
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
File: F6750B60168D11EC89C9CB5DC4F9AE02.roa (raw, json)
Hash identifier: L229HAjJw9So9Rlreie2EkxQHxnxmVW3pDOMuafdlQ8=
Subject key identifier: D3:7E:74:C7:B8:89:13:99:3B:BF:88:FD:23:57:76:11:EB:B3:4A:13
Certificate issuer: /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial: 0548
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
Signing time: Tue 04 Nov 2025 23:44:11 +0000
ROA not before: Tue 04 Nov 2025 23:44:11 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133434
IP address blocks: 103.172.108.0/24 maxlen: 24
103.198.106.0/24 maxlen: 24
2407:d0c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1352 (0x548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180174, serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Validity
Not Before: Nov 4 23:44:11 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a8fcb-9b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5e:3c:51:81:99:56:60:88:d7:90:d9:96:77:
92:9c:b5:0d:80:bb:50:72:de:12:0c:a2:d6:24:36:
43:23:b1:ca:88:98:dc:0b:90:21:d4:3e:31:2f:49:
3f:f5:6a:fb:c9:2b:26:20:1b:d0:79:e3:45:a3:55:
bc:ab:6f:af:9e:b4:8e:96:cc:ea:68:57:bb:67:53:
0d:66:43:00:66:75:a3:50:6b:ae:e2:74:dd:36:d0:
e5:85:1f:19:34:e8:1d:df:45:4a:21:7f:75:0d:3a:
1d:77:51:4b:98:d4:f0:99:a1:cd:c2:0b:7f:71:93:
55:87:06:38:ac:0f:fb:fd:50:68:d2:a6:da:5e:f0:
90:90:ad:f7:13:ca:d0:26:87:7b:31:69:01:be:29:
ba:5d:6c:f3:6a:40:be:da:d1:2c:39:be:17:b6:7f:
1f:df:08:78:4a:8e:d7:f2:86:78:29:87:a5:c7:54:
3e:68:29:bd:2e:61:fb:8a:ce:77:ac:f6:44:bf:c6:
c6:7e:72:46:e6:67:d7:ae:c1:b4:25:59:63:e6:fb:
a9:19:b3:75:e0:c9:64:fa:b6:b8:44:71:ce:da:9a:
09:d1:1d:2f:9d:06:d7:52:f5:01:24:f4:04:51:7f:
95:7f:0c:77:55:d4:c9:9a:f6:1c:e4:ff:94:d6:33:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:74:C7:B8:89:13:99:3B:BF:88:FD:23:57:76:11:EB:B3:4A:13
X509v3 Authority Key Identifier:
keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.108.0/24
103.198.106.0/24
IPv6:
2407:d0c0::/32
Signature Algorithm: sha256WithRSAEncryption
89:07:a2:f7:6e:ae:c4:3b:8f:52:3f:29:28:71:d5:47:86:12:
c5:4d:04:14:8b:a2:68:cf:d2:70:a8:de:f4:e5:7b:68:d8:06:
a5:e7:19:b2:a4:d7:50:fa:d8:97:b8:e1:51:c5:37:2a:a1:13:
20:03:9a:a2:af:2d:a7:d1:78:d1:58:70:6c:d9:07:37:c2:9c:
b3:04:46:b4:b7:bf:5a:2d:7b:70:32:4d:84:41:60:b6:18:33:
28:94:b4:aa:6b:5f:8c:33:88:b9:c1:84:2a:d8:e1:18:2c:a4:
88:cc:a0:8d:68:bc:e5:71:6c:af:be:89:83:c3:15:c1:ba:09:
a5:bd:43:f4:90:ab:9e:89:3c:64:c9:a9:48:7a:a6:64:45:12:
1a:b0:dd:80:de:39:57:d3:46:5b:7a:69:a6:37:14:0d:51:9a:
05:c7:2f:12:82:03:bc:ea:09:61:ee:f9:50:90:70:59:47:36:
46:7b:fa:63:60:b4:82:9b:a0:53:4e:6a:42:f0:de:58:0c:e6:
a9:9a:96:43:33:38:a5:6f:21:f6:d7:15:40:a6:50:b1:fb:0f:
94:af:43:47:f4:a5:3b:33:f8:0c:10:ba:a8:fb:ac:2e:ae:f9:
0c:be:e6:17:1f:20:bc:4c:bf:61:d6:0d:40:7d:8f:06:6f:16:
b5:48:cc:d3
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICBUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAxNzQxMTAvBgNVBAUTKDI4REQ3MjU3M0M1QkFEQTI4OEI4MzJCMzk4MUZGNEM5
OEIyRjhDNTEwHhcNMjUxMTA0MjM0NDExWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhOGZjYi05YjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtl48UYGZVmCI15DZlneSnLUNgLtQct4SDKLWJDZDI7HKiJjcC5Ah1D4xL0k/
9Wr7ySsmIBvQeeNFo1W8q2+vnrSOlszqaFe7Z1MNZkMAZnWjUGuu4nTdNtDlhR8Z
NOgd30VKIX91DTodd1FLmNTwmaHNwgt/cZNVhwY4rA/7/VBo0qbaXvCQkK33E8rQ
Jod7MWkBvim6XWzzakC+2tEsOb4Xtn8f3wh4So7X8oZ4KYelx1Q+aCm9LmH7is53
rPZEv8bGfnJG5mfXrsG0JVlj5vupGbN14Mlk+ra4RHHO2poJ0R0vnQbXUvUBJPQE
UX+Vfwx3VdTJmvYc5P+U1jNX8QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNN+dMe4
iROZO7+I/SNXdhHrs0oTMB8GA1UdIwQYMBaAFCjdclc8W62iiLgys5gf9MmLL4xR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE3NC83OUQ2NjYyQTE2
ODkxMUVDODE2MjU4MENDNEY5QUUwMi9LTjF5Vnp4YnJhS0l1REt6bUJfMHlZc3Zq
RkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tOMXlWenhicmFLSXVES3ptQl8weVlzdmpGRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAxNzQvNzlENjY2MkExNjg5MTFFQzgxNjI1ODBDQzRGOUFFMDIvRjY3NTBCNjAx
NjhEMTFFQzg5QzlDQjVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBABnrGwDBABnxmowDQQCAAIwBwMFACQH0MAwDQYJKoZIhvcN
AQELBQADggEBAIkHovdursQ7j1I/KShx1UeGEsVNBBSLomjP0nCo3vTle2jYBqXn
GbKk11D62Je44VHFNyqhEyADmqKvLafReNFYcGzZBzfCnLMERrS3v1ote3AyTYRB
YLYYMyiUtKprX4wziLnBhCrY4RgspIjMoI1ovOVxbK++iYPDFcG6CaW9Q/SQq56J
PGTJqUh6pmRFEhqw3YDeOVfTRlt6aaY3FA1RmgXHLxKCA7zqCWHu+VCQcFlHNkZ7
+mNgtIKboFNOakLw3lgM5qmalkMzOKVvIfbXFUCmULH7D5SvQ0f0pTsz+AwQuqj7
rC6u+Qy+5hcfILxMv2HWDUB9jwZvFrVIzNM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:48:46 2025 by rpki-client