
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
File: 72F3E64ECB3011EEB1D2092CC4F9AE02.roa (raw, json)
Hash identifier: 1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=
Subject key identifier: DC:21:09:B5:F3:67:23:6C:B1:F6:8F:C7:DF:FC:99:BA:40:6B:A8:7A
Certificate issuer: /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial: 0358
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
Signing time: Mon 21 Apr 2025 00:55:46 +0000
ROA not before: Mon 21 Apr 2025 00:55:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135341
IP address blocks: 103.185.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Nov 2025 00:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 856 (0x358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Validity
Not Before: Apr 21 00:55:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68059792-909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:a0:a6:d4:19:3d:21:0e:c3:14:7b:3c:98:
8f:24:6a:06:d3:0a:6d:a7:b6:d4:28:20:1c:3f:92:
2e:7f:e3:13:0b:c6:69:c2:0a:7a:44:58:60:c3:2e:
c1:4f:d9:9d:d0:09:0a:bb:9d:0c:71:a2:2f:b2:b8:
24:cd:1a:b9:c0:b0:4c:b5:aa:9f:8c:d1:0e:ed:2c:
7a:6d:85:63:42:be:d0:9f:be:bb:0f:61:60:35:2f:
87:8f:65:e8:d4:b0:db:ce:61:33:8e:ee:1f:77:40:
01:5a:c1:74:ab:7d:2c:bf:1d:cd:79:c6:03:01:55:
7d:d5:1c:3d:f4:53:c0:9e:0e:f8:f2:c3:e7:26:a2:
99:df:5f:7d:ac:5a:f9:9f:18:fc:19:29:8c:b4:57:
96:19:b9:3c:c4:1a:3a:6d:bb:15:de:9a:79:5d:07:
4b:3a:b6:b5:8e:51:fb:5d:d7:bc:22:f4:bd:72:62:
5a:ac:46:bb:59:29:93:48:81:67:8d:81:9f:6d:e5:
a2:a9:0c:45:95:40:c2:be:46:88:d0:7b:47:fa:e4:
98:1f:b4:8a:b6:32:ac:5b:20:e3:a9:12:17:e8:8c:
31:ad:39:19:e8:b1:d0:ae:14:ea:d8:20:7e:0a:be:
5c:34:ce:8b:f3:cd:1a:96:22:4b:39:fc:01:b9:a0:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:21:09:B5:F3:67:23:6C:B1:F6:8F:C7:DF:FC:99:BA:40:6B:A8:7A
X509v3 Authority Key Identifier:
keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.25.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c6:48:f9:e8:a6:1c:74:ed:23:c7:71:34:88:c5:19:47:12:
cc:d6:b1:04:7c:52:6b:b4:0c:16:24:fe:05:25:10:9f:59:09:
a0:3d:29:9d:63:76:dd:f1:3d:8a:6a:3a:97:24:fe:29:7b:4a:
a8:c2:2d:55:bc:ef:ef:08:4b:f8:7b:22:b9:d4:34:c6:ff:29:
17:15:63:a4:ce:da:ca:b0:fe:f3:43:b9:a0:8a:ad:6a:59:ba:
52:f7:03:c1:b4:b2:95:29:13:4e:1a:dc:3b:90:09:fe:1e:01:
58:16:ac:d7:9d:9f:86:48:a0:ea:9e:32:46:00:23:1a:4b:43:
3c:f9:bc:a5:44:de:eb:3e:84:e1:9f:a2:5c:a7:db:6f:fb:47:
23:62:73:bf:56:27:5a:0e:4a:8e:0a:f2:84:45:1b:0e:e4:e3:
74:55:ab:f1:76:15:a2:88:a5:c5:82:2f:cd:98:70:77:c4:03:
fe:a4:6b:42:78:4b:33:ef:7a:f5:45:cd:b7:89:9f:03:e0:9f:
57:a9:70:a5:86:17:b8:85:5a:0e:ae:0f:ad:88:83:52:7c:13:
40:f0:8d:fe:70:75:f1:71:a9:8d:b6:4d:c1:68:e6:34:18:ff:
2c:3e:38:66:d4:de:33:cd:96:75:e8:bf:e6:1b:df:52:42:da:
a5:67:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:08:47 2025 by rpki-client