
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa
File: 1C2EA330925011EE9571EE40C4F9AE02.roa (raw, json)
Hash identifier: g1vuB/s+fKkz9lQDwgz7uwUHIIgwyYOpfROfbA+7Aro=
Subject key identifier: F4:54:08:EA:2A:79:85:90:76:3F:6D:3F:54:5B:1F:D5:47:3C:C5:21
Certificate issuer: /CN=A917AC33/serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Certificate serial: 010C
Authority key identifier: DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa
Signing time: Thu 01 May 2025 04:11:09 +0000
ROA not before: Thu 01 May 2025 04:11:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136478
IP address blocks: 103.184.253.0/24 maxlen: 24
2001:df0:94c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Nov 2025 23:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC33, serialNumber=DEAF1C8DE4FE3C51C69153FCAF9FE8C2AD6F8E26
Validity
Not Before: May 1 04:11:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6812f45d-120c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:6a:3e:db:96:c9:ac:be:f1:f5:d7:3c:8c:
77:4c:4e:62:a4:37:4e:2f:79:94:d3:49:59:16:23:
f7:a6:cb:26:c9:0b:4a:6f:d9:48:f0:df:66:9a:25:
93:47:1f:1d:05:46:81:85:9a:f8:fe:2c:e5:4c:d1:
85:c3:23:9e:2a:d1:63:da:2f:3a:ae:4a:5e:0a:57:
48:37:b2:b5:12:61:53:e8:a4:94:67:95:b9:aa:96:
cc:3d:ec:af:06:f8:19:a5:f7:07:ad:d1:be:46:bc:
49:1a:7c:b7:e1:3a:f8:2f:70:a2:c4:1e:03:34:73:
90:72:e9:8e:5f:30:6c:bf:39:44:ea:39:45:0f:b6:
b6:35:85:42:66:1f:33:0a:b7:e9:41:5c:78:f0:a4:
65:53:bd:40:7d:aa:3e:3b:68:fa:e3:8c:cd:43:f1:
b1:0c:b1:6d:07:34:36:8c:97:46:a6:b2:56:c2:e2:
fa:ce:bc:c5:23:bd:10:10:48:aa:b5:8a:49:d8:68:
85:57:b0:30:96:ef:89:7c:11:d6:e9:f2:42:4d:ef:
3e:95:c8:6d:45:72:2a:35:d3:43:df:bf:a5:71:90:
0d:aa:a5:54:63:a2:52:6a:2b:3d:f3:5f:55:d8:7c:
53:e2:19:55:31:23:01:9e:85:eb:33:da:f0:89:1c:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:54:08:EA:2A:79:85:90:76:3F:6D:3F:54:5B:1F:D5:47:3C:C5:21
X509v3 Authority Key Identifier:
keyid:DE:AF:1C:8D:E4:FE:3C:51:C6:91:53:FC:AF:9F:E8:C2:AD:6F:8E:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/3q8cjeT-PFHGkVP8r5_owq1vjiY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3q8cjeT-PFHGkVP8r5_owq1vjiY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC33/B0BFAC34924F11EEA8C22440C4F9AE02/1C2EA330925011EE9571EE40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.184.253.0/24
IPv6:
2001:df0:94c0::/48
Signature Algorithm: sha256WithRSAEncryption
63:94:c5:c6:42:d6:01:ab:d2:aa:23:57:cf:b3:13:c0:9e:8e:
f2:fa:bc:52:14:af:16:c1:9b:15:02:44:c4:a6:ae:20:04:c4:
3c:2a:57:fc:93:64:fa:6b:7f:43:8a:cb:d5:be:7a:4a:f0:3c:
fb:9d:3a:81:bf:b3:47:f8:ae:4f:c3:5b:b9:13:a1:10:a7:79:
48:74:1c:0a:7b:11:06:fc:d6:b8:05:e1:65:e0:42:3e:d3:44:
ea:4b:c7:86:43:74:50:99:90:4b:0d:29:7b:d7:07:15:03:05:
5e:ac:22:fe:be:6d:3b:75:9d:a4:80:1d:48:44:16:b9:4f:ca:
c9:db:d6:46:0c:af:ad:9e:83:b5:e4:a8:64:d0:fc:7b:df:a0:
10:63:7c:4a:69:c8:07:d0:69:c6:e4:9e:54:76:a4:77:3d:78:
9d:03:98:11:47:7f:e0:38:9a:85:98:6c:96:b0:dd:78:55:2d:
cf:ad:52:6c:36:67:9f:ec:7b:31:0d:1f:06:0c:10:10:fb:09:
b7:33:cf:42:18:f1:0a:f1:73:75:4b:19:81:9b:eb:48:09:fd:
eb:e5:5f:d7:25:59:89:cf:0b:0a:68:30:89:f7:24:2e:c9:55:
f4:3d:7f:87:56:8e:81:24:79:2d:a3:f7:9a:e6:ad:ce:76:a0:
ac:6a:96:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 16:36:30 2025 by rpki-client