
$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
File: C4C5449EABD111F0A9879016C4F9AE02.roa (raw, json)
Hash identifier: 27GDWRqexIzZCkZxT6vxP5UiZyDTasoUQCay0EB/G5E=
Subject key identifier: F3:05:D1:E3:4F:D3:6F:BB:E4:C2:72:50:A0:03:08:44:7C:E8:0C:06
Certificate issuer: /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial: E6
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
Signing time: Sat 18 Oct 2025 03:23:09 +0000
ROA not before: Sat 18 Oct 2025 03:23:09 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.205.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Validity
Not Before: Oct 18 03:23:09 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=68f3081c-93ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:2b:2f:34:56:09:6d:3a:df:c1:bb:18:72:
3f:7d:cb:1d:62:e4:f4:c9:df:4a:77:77:3a:4e:50:
c9:a4:39:62:eb:4c:b6:68:8a:44:36:11:3a:4d:78:
7b:94:74:f8:cf:bf:81:a9:39:b6:08:16:8f:fc:48:
4d:93:bc:4a:9f:65:c5:d6:ad:8e:96:a2:1a:2e:e2:
e1:3e:8a:29:b1:0c:f1:96:c8:02:87:bb:73:f9:4a:
5a:98:d3:70:4b:7a:89:c3:fc:cd:5a:4a:70:f4:f2:
d5:60:dd:6b:0d:b2:22:3c:97:aa:dd:29:25:67:49:
cf:b2:df:a1:5b:63:14:79:41:fd:61:76:bf:06:45:
0a:27:fc:28:43:17:c7:c0:96:c7:0c:30:40:15:6e:
e2:37:93:88:35:e6:79:f1:c4:4a:cd:a3:54:04:02:
fa:58:fb:83:1a:83:fe:26:6c:9f:2b:66:88:69:e5:
bc:e6:d4:76:f1:84:fd:9a:a3:1b:63:9e:59:8c:23:
9b:3e:d7:22:50:3e:8f:bf:21:24:a0:71:16:63:25:
2f:d5:03:5a:b9:85:23:c2:50:7c:a2:48:5a:00:02:
9e:1e:67:1a:4d:1a:66:98:4d:65:21:1f:f3:75:f2:
87:08:40:5d:aa:8a:6a:03:95:a0:cf:30:f1:ff:3c:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:05:D1:E3:4F:D3:6F:BB:E4:C2:72:50:A0:03:08:44:7C:E8:0C:06
X509v3 Authority Key Identifier:
keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.164.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:7d:94:b8:8f:54:1a:8d:8f:f3:c3:42:ff:c5:33:4a:51:c1:
8d:c0:45:87:ec:bf:d4:05:74:5b:49:dd:f1:7d:ec:ef:8a:16:
b3:89:c8:c2:16:57:dd:4c:c4:ef:ee:f3:ed:26:c4:b2:0f:54:
e0:7e:d8:76:82:eb:86:28:f8:57:b1:4c:a8:be:ac:50:a4:a1:
fe:8b:d4:44:b4:be:a1:aa:86:db:40:8d:d8:8d:e2:83:0b:e0:
cc:5a:b2:3e:0e:94:8e:e2:be:9a:1f:7d:b5:fd:87:12:1b:8f:
6b:52:85:3a:dc:3f:d5:7a:ff:b0:69:f3:c8:60:e0:06:62:e5:
fe:b2:a5:48:d2:da:57:12:ce:ea:3a:54:e0:22:1e:21:e9:aa:
c5:95:d2:06:d4:40:a7:a6:37:d1:af:75:d0:93:67:8c:bd:4e:
02:eb:60:bc:fc:f1:31:52:fe:ee:94:15:19:12:f7:b2:cd:0f:
fc:30:d5:56:8c:b3:96:1c:08:f3:84:68:01:33:12:ae:66:05:
3e:7d:4b:d1:a2:f1:49:63:b7:7d:95:13:b2:f6:fd:ac:3f:26:
57:2f:dd:4c:8f:83:da:aa:60:4d:8b:0e:b0:a1:33:c1:46:41:
8e:51:82:9b:09:ab:cf:8d:3e:ac:25:32:f3:28:74:f7:19:fd:
94:5b:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:24:51 2025 by rpki-client