
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa
File: A7E24C00ABF411F0A0B37937C4F9AE02.roa (raw, json)
Hash identifier: ClZn2xirzr+629EzY8UXOvPJeXz2ck5eF+NekF81TbI=
Subject key identifier: 75:C1:0F:9C:FA:52:9F:26:42:4B:E9:20:20:0E:2F:83:02:00:1B:22
Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial: E6
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa
Signing time: Sat 18 Oct 2025 07:32:53 +0000
ROA not before: Sat 18 Oct 2025 07:32:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.12.48.0/22 maxlen: 24
103.72.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Validity
Not Before: Oct 18 07:32:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68f342a4-6945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:d3:e6:6c:1b:b7:11:15:c0:e7:35:51:e0:
88:99:a3:08:08:67:c7:64:62:a3:5a:db:e4:eb:e9:
ef:3d:8a:5b:45:08:2e:ee:37:3c:d6:05:fd:03:a0:
8a:04:86:4d:e7:4d:47:a8:9f:e3:98:f1:c0:5e:9f:
91:f1:8d:f3:1f:7e:18:bf:7a:c7:21:c9:3a:72:ad:
3c:2b:76:04:50:41:84:18:4e:7c:8b:cb:35:5a:d2:
33:55:8b:eb:39:bc:d8:c6:aa:c5:78:11:40:16:7c:
c0:46:e3:bd:e7:0b:ba:8b:10:5e:cb:12:ae:e7:5c:
86:a0:ed:62:06:11:02:59:13:c4:b9:f4:ee:4b:1e:
52:5e:b9:c0:fc:d6:61:df:fc:ab:98:29:8d:41:a2:
be:7a:14:0b:a6:2b:13:1f:ff:91:69:ef:62:06:b2:
a9:2d:ce:0e:6b:71:06:5e:ad:bc:62:c8:80:d4:86:
2d:70:38:a2:61:5c:a2:1e:a6:30:4d:8d:08:5b:c0:
e8:dd:0a:cd:96:77:09:5d:82:47:e6:a8:8a:32:a6:
ee:c5:4b:45:4b:eb:1c:fa:2a:11:f7:c6:1d:ec:a9:
06:aa:0e:0d:b8:4b:ce:59:75:5e:8b:f5:95:61:85:
21:33:a5:dc:22:39:2c:67:f7:97:88:1c:64:b6:73:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:0F:9C:FA:52:9F:26:42:4B:E9:20:20:0E:2F:83:02:00:1B:22
X509v3 Authority Key Identifier:
keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.48.0/22
103.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:83:4e:bb:e0:34:73:2a:53:c4:08:d5:2f:73:aa:51:42:8b:
dc:8e:8c:c6:77:b4:ec:3b:06:fb:bd:92:00:28:7b:e4:c4:3d:
4e:dc:f1:87:58:b5:c3:23:f2:47:9c:db:69:f6:c3:5a:f5:11:
c8:aa:39:f1:b4:73:1b:1e:07:f3:23:3f:8d:f3:ae:af:0b:3a:
9c:cd:61:99:d1:d0:56:ec:d1:e1:97:a6:0f:9c:34:f9:bb:60:
e9:a3:6e:de:d9:07:b2:3c:60:a1:a4:c3:4f:90:bf:b3:85:b4:
9b:cd:5d:fa:50:63:a1:15:af:d0:28:b8:f0:a7:4c:c3:0c:0d:
64:e4:c6:ec:76:93:70:19:62:83:e4:cc:3c:ac:5a:22:c7:bc:
69:4b:85:e8:5a:be:6a:ce:c8:23:f1:78:82:e3:9b:a9:f8:fb:
44:cd:ac:ba:69:3d:37:fd:18:e4:e8:1c:dc:9d:54:83:d3:0d:
96:40:49:cf:52:d3:c3:6a:9d:3b:b6:2b:5c:45:0f:68:77:cf:
97:78:2b:8e:f1:a1:14:a3:39:d2:81:d9:dd:e9:fb:16:aa:fe:
df:40:e3:f0:4e:14:7f:0c:6a:66:1a:58:e4:c9:59:f8:5f:4b:
55:2e:95:7d:cc:0c:98:d7:c1:77:cd:74:fb:44:ba:4d:4a:07:
6c:b8:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:43:34 2025 by rpki-client