
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa
File: A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa (raw, json)
Hash identifier: FHyNixxbqeOTH/ABuTSjy9voXrVO6M51CKZjHghUlc4=
Subject key identifier: E8:94:30:D2:40:86:A3:F4:F0:80:FB:32:AB:39:E9:2F:3F:02:4D:92
Certificate issuer: /CN=A9192B84/serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Certificate serial: E4
Authority key identifier: F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa
Signing time: Sat 18 Oct 2025 07:11:14 +0000
ROA not before: Sat 18 Oct 2025 07:11:14 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 26658
IP address blocks: 45.126.76.0/22 maxlen: 24
103.236.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Nov 2025 07:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B84, serialNumber=F85AFD6E745B0A347CA696EE8EBC167D08A44F56
Validity
Not Before: Oct 18 07:11:14 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68f33d92-7c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:cd:81:09:bf:c8:57:f4:99:f0:bc:14:b4:
76:40:ff:a8:12:ad:0e:ed:cb:ec:76:00:1b:80:86:
00:b7:54:8f:fe:49:cc:72:43:40:70:36:06:f2:82:
ed:69:65:ad:cb:05:e2:7a:7f:53:90:89:ab:9c:90:
fc:67:35:95:ee:53:e9:00:f8:0e:60:1f:e4:df:04:
9b:92:af:50:18:d9:68:86:a9:a4:93:34:4b:47:24:
eb:5d:0d:e6:60:f1:2d:83:5e:0b:cc:0f:ae:77:23:
c8:da:66:70:53:06:ff:77:83:09:c1:54:4e:1d:f5:
c8:f1:a4:d7:e8:af:1c:cf:fd:2b:06:9c:7a:30:fc:
8d:cd:d2:ec:03:68:11:84:0a:31:d8:9d:fa:1e:18:
08:6a:95:59:ba:82:46:d1:e3:40:17:1f:b0:45:1d:
d1:0a:a1:bd:e8:8c:b4:26:cb:b2:2d:1a:ef:53:75:
e7:9c:ae:90:50:3c:40:49:61:d2:bc:0b:e5:79:7f:
56:1c:86:99:80:d3:17:d4:de:11:de:64:1a:80:e7:
50:d3:40:77:18:52:cf:33:85:e3:35:d6:04:60:46:
3c:04:60:92:aa:f2:ce:6f:f8:1f:ee:12:39:10:1b:
c9:d1:c8:91:68:a6:b6:1b:3c:35:7f:40:98:11:a8:
c5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:94:30:D2:40:86:A3:F4:F0:80:FB:32:AB:39:E9:2F:3F:02:4D:92
X509v3 Authority Key Identifier:
keyid:F8:5A:FD:6E:74:5B:0A:34:7C:A6:96:EE:8E:BC:16:7D:08:A4:4F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/-Fr9bnRbCjR8ppbujrwWfQikT1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Fr9bnRbCjR8ppbujrwWfQikT1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B84/0FB4DF9C5BA011EF91D30E5EC4F9AE02/A1F4D8F6ABF111F0AC423B0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.76.0/22
103.236.216.0/22
Signature Algorithm: sha256WithRSAEncryption
03:c2:12:bd:2a:0b:f3:ac:fb:26:81:28:f9:83:bf:3d:90:c7:
d4:82:04:2a:91:08:06:69:46:a0:33:fe:21:ec:30:5c:f6:9f:
ec:38:8a:bf:5d:ce:92:de:ae:39:82:e6:94:87:d6:f1:66:8a:
b2:36:30:7d:f9:07:7f:bf:45:e6:8c:9c:64:de:f3:a2:78:bb:
15:bd:b5:d4:af:b0:b1:0e:35:6a:91:43:5c:09:9c:9d:4c:74:
e3:61:d1:b0:67:7e:ec:8b:83:7f:1f:3e:fa:04:a9:f7:c8:68:
55:88:fc:6f:a0:64:87:04:74:1c:db:0b:48:94:ac:4e:ae:c3:
fa:8e:70:e2:db:c1:4b:1f:ec:4f:30:e5:a9:e6:cb:0f:4c:6b:
d2:65:da:77:7d:39:c0:de:ea:39:f5:2f:e0:63:ff:a5:9a:cc:
3c:48:aa:2d:6b:6b:06:08:20:3c:ff:a8:75:e1:89:fd:19:67:
f8:2f:83:1e:f4:12:43:d8:6c:65:dc:62:65:91:d9:8e:3d:bd:
9a:cd:95:26:1e:43:92:37:26:a8:f0:e4:de:8e:d1:5b:68:e7:
c6:1c:57:54:99:be:c5:b8:ca:64:dd:ca:99:23:ed:2a:76:2f:
34:82:52:b0:c4:19:7a:c2:b1:75:2a:16:40:97:bf:f5:03:e5:
85:21:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:43:38 2025 by rpki-client