
$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
File: CED1044A623011F09444A631C4F9AE02.roa (raw, json)
Hash identifier: lqYz7plj25I4UFVda7v0py7vjm0VDK3lt1JVntkVi38=
Subject key identifier: 5F:5A:C8:3E:25:5C:EE:33:B3:D9:85:3E:44:B1:65:AF:CF:01:52:61
Certificate issuer: /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial: 02E4
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
Signing time: Wed 17 Sep 2025 02:08:34 +0000
ROA not before: Wed 17 Sep 2025 02:08:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 63969
IP address blocks: 103.23.95.0/24 maxlen: 24
103.190.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 04:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Validity
Not Before: Sep 17 02:08:34 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68ca1821-3386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:2d:8c:b4:7e:41:00:85:ca:8c:b6:de:62:
b5:ce:2a:9b:c1:90:69:e3:97:e2:0b:1f:7a:72:8a:
09:18:1b:a5:47:76:1f:ee:23:0b:6c:e6:17:c8:48:
b1:2f:d8:cb:d2:89:72:05:7b:1e:2b:6c:5d:1b:f4:
3e:43:d7:50:f5:0a:97:7f:10:00:b1:5c:71:f4:03:
97:d7:81:71:8b:15:9a:b9:fb:47:38:c9:ad:ba:11:
09:ae:de:29:b8:7c:c5:4d:4e:f9:24:74:90:0d:c7:
35:bf:e8:95:7e:15:71:8a:0c:60:55:fa:d5:55:e2:
b9:e8:c4:bf:bc:fd:88:4f:3b:79:24:bf:9f:4a:aa:
6c:36:40:5c:72:f3:b7:f5:41:e1:3e:f1:e1:05:85:
0f:6f:58:b4:76:98:16:fb:f1:dd:ef:5e:ba:5a:23:
46:c4:c1:13:df:c3:29:4f:dd:f1:72:36:ff:72:1b:
ea:c9:28:5e:b3:4f:08:ee:c2:5e:f8:2d:b7:51:bb:
7f:3a:d7:e4:f7:66:88:07:96:5e:4e:f0:79:44:63:
f5:f1:42:e5:95:60:64:9d:39:33:fc:c7:dc:b3:87:
d6:65:16:92:d2:bc:cf:89:88:f3:25:8a:fe:31:04:
4a:8f:b7:01:1f:86:2c:db:5b:58:fd:ee:a9:2f:38:
7d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5A:C8:3E:25:5C:EE:33:B3:D9:85:3E:44:B1:65:AF:CF:01:52:61
X509v3 Authority Key Identifier:
keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.95.0/24
103.190.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:b8:21:e7:f0:7c:60:d4:72:de:99:50:e1:f9:ef:c5:1d:a0:
4a:45:03:3c:8a:ff:7e:40:d3:10:a2:e2:f8:31:fa:00:15:fe:
1e:85:8d:d3:a2:11:d2:d0:1d:c9:db:f3:b0:58:5a:c0:19:d0:
a7:4a:66:99:56:a4:fd:95:5a:be:4c:0e:36:f5:4e:a4:f5:7b:
79:a8:dd:24:c2:61:d6:9b:ee:2c:2a:3e:55:8e:af:f6:05:52:
7c:4e:32:66:f0:45:a7:09:35:7c:47:44:4c:39:24:9c:64:0f:
34:39:3a:73:a1:b2:dc:fc:c5:f3:b8:70:b0:bb:1c:28:9b:57:
0e:93:c0:f8:e9:60:be:d0:a2:bd:e1:d5:14:3a:05:c8:d3:35:
3a:bf:fe:ed:66:41:2e:55:2c:5f:02:17:ec:17:4d:f6:dd:5e:
d4:4a:83:23:89:84:d7:fe:0c:e4:cd:4b:f6:66:02:74:c2:27:
aa:84:a8:02:83:5f:a2:2d:cb:9a:f1:75:dc:08:e8:23:e4:43:
00:49:87:eb:cf:67:76:77:11:7d:6f:24:1e:df:dd:7e:f0:5f:
52:93:6b:51:38:7a:48:f8:60:2b:77:80:71:f8:74:6f:a2:a1:
57:5f:ec:03:5c:19:83:02:b8:32:0c:fa:6e:72:c1:ba:4c:73:
ef:48:56:e9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMxNEExMTAvBgNVBAUTKDI3MkNBRTVGMjFDOEJGNkI2QjQ5MTVBRjAwMDRDN0VG
Q0ZDN0RCM0QwHhcNMjUwOTE3MDIwODM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGNhMTgyMS0zMzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAog8tjLR+QQCFyoy23mK1ziqbwZBp45fiCx96cooJGBulR3Yf7iMLbOYXyEix
L9jL0olyBXseK2xdG/Q+Q9dQ9QqXfxAAsVxx9AOX14FxixWauftHOMmtuhEJrt4p
uHzFTU75JHSQDcc1v+iVfhVxigxgVfrVVeK56MS/vP2ITzt5JL+fSqpsNkBccvO3
9UHhPvHhBYUPb1i0dpgW+/Hd7166WiNGxMET38MpT93xcjb/chvqyShes08I7sJe
+C23Ubt/Otfk92aIB5ZeTvB5RGP18ULllWBknTkz/Mfcs4fWZRaS0rzPiYjzJYr+
MQRKj7cBH4Ys21tY/e6pLzh9hwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF9ayD4l
XO4zs9mFPkSxZa/PAVJhMB8GA1UdIwQYMBaAFCcsrl8hyL9ra0kVrwAEx+/Px9s9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzE0QS81RUY4QTkxNjAw
RUExMUVEOUMwQ0IzMzJDNEY5QUUwMi9KeXl1WHlISXYydHJTUld2QUFUSDc4X0gy
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p5eXVYeUhJdjJ0clNSV3ZBQVRINzhfSDJ6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzMxNEEvNUVGOEE5MTYwMEVBMTFFRDlDMENCMzMyQzRGOUFFMDIvQ0VEMTA0NEE2
MjMwMTFGMDk0NDRBNjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnF18DBABnvscwDQYJKoZIhvcNAQELBQADggEBALS4Iefw
fGDUct6ZUOH578UdoEpFAzyK/35A0xCi4vgx+gAV/h6FjdOiEdLQHcnb87BYWsAZ
0KdKZplWpP2VWr5MDjb1TqT1e3mo3STCYdab7iwqPlWOr/YFUnxOMmbwRacJNXxH
REw5JJxkDzQ5OnOhstz8xfO4cLC7HCibVw6TwPjpYL7Qor3h1RQ6BcjTNTq//u1m
QS5VLF8CF+wXTfbdXtRKgyOJhNf+DOTNS/ZmAnTCJ6qEqAKDX6Ity5rxddwI6CPk
QwBJh+vPZ3Z3EX1vJB7f3X7wX1KTa1E4ekj4YCt3gHH4dG+ioVdf7ANcGYMCuDIM
+m5ywbpMc+9IVuk=
-----END CERTIFICATE-----
Generated at Sat Oct 25 06:50:51 2025 by rpki-client