
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
File: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (raw, json)
Hash identifier: 5zlqj6GK47olsPE9aBVBN8+5zKhiZg/+BGK9Rsv0oWs=
Subject key identifier: F3:6E:35:CC:73:19:76:A1:60:43:4A:E8:60:60:3B:AB:53:35:CD:D6
Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial: 12E4
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
Signing time: Fri 31 Oct 2025 17:35:16 +0000
ROA not before: Fri 31 Oct 2025 17:35:16 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 7615
IP address blocks: 103.129.63.0/24 maxlen: 24
2001:dea:4001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4836 (0x12e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Validity
Not Before: Oct 31 17:35:16 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=6904f354-f41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:8a:2f:15:a0:af:8a:45:19:14:c8:f4:80:
7e:6d:55:ee:cb:9f:85:06:45:b3:11:a1:2e:9e:8b:
3a:c8:73:b4:38:4d:52:aa:17:2a:4b:d5:9e:04:03:
8d:1f:73:3d:cc:ea:d8:84:66:79:36:f9:3f:4b:81:
bd:e5:4e:4f:77:f5:1e:28:87:8f:4f:28:12:9d:88:
f2:8c:f4:17:a2:fe:8a:58:0f:aa:c2:31:29:33:83:
6b:bd:11:cf:fa:12:e1:36:14:a9:af:0d:a7:b7:9b:
6e:f9:d9:09:f1:88:9f:b2:ae:9f:18:87:62:dd:0e:
3e:01:6e:e6:8e:01:83:1e:77:82:9c:1c:51:f7:7d:
56:2b:64:3b:7e:7c:ee:68:76:19:ec:67:3e:84:89:
6a:48:b7:44:5a:1d:0f:df:b5:69:8a:2b:b0:23:0c:
ee:77:61:18:46:38:7e:42:20:23:5a:f4:7b:17:3f:
00:42:49:c1:23:9a:b3:10:23:2d:85:d0:f6:4f:74:
c7:e6:6a:81:c1:99:d1:c5:51:f5:74:ea:49:14:c8:
23:bc:ea:1b:c4:31:9d:7f:5f:6a:9b:6f:30:5a:7f:
2d:94:6c:9c:08:8a:95:29:09:49:22:db:8d:3c:db:
44:6e:b7:8c:50:fc:cd:6b:7a:4a:07:3f:cb:d9:4d:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6E:35:CC:73:19:76:A1:60:43:4A:E8:60:60:3B:AB:53:35:CD:D6
X509v3 Authority Key Identifier:
keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/C3CD4B12C85411E8A5D4274BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.63.0/24
IPv6:
2001:dea:4001::/48
Signature Algorithm: sha256WithRSAEncryption
22:96:9f:8d:76:26:29:db:c1:84:c8:64:81:89:46:91:93:29:
81:14:58:1b:99:a4:7e:b4:26:c2:78:91:19:44:a5:d1:09:9a:
b5:9c:c5:3a:df:97:48:52:e6:4c:81:a6:e5:00:03:d8:f7:ed:
8b:2e:a4:47:94:96:54:61:90:c4:0d:84:54:03:65:1c:f3:83:
fd:04:26:fa:fa:23:21:a1:35:1b:46:25:d0:63:69:9e:32:77:
e7:35:16:d5:9f:bb:51:e5:0b:f4:b7:f9:c1:9e:b6:c7:ce:4c:
59:b2:f4:c1:39:af:d8:c1:db:72:ad:21:0b:d7:bf:0a:7c:5b:
0a:f0:4b:df:2d:7b:c6:77:3d:15:da:f1:38:8c:b1:4d:90:9e:
f4:c2:ff:a6:96:e8:78:7c:91:bf:76:26:13:5c:b1:f7:49:fa:
a2:a3:e4:99:d9:bd:fb:ef:eb:dc:9e:b3:11:23:8a:e1:0b:08:
5f:c4:43:7a:33:42:1a:ce:e0:db:c1:1e:27:23:19:fa:f8:95:
75:ef:fb:24:b3:9d:a3:19:e6:e0:f6:1c:25:fd:13:83:5c:18:
8a:1c:0f:b4:7e:58:29:1b:b7:0e:75:b6:87:35:61:d0:81:75:
38:9e:9b:6f:73:ce:8a:53:97:66:6f:bd:99:1f:24:13:6e:81:
0a:4d:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:26:19 2025 by rpki-client