
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3B19468F14B11EC8B517410C4F9AE02.roa
File: F3B19468F14B11EC8B517410C4F9AE02.roa (raw, json)
Hash identifier: bRXYJLx9uga33c+F8ncD5QoINeS19K7kgPVBikB7CCw=
Subject key identifier: FF:01:26:5E:A3:2A:27:C5:8E:E9:5A:19:C5:CB:A8:75:AF:18:7B:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B6B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3B19468F14B11EC8B517410C4F9AE02.roa
Signing time: Thu 08 May 2025 16:17:58 +0000
ROA not before: Thu 08 May 2025 16:17:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141844
IP address blocks: 103.167.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 15:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46776 (0xb6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:17:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cd935-bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8d:eb:be:0a:0d:dc:34:40:a1:c5:d5:73:ab:
f9:c7:90:2e:40:e1:3e:a9:31:c6:19:f2:46:a4:9c:
b3:77:52:24:76:99:57:22:09:e9:84:ef:7a:8b:73:
67:e6:ae:a0:91:fd:f6:5d:9d:46:e0:4b:d2:8b:10:
f4:04:43:bf:c5:9a:c8:08:14:9e:65:d9:0e:c4:91:
f2:26:67:94:a5:e2:a1:82:f6:8e:75:0c:46:6d:35:
a0:4c:61:32:1a:80:7c:c2:6d:e8:67:88:31:97:55:
c4:0c:25:af:ac:15:8b:54:01:70:37:ef:e1:cf:90:
67:37:8b:25:f2:3f:eb:0d:dd:00:80:36:95:19:58:
a2:00:b6:ec:9e:a9:10:d5:2e:ac:57:cb:8e:d2:05:
1d:14:87:a9:22:a1:56:c0:12:5f:50:13:17:a9:75:
e3:29:0c:48:94:d8:27:d8:e4:50:96:65:2a:27:83:
63:1a:12:86:c8:5c:06:7a:b2:cf:54:a3:8d:c6:40:
79:b0:9f:12:f2:8e:7d:4b:72:15:b6:90:e9:dd:c5:
7e:34:c5:7d:34:ad:bc:0a:74:9f:23:28:86:cf:94:
13:cd:99:39:fe:ee:9d:77:d8:c7:2d:1e:60:70:31:
ff:5a:d5:a9:71:6e:ec:4b:4e:5f:f7:b7:92:8c:c1:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:26:5E:A3:2A:27:C5:8E:E9:5A:19:C5:CB:A8:75:AF:18:7B:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3B19468F14B11EC8B517410C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.242.0/23
Signature Algorithm: sha256WithRSAEncryption
67:1a:00:14:2f:3a:a0:a6:76:51:c8:62:65:0f:35:cf:d5:3e:
3d:04:f7:75:20:a5:07:7b:97:37:1e:58:99:d7:ab:82:68:59:
c0:06:b4:0e:56:b0:71:36:91:9e:42:7b:af:ec:28:aa:10:3d:
67:71:61:0b:16:29:93:0a:a7:48:c1:57:13:84:82:e9:ec:6d:
66:06:ee:a5:d7:e6:f8:fd:3d:78:ef:f2:e7:e3:cb:8f:43:4a:
b2:f9:bd:17:ae:50:7c:ad:6c:49:9b:d3:e1:de:4d:4c:47:4c:
40:13:4e:b1:cb:bf:8b:fb:ae:7d:80:99:36:5e:d2:ea:b1:db:
61:f9:98:f5:53:fe:37:9e:df:d2:3a:28:15:24:b1:1b:bc:21:
3e:29:05:2e:dd:f4:8a:59:d7:7f:4c:51:b5:9e:bf:f0:2c:79:
1c:54:99:e4:2f:76:f0:7b:86:5a:b7:5e:b6:89:81:a1:70:ae:
ab:57:18:45:f6:65:de:bd:03:15:74:6a:f9:d7:f1:8a:72:10:
f3:61:b8:fa:96:d7:57:ad:31:8a:ee:04:4f:2b:60:3d:14:24:
8a:5d:a5:af:22:61:e3:52:a0:1c:39:a4:81:f7:8f:c0:0b:91:
31:15:c2:83:43:6d:ed:67:3e:c3:d5:8b:63:10:ab:43:1f:31:
e0:2d:77:2a
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDALa4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MTc1OFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgxY2Q5MzUtYmZmZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANSN674KDdw0QKHF1XOr+ceQLkDhPqkxxhnyRqScs3dSJHaZVyIJ6YTveotz
Z+auoJH99l2dRuBL0osQ9ARDv8WayAgUnmXZDsSR8iZnlKXioYL2jnUMRm01oExh
MhqAfMJt6GeIMZdVxAwlr6wVi1QBcDfv4c+QZzeLJfI/6w3dAIA2lRlYogC27J6p
ENUurFfLjtIFHRSHqSKhVsASX1ATF6l14ykMSJTYJ9jkUJZlKieDYxoShshcBnqy
z1SjjcZAebCfEvKOfUtyFbaQ6d3FfjTFfTStvAp0nyMohs+UE82ZOf7unXfYxy0e
YHAx/1rVqXFu7EtOX/e3kozBobMCAwEAAaOCApUwggKRMB0GA1UdDgQWBBT/ASZe
oyonxY7pWhnFy6h1rxh77DAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YzQjE5NDY4
RjE0QjExRUM4QjUxNzQxMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ6fyMA0GCSqGSIb3DQEBCwUAA4IBAQBnGgAULzqgpnZR
yGJlDzXP1T49BPd1IKUHe5c3HliZ16uCaFnABrQOVrBxNpGeQnuv7CiqED1ncWEL
FimTCqdIwVcThILp7G1mBu6l1+b4/T147/Ln48uPQ0qy+b0XrlB8rWxJm9Ph3k1M
R0xAE06xy7+L+659gJk2XtLqsdth+Zj1U/43nt/SOigVJLEbvCE+KQUu3fSKWdd/
TFG1nr/wLHkcVJnkL3bwe4Zat162iYGhcK6rVxhF9mXevQMVdGr51/GKchDzYbj6
ltdXrTGK7gRPK2A9FCSKXaWvImHjUqAcOaSB94/AC5ExFcKDQ23tZz7D1YtjEKtD
HzHgLXcq
-----END CERTIFICATE-----
Generated at Tue Oct 28 20:33:08 2025 by rpki-client