
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa
File: ACDAB45E592011EF976B8A1BC4F9AE02.roa (raw, json)
Hash identifier: 7CSmGMxiJ/eyVM8Zl9g1/yXgrxIsImTrO2e6GsEs7/Y=
Subject key identifier: 48:E3:A5:0D:B9:F0:DF:33:81:7C:6C:48:D7:5E:85:82:01:67:DC:7D
Certificate issuer: /CN=A917A53A/serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
Certificate serial: B0
Authority key identifier: 59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa
Signing time: Wed 09 Jul 2025 07:13:26 +0000
ROA not before: Wed 09 Jul 2025 07:13:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133952
IP address blocks: 103.90.80.0/24 maxlen: 24
103.90.81.0/24 maxlen: 24
103.90.82.0/24 maxlen: 24
103.90.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl
rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 08 Nov 2025 05:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176 (0xb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A53A, serialNumber=594BD143BF72388DA2A5CB64BBC3910888F64DC5
Validity
Not Before: Jul 9 07:13:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=686e1696-ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:88:1c:f8:2a:32:9a:27:bb:c2:77:2b:c6:
74:ef:e6:67:f3:11:9f:91:d4:56:5c:85:fd:3d:24:
d7:a5:f1:35:8b:bd:df:7b:d6:d0:e1:67:52:f3:40:
ce:a2:ab:86:f9:6c:47:e6:e9:64:b2:be:3b:2b:f3:
27:71:b2:f4:49:21:52:84:c4:25:45:2a:60:6b:1d:
25:ec:31:ff:93:eb:a2:0e:47:7e:0f:d2:1e:d2:95:
71:9c:52:2c:d5:c3:2c:10:fc:b3:82:ed:9b:0f:24:
9c:07:c6:60:d5:4a:3b:37:5b:57:be:da:e9:74:59:
95:21:59:87:0e:4c:f0:b2:eb:84:84:75:f3:94:9d:
38:0d:ba:5a:9b:b3:db:26:66:51:d2:1b:d8:0f:a4:
91:b4:f3:e4:bf:b8:1a:39:cb:af:5f:92:90:34:74:
c1:4f:98:c8:6c:46:08:8a:f5:b4:0b:06:c7:67:a6:
ba:d2:3e:a0:ce:a7:5c:b3:f7:76:c1:a8:b1:6e:d5:
12:38:03:a1:ec:76:74:4f:27:74:47:d7:62:af:0c:
ef:f8:3b:56:97:58:25:a7:00:26:36:1b:35:8d:09:
33:37:e0:7c:f6:d1:70:c1:e1:b9:85:2a:15:6a:07:
ac:26:ab:ab:18:c1:02:63:56:ce:a5:ee:e1:86:e3:
2e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:A5:0D:B9:F0:DF:33:81:7C:6C:48:D7:5E:85:82:01:67:DC:7D
X509v3 Authority Key Identifier:
keyid:59:4B:D1:43:BF:72:38:8D:A2:A5:CB:64:BB:C3:91:08:88:F6:4D:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/WUvRQ79yOI2ipctku8ORCIj2TcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WUvRQ79yOI2ipctku8ORCIj2TcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A53A/4E6BC66A592011EFA560004EC4F9AE02/ACDAB45E592011EF976B8A1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.90.80.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:e0:4b:69:09:f7:b7:39:46:6f:97:cf:a3:8d:d4:b7:cb:c9:
58:74:b4:9d:19:d7:ec:5f:3e:6d:a4:51:0e:72:fd:a4:c9:19:
d1:9f:cc:65:a2:68:a7:e1:38:9a:b1:17:d6:40:df:3a:95:ef:
eb:76:cd:3f:8e:93:13:83:71:3e:86:59:8f:75:cb:0a:9a:2b:
6c:c7:5b:2a:1d:80:ea:a4:49:9e:1e:12:a2:6b:48:de:b0:45:
42:19:17:ee:8f:c6:7a:ab:ea:b6:17:f3:05:79:c0:b1:c8:1f:
66:f6:3e:d4:cb:20:87:08:17:cd:45:05:c4:62:a2:e4:c1:2d:
f1:d7:5b:7f:41:5e:42:94:20:7a:d1:bf:63:93:43:d7:a4:9b:
c1:ee:5b:e5:52:11:3d:24:ca:9c:5c:5b:2c:ed:3e:85:9b:1f:
60:83:b0:32:f2:4a:92:74:10:09:0a:dd:de:2d:1b:65:1e:cb:
da:8d:83:94:71:99:8a:b6:8b:18:b4:06:a0:48:b2:ab:8b:30:
8d:2a:f3:12:20:30:91:d4:91:60:89:d6:6e:08:20:85:27:b8:
0c:1a:b2:20:a4:03:00:1a:16:2d:ab:0b:b3:09:15:fc:b8:ff:
ff:f4:5a:26:8c:73:d2:e5:e3:64:1d:56:fa:fa:5a:e0:f1:cf:
a5:c8:21:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 23:39:36 2025 by rpki-client