
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
File: 28BC5490487F11EAB8C7545FC4F9AE02.roa (raw, json)
Hash identifier: S4AV+hD7m9juwu/JMpkYcCbzUHhn99B0UXH2YVYLeEo=
Subject key identifier: A9:C7:C9:6F:84:D6:58:6A:96:E8:4B:DB:C3:11:3C:C5:28:70:04:A9
Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial: 0E37
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
Signing time: Sat 02 Aug 2025 18:27:35 +0000
ROA not before: Sat 02 Aug 2025 18:27:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3639 (0xe37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Validity
Not Before: Aug 2 18:27:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=688e5897-543c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:66:0d:6f:ca:5a:bc:4f:0f:3c:46:e3:d3:
ca:6b:f8:6c:c6:ce:ce:87:2f:4e:85:d8:0f:27:df:
6d:b6:cf:85:b0:19:d3:bc:9a:05:70:22:ee:65:02:
95:10:24:b6:15:c7:f7:57:b2:59:6a:7b:2e:24:90:
7a:84:3f:a7:18:bc:12:60:76:1d:2c:45:ba:99:af:
29:5f:be:3f:0f:d3:97:d2:0d:7c:c3:d5:75:e5:1b:
c3:b4:27:13:cc:8d:81:95:a5:75:b6:05:4c:ff:4b:
6e:27:e8:5e:51:d5:e8:b6:27:51:54:88:28:9f:6b:
0c:13:79:2e:96:e7:4b:59:2e:fc:61:34:11:64:26:
93:e2:ff:35:15:6b:8f:8b:37:b2:5f:5e:64:59:ec:
fc:9f:b1:8c:ec:8d:9c:d9:a6:03:c6:2d:63:1f:c1:
ce:58:be:15:e3:02:16:a3:75:39:cd:2f:bb:f2:4c:
06:fc:df:64:be:b0:22:1a:5a:07:49:f3:d5:f8:b3:
87:0f:ed:cc:1d:df:05:8b:85:4c:dc:f3:e9:8f:73:
a7:d7:cd:75:69:bc:bd:70:ef:93:0c:bd:13:5a:8d:
0b:96:6f:be:ec:80:7b:91:5c:28:4f:b6:ba:ec:8a:
71:11:90:7a:09:70:60:03:cd:88:ed:cc:4e:30:48:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C7:C9:6F:84:D6:58:6A:96:E8:4B:DB:C3:11:3C:C5:28:70:04:A9
X509v3 Authority Key Identifier:
keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:4e:eb:28:5a:71:f6:c7:0b:7a:01:6e:62:80:37:1f:17:71:
d2:ad:e2:a5:53:3b:6d:5e:8e:9a:3a:08:a1:e0:e4:00:ce:53:
5a:8f:5d:45:a9:44:b8:eb:a8:b8:9b:78:5c:54:b8:13:7d:3a:
d0:6e:eb:72:63:db:ab:5f:47:14:b1:f9:ef:7d:91:1c:b3:77:
a9:33:2b:2d:3b:27:a0:ef:de:8c:cc:72:7e:13:e3:03:b0:75:
38:ba:69:d4:1c:2d:b1:f5:f0:4a:a4:35:68:45:d0:c9:6c:6e:
a9:93:25:f0:dd:1c:62:81:ec:bc:15:12:e6:3b:21:3d:21:09:
ba:6c:a0:83:21:df:63:c8:7f:2c:25:86:13:d4:e4:47:49:d0:
c2:41:7d:43:4c:2d:51:c9:c9:7c:6c:99:c6:52:4a:07:e3:0f:
0b:7b:26:e2:0b:70:19:15:24:30:e3:53:0c:7f:3e:f7:da:c1:
ff:c6:3f:58:27:20:14:05:d6:96:0f:aa:16:6a:39:2a:69:4e:
f9:5a:58:84:cc:f9:45:13:36:26:b8:2b:b5:21:42:9d:35:77:
c6:73:36:36:42:e3:bf:2d:51:ae:b2:fe:91:d9:1e:dd:16:f7:
16:e1:92:ab:7f:33:22:92:bd:67:06:5b:5f:22:af:18:97:e6:
75:d8:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:07 2025 by rpki-client