
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/12C3076850E111F09D297C74C4F9AE02.roa
File:                     12C3076850E111F09D297C74C4F9AE02.roa (raw, json)
Hash identifier:          VPPWSocLnuSKtcVnd5S6tAbC+12jEdjVyuRLBXg6FF0=
Subject key identifier:   0C:FA:8E:5B:0C:09:21:0C:F9:6F:4D:08:84:19:FF:E4:33:39:32:E1
Certificate issuer:       /CN=A91A19C8/serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
Certificate serial:       0815
Authority key identifier: FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/12C3076850E111F09D297C74C4F9AE02.roa
Signing time:             Wed 22 Oct 2025 22:10:20 +0000
ROA not before:           Wed 22 Oct 2025 22:10:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134734
IP address blocks:        103.156.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
                          rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 20:59:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2069 (0x815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A19C8, serialNumber=FEEA61439A3098B85CCB183B5A41AA12AF45CA1E
        Validity
            Not Before: Oct 22 22:10:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f9564c-4758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:c1:52:f5:14:20:75:a6:28:b9:b5:d4:e7:
                    16:3b:b9:39:6e:4e:c7:34:09:7a:8b:a9:89:ae:6a:
                    72:8c:50:85:20:89:71:04:6d:f7:1f:5f:94:a4:5c:
                    a2:d5:a6:7d:03:6e:b4:7f:46:7a:38:d4:e1:aa:30:
                    4d:f4:0a:7e:c7:02:67:db:64:54:dd:d5:fc:2c:61:
                    84:37:ab:e6:36:1d:f6:74:d5:f5:bc:10:fc:b1:08:
                    47:1a:ec:1c:e4:fa:f4:6c:0d:2f:5c:46:a2:80:71:
                    34:0c:da:2d:dc:26:d4:f3:de:bf:ba:1a:9c:e3:59:
                    a4:fb:a5:6c:be:b4:01:05:f1:85:b5:8f:08:97:8b:
                    a7:e4:5b:1e:3b:0f:3d:7c:88:68:ba:2d:da:c8:72:
                    fb:7e:55:ea:2a:4b:75:89:74:bf:b6:48:4d:85:e3:
                    9c:bc:69:ed:29:9f:21:4b:07:9c:c4:b4:ea:a9:7b:
                    72:94:55:b6:8f:49:67:ea:f1:fc:81:a2:72:a5:5b:
                    78:0c:3c:9f:25:0b:35:b1:14:e2:61:90:d7:48:f9:
                    52:0b:0f:4b:04:40:cc:9e:07:bf:e5:a0:57:90:37:
                    90:f3:e2:6d:b4:d8:5a:39:a0:ca:54:a2:5b:5a:7a:
                    8a:42:9a:d3:b6:5f:b4:a5:0e:ff:bc:cf:b2:d2:88:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FA:8E:5B:0C:09:21:0C:F9:6F:4D:08:84:19:FF:E4:33:39:32:E1
            X509v3 Authority Key Identifier:
                keyid:FE:EA:61:43:9A:30:98:B8:5C:CB:18:3B:5A:41:AA:12:AF:45:CA:1E
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/_uphQ5owmLhcyxg7WkGqEq9Fyh4.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_uphQ5owmLhcyxg7WkGqEq9Fyh4.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A19C8/F5A5EEAA014111EBA33F8E11C4F9AE02/12C3076850E111F09D297C74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.176.0/24
    Signature Algorithm: sha256WithRSAEncryption
         30:17:e2:75:31:16:c6:ff:dd:cb:2d:54:f7:c6:6a:b9:1b:22:
         52:58:2b:96:2b:f2:a5:c9:e0:03:ed:83:af:cb:de:69:05:e8:
         84:02:a2:2c:33:f8:d6:b7:f8:d9:ed:ec:eb:dd:01:d8:44:9e:
         94:44:0b:56:fd:4d:35:8f:3a:b3:c6:a3:6b:5a:2a:e6:5e:24:
         03:ed:5a:63:f9:ab:4a:72:fd:f4:69:ad:a2:14:66:e5:5f:40:
         7e:df:bb:ec:6a:93:b3:94:5d:45:eb:67:aa:12:d5:7b:98:18:
         b1:68:e8:26:19:32:b9:a6:17:05:6b:fa:71:51:e0:f0:98:85:
         3c:d0:09:2e:16:9c:cb:6b:c4:0d:7b:1d:0e:5d:07:cf:c2:da:
         47:ce:54:59:43:8b:4f:c7:33:ea:25:68:ac:93:56:c2:10:5c:
         15:e8:81:7b:2d:79:69:66:4c:a8:f4:1c:ac:4f:3d:29:fd:67:
         ab:56:44:09:ef:8a:05:e3:57:9d:43:83:01:c8:16:91:2b:0d:
         29:38:a3:b9:27:8c:65:9b:97:5a:54:de:26:5a:03:75:d5:9a:
         3c:08:d6:5d:dc:74:fb:0f:5f:a5:fb:b5:f1:2f:97:70:1a:b1:
         e9:68:e9:21:51:bf:ee:6d:07:de:ed:e1:9a:49:34:45:7d:eb:
         ed:54:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 00:50:57 2025 by rpki-client