
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
File: 86B5983C582111EC8035E069C4F9AE02.roa (raw, json)
Hash identifier: WLb6sKT1RvHFd2+7J5uhH2a45QLoTLj3p8VO5Tkw9qE=
Subject key identifier: 25:32:67:51:B6:2A:FB:13:36:6B:1B:66:D0:BE:3E:34:3D:8C:6C:44
Certificate issuer: /CN=A9181437/serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Certificate serial: 04B0
Authority key identifier: AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
Signing time: Wed 03 Sep 2025 00:44:56 +0000
ROA not before: Wed 03 Sep 2025 00:44:56 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 142645
IP address blocks: 103.171.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Nov 2025 02:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181437, serialNumber=AF0BE0B24A119D3B3E93FD0CD3B3415A2C0D01B8
Validity
Not Before: Sep 3 00:44:56 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68b78f88-c051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:09:d0:ed:2f:6a:0d:13:2f:39:d3:37:65:
cb:1d:36:a8:84:5b:33:84:34:c5:ca:8e:12:5a:3e:
18:e7:37:c9:bf:0b:70:58:6b:3b:e4:60:e7:0b:3d:
6d:80:ae:b0:11:0a:c2:77:36:2d:16:6f:62:55:57:
26:cb:c7:53:19:d0:3a:5f:52:68:64:ba:a0:1a:0f:
97:19:ae:fd:a6:30:e0:7a:0b:86:24:13:5e:17:00:
f1:c8:0f:48:7e:4a:0b:52:8c:aa:81:8b:71:e6:bf:
f7:dd:ab:6f:d9:ab:3e:1a:c4:21:75:f8:e5:97:fb:
e6:14:a5:c0:c2:bc:69:5d:1d:dc:d3:b4:5e:78:8a:
db:87:b9:4d:12:ad:06:4f:20:9d:90:52:35:e8:0d:
f2:49:f6:f6:7a:9e:54:6b:34:d8:ff:63:c2:b9:20:
53:24:55:43:56:09:ea:4f:f1:62:f2:c0:d2:67:c6:
f5:b0:91:1d:80:31:b8:7a:65:1d:65:e6:50:21:d6:
21:51:c7:0b:d9:be:d7:4a:1d:39:63:70:31:de:75:
01:21:71:de:b5:32:45:f4:13:e2:e5:f7:1b:15:f1:
4a:67:38:aa:8a:47:84:97:8b:72:55:5f:f7:25:9e:
20:59:40:bc:3f:45:c9:b6:cd:c2:4d:8e:e3:b4:45:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:32:67:51:B6:2A:FB:13:36:6B:1B:66:D0:BE:3E:34:3D:8C:6C:44
X509v3 Authority Key Identifier:
keyid:AF:0B:E0:B2:4A:11:9D:3B:3E:93:FD:0C:D3:B3:41:5A:2C:0D:01:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/rwvgskoRnTs-k_0M07NBWiwNAbg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwvgskoRnTs-k_0M07NBWiwNAbg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181437/DEB0FBC6489A11EC81A2D514C4F9AE02/86B5983C582111EC8035E069C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.176.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:31:e9:98:b2:7e:9b:72:6b:6b:81:0d:aa:27:d1:5f:68:61:
44:b4:5f:d9:c7:a9:6b:d4:d9:4e:95:f1:89:13:bb:9e:35:a2:
3f:0b:98:99:7d:3c:6a:d4:47:7e:91:fd:13:5b:83:29:bd:c6:
f8:f2:90:5d:8d:72:bc:57:5e:52:8c:b0:2f:4f:6c:88:a6:8f:
fe:3f:88:7b:c8:d4:11:0f:7a:e4:48:6d:50:01:2d:f4:f9:37:
bb:81:d7:fa:e4:26:83:d0:38:27:ec:d5:76:dc:c0:8e:a2:98:
94:93:0c:a7:30:fd:fa:da:bf:82:96:18:34:30:4e:aa:da:01:
74:e9:0e:15:f6:f5:8d:1d:99:20:41:89:42:1b:b7:58:93:1f:
f2:1d:33:0a:29:4b:28:a1:b4:7e:fd:97:f3:18:2c:75:51:bc:
5f:a7:02:98:eb:b0:8c:25:cb:bb:ef:69:29:8d:5b:32:01:41:
64:99:b1:74:f5:c5:e3:74:50:9c:b9:ce:8d:64:fe:0b:36:ae:
4c:30:d6:8e:f3:b6:3d:ba:8b:1e:ae:a5:5c:66:9c:65:5a:aa:
98:55:72:1c:82:ec:8b:42:1f:e5:f0:f6:2b:08:27:de:cc:b5:
ec:c9:10:9b:f9:6e:fe:d1:04:26:5d:29:e3:9e:a7:a2:2a:53:
81:fd:8f:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0MzcxMTAvBgNVBAUTKEFGMEJFMEIyNEExMTlEM0IzRTkzRkQwQ0QzQjM0MTVB
MkMwRDAxQjgwHhcNMjUwOTAzMDA0NDU2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3OGY4OC1jMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzVQJ0O0vag0TLznTN2XLHTaohFszhDTFyo4SWj4Y5zfJvwtwWGs75GDnCz1t
gK6wEQrCdzYtFm9iVVcmy8dTGdA6X1JoZLqgGg+XGa79pjDgeguGJBNeFwDxyA9I
fkoLUoyqgYtx5r/33atv2as+GsQhdfjll/vmFKXAwrxpXR3c07ReeIrbh7lNEq0G
TyCdkFI16A3ySfb2ep5UazTY/2PCuSBTJFVDVgnqT/Fi8sDSZ8b1sJEdgDG4emUd
ZeZQIdYhUccL2b7XSh05Y3Ax3nUBIXHetTJF9BPi5fcbFfFKZziqikeEl4tyVV/3
JZ4gWUC8P0XJts3CTY7jtEVDawIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUyZ1G2
KvsTNmsbZtC+PjQ9jGxEMB8GA1UdIwQYMBaAFK8L4LJKEZ07PpP9DNOzQVosDQG4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTQzNy9ERUIwRkJDNjQ4
OUExMUVDODFBMkQ1MTRDNEY5QUUwMi9yd3Znc2tvUm5Ucy1rXzBNMDdOQldpd05B
YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3dmdza29SblRzLWtfME0wN05CV2l3TkFiZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODE0MzcvREVCMEZCQzY0ODlBMTFFQzgxQTJENTE0QzRGOUFFMDIvODZCNTk4M0M1
ODIxMTFFQzgwMzVFMDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnq7AwDQYJKoZIhvcNAQELBQADggEBAKMx6Ziyfptya2uB
Daon0V9oYUS0X9nHqWvU2U6V8YkTu541oj8LmJl9PGrUR36R/RNbgym9xvjykF2N
crxXXlKMsC9PbIimj/4/iHvI1BEPeuRIbVABLfT5N7uB1/rkJoPQOCfs1XbcwI6i
mJSTDKcw/frav4KWGDQwTqraAXTpDhX29Y0dmSBBiUIbt1iTH/IdMwopSyihtH79
l/MYLHVRvF+nApjrsIwly7vvaSmNWzIBQWSZsXT1xeN0UJy5zo1k/gs2rkww1o7z
tj26ix6upVxmnGVaqphVchyC7ItCH+Xw9isIJ97MtezJEJv5bv7RBCZdKeOep6Iq
U4H9j5U=
-----END CERTIFICATE-----
Generated at Sat Oct 25 23:42:49 2025 by rpki-client