:40:df:
         b3:11:20:99:f5:d8:0e:ee:19:70:a0:d1:1b:e6:af:ac:80:6d:
         97:43:ea:e5:ef:2c:35:40:d1:fe:d4:69:92:36:7e:b6:ac:ff:
         68:d1:bd:d1:f6:a5:b1:a1:4d:5a:3e:2c:24:d0:b3:ef:34:22:
         20:32:89:45:2b:79:86:7d:d8:be:78:9b:25:1e:98:fd:ff:06:
         4f:a2:73:83:12:7c:b3:ce:00:f0:ad:18:70:51:c7:5f:09:eb:
         c8:17:b4:df:ca:d9:67:d3:2d:e3:f6:d5:35:f9:fa:f3:da:f5:
         6e:1a:ab:25:e5:9e:d9:cf:dc:12:53:43:ca:b6:cb:12:e8:ce:
         66:71:6f:e1:90:ac:b0:95:3e:e4:07:d0:9f:cd:fa:cf:2d:33:
         e4:b1:bb:b1:44:30:19:33:8e:75:07:60:df:c4:17:41:c2:94:
         d4:9f:6f:c5:2e:51:70:5e:0c:43:53:ff:25:95:09:db:8b:e9:
         20:67:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 13:15:19 2025 by rpki-client