
$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
File: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (raw, json)
Hash identifier: IHi+IFG70AY+pGCPcqa0F+qxqcr2LZY1LLXZfYW/jkU=
Subject key identifier: D9:C7:3E:B9:FE:72:37:48:43:FB:B2:51:9E:1E:AE:AC:3F:80:BB:C2
Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial: 10AC
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
Signing time: Thu 10 Apr 2025 17:26:13 +0000
ROA not before: Thu 10 Apr 2025 17:26:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137491
IP address blocks: 103.134.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4268 (0x10ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Validity
Not Before: Apr 10 17:26:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67f7ff34-6592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6c:29:e4:77:15:ea:e9:4d:d1:1f:fe:11:3a:
06:89:64:bc:42:03:60:22:02:18:b6:6c:aa:7c:1a:
55:50:a4:6e:55:7e:ee:cb:cb:9d:7d:39:6e:51:03:
67:20:80:34:7b:12:39:12:9e:3c:f4:ad:07:24:6e:
b7:5f:0a:2f:43:b9:30:47:72:b5:a4:0b:0b:eb:d6:
6c:48:c4:c6:a5:89:b5:63:c3:77:ff:78:a0:d5:88:
bb:72:0b:49:4e:2c:88:c1:f0:52:ba:c8:be:2e:a0:
78:b6:f2:86:0e:bc:0a:45:48:89:38:56:6f:fd:9c:
61:42:2f:e3:b0:21:d5:7c:6c:7e:81:0d:14:41:b9:
df:c6:84:56:2e:c7:e2:ab:fa:e6:a9:e2:a7:15:57:
9b:17:46:59:06:16:3f:4a:c4:42:10:ef:ba:37:58:
7e:c0:0b:9c:ef:7d:6c:91:e7:b5:bd:ca:33:3e:a2:
8f:6f:28:e5:81:c7:94:93:35:d1:29:43:d5:88:91:
76:a8:2f:84:f5:7a:bc:ae:ea:df:78:14:a5:e2:61:
ec:10:6f:2c:4a:2c:91:88:17:d1:8a:9f:7a:01:22:
74:72:7a:ba:15:54:8a:50:92:54:a3:f2:a2:8a:76:
92:a4:0c:ac:8f:02:2c:34:70:bc:a0:a9:c5:0d:2e:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C7:3E:B9:FE:72:37:48:43:FB:B2:51:9E:1E:AE:AC:3F:80:BB:C2
X509v3 Authority Key Identifier:
keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.38.0/23
Signature Algorithm: sha256WithRSAEncryption
20:02:02:d8:5f:3e:10:1d:c0:47:7f:1a:57:e0:47:1f:9f:e6:
6a:af:9d:89:82:b6:aa:1c:00:43:8e:79:0d:1e:86:59:67:f2:
10:c2:21:2a:22:16:01:54:f5:17:c5:3c:e4:92:be:66:6d:95:
8d:58:df:60:f8:ec:b3:87:d9:08:d1:15:37:1e:9d:09:16:ce:
27:0c:ab:a8:f4:f8:71:20:16:10:41:03:fd:8f:5f:d9:35:37:
da:92:aa:dc:1e:4f:f2:99:c9:0d:6d:da:22:f4:0e:1c:a2:75:
55:36:a7:39:20:41:96:4f:3a:b6:ea:3d:60:14:63:9d:d8:a8:
90:f8:7e:26:d1:18:5a:be:da:1c:76:96:78:a9:55:14:bb:8e:
18:3f:79:0d:a4:4c:44:8b:14:c0:d3:41:d1:4a:74:71:ff:4a:
f6:95:72:4a:50:fb:5b:3d:b9:b8:85:34:dc:bd:71:94:18:93:
93:84:4d:08:d0:2d:dc:ad:87:da:91:d5:2b:5b:f1:c7:51:95:
bb:90:0e:e2:d6:0b:df:d8:01:0b:3b:40:1e:ef:8a:fd:7b:1c:
3e:3f:14:c4:cc:ec:60:07:00:ea:fa:c4:a1:4a:9a:52:c5:1e:
f9:41:cb:76:c7:30:41:d5:6e:d7:93:6a:02:15:a1:4f:b6:17:
c6:4e:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:09:57 2025 by rpki-client