
$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
File: 012EAE068C1411EDA66E4F28C4F9AE02.roa (raw, json)
Hash identifier: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=
Subject key identifier: FD:DE:60:DF:A6:F7:F3:96:CF:3F:E3:8D:86:C7:E9:6A:02:83:F3:99
Certificate issuer: /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial: 0539
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
Signing time: Sun 04 May 2025 23:34:38 +0000
ROA not before: Sun 04 May 2025 23:34:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140499
IP address blocks: 103.149.240.0/24 maxlen: 24
103.149.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 00:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1337 (0x539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Validity
Not Before: May 4 23:34:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6817f98e-3dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:74:51:a5:55:38:3b:66:4b:ce:66:77:ac:
ba:f2:00:ac:81:c7:f4:ad:8f:ba:f0:70:30:12:d4:
02:97:53:13:67:c2:41:1c:f6:34:58:be:f2:81:85:
df:36:4b:f2:13:43:3f:1b:33:45:2a:3a:e3:02:87:
6b:95:17:0b:21:9b:72:aa:74:63:c3:b7:ad:9e:39:
ee:23:79:58:8d:77:fa:f0:c3:5a:fb:92:1c:36:a8:
d0:c9:43:19:5b:c8:11:e0:80:5a:a5:c8:e2:cc:77:
f0:36:21:a2:20:93:91:cd:08:3e:7a:e6:a6:45:f3:
ac:9a:ba:67:71:a2:ec:ea:2a:9b:1f:62:da:56:7e:
eb:37:c3:c5:2e:f1:48:3c:25:9f:3c:7e:65:be:40:
9c:25:7b:8a:22:1f:0a:b4:7c:5c:c1:87:f2:6d:2c:
b3:38:e0:17:3c:9b:ea:44:a5:90:55:44:ae:b0:69:
5e:5e:2d:99:a3:40:9f:eb:94:69:47:30:79:9c:76:
66:d4:94:93:14:3c:bc:f4:91:7d:f4:55:44:8f:6e:
c9:8a:5f:0b:90:c4:c4:0d:b8:e5:d5:43:df:e6:5b:
16:39:e8:b5:1d:c3:1d:6a:4e:ce:70:7d:66:25:f8:
5e:f4:e2:0b:e7:e3:bf:70:6e:96:50:64:c2:d1:98:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:60:DF:A6:F7:F3:96:CF:3F:E3:8D:86:C7:E9:6A:02:83:F3:99
X509v3 Authority Key Identifier:
keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/012EAE068C1411EDA66E4F28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.240.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:2c:e4:2d:ab:3b:fa:28:9e:fd:0e:70:1a:8d:dd:a9:b7:be:
46:88:ff:c7:f7:d8:cc:8e:cc:97:ac:d1:03:92:e1:97:33:6e:
f5:67:9a:c4:9e:8f:5f:a5:9c:8d:c7:8d:a9:ec:30:9a:44:61:
b0:5c:67:86:40:12:d4:62:83:70:f8:90:f9:4b:0f:bf:bc:b1:
b9:bc:43:cb:c3:9d:33:a5:20:95:9f:c2:a2:1b:4f:fd:f7:66:
93:d9:66:df:f1:47:49:90:bb:4f:83:2c:c3:b3:72:5f:6e:36:
4d:74:82:b8:02:9c:68:59:05:08:d0:b1:d9:b7:3c:b0:98:cc:
da:45:4f:38:9f:bd:6c:0c:95:a6:66:33:e2:3d:14:43:e3:32:
a1:b5:27:93:cc:c9:98:c6:f0:86:9d:80:35:87:6a:6c:a6:f2:
d5:d0:bb:1f:f9:31:23:37:7f:1d:10:1d:52:dd:f0:44:02:fb:
05:5c:c2:76:48:3d:b2:4d:7b:06:a8:2d:cc:1d:e4:77:bc:af:
ec:77:b4:f5:a6:8b:93:5b:53:a3:79:23:47:83:dd:81:3d:32:
cc:04:55:57:09:a6:f3:c8:a5:7c:7b:a3:45:5e:2b:bb:22:26:
f3:2b:99:6f:f3:7f:f2:7f:24:8a:0d:16:12:5b:12:10:54:5a:
d8:6e:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:45:02 2025 by rpki-client