
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
File: DFF01B484A2B11EB8609481FC4F9AE02.roa (raw, json)
Hash identifier: YiR4JbsKw+GFv+2ph6Z6RjnVItfR5VK3GT7W/gU8znA=
Subject key identifier: 41:74:76:DF:3A:CA:7E:54:0F:F3:99:9A:35:E3:F9:A6:C5:73:F3:09
Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Certificate serial: 0787
Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:40:39 +0000
ROA not before: Sun 30 Mar 2025 21:53:08 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 59356
IP address blocks: 103.225.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1927 (0x787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551
Validity
Not Before: Mar 30 21:53:08 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fb87-d4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:3e:67:04:7d:12:68:ed:14:dd:5d:36:5a:
32:c1:a6:e2:a1:af:3d:cb:fb:9b:69:b1:00:bc:94:
1f:08:ac:7e:d5:15:9a:3d:0e:3b:66:f9:bc:6d:35:
7f:ec:3b:27:09:c9:b3:78:43:aa:5c:2a:1f:0d:27:
65:24:ed:2a:7e:03:2c:85:cf:26:9b:e3:46:03:b0:
7d:67:0f:08:be:01:6d:ee:3b:e1:3c:64:a2:94:dc:
0d:33:fd:db:e6:d2:f8:30:62:42:e6:66:dc:84:8d:
d2:00:5c:dc:9d:8c:09:6d:c8:4b:f0:b2:38:a3:51:
9a:59:05:31:72:74:bb:2b:b7:42:9e:4f:1a:6c:6e:
ec:24:d6:5a:3b:65:eb:13:54:57:12:01:5e:bb:60:
1f:00:0c:d6:46:af:c9:51:69:01:1c:36:74:47:0b:
fd:77:94:d4:9a:93:74:75:81:75:25:0a:84:ed:3d:
07:6f:f8:74:4b:fd:2a:94:8a:bb:93:bd:38:2a:92:
be:23:1c:f8:1c:ec:8e:5f:6d:39:a3:fc:7c:d4:e6:
b9:4e:22:f0:a3:06:68:94:f2:3a:cc:e7:8d:3c:d0:
cb:4f:bb:8a:c9:f6:9a:a3:a3:9b:05:d3:5a:6b:7a:
0c:d9:ba:5f:1d:f4:b4:3d:c4:ba:21:e8:85:0f:0b:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:74:76:DF:3A:CA:7E:54:0F:F3:99:9A:35:E3:F9:A6:C5:73:F3:09
X509v3 Authority Key Identifier:
keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/DFF01B484A2B11EB8609481FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.225.160.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:a1:d9:0e:e0:8d:a2:c9:9a:b4:86:12:20:a1:14:68:f6:a6:
4b:ac:c3:89:52:04:51:5a:0b:8f:de:b7:ce:b8:be:03:8b:eb:
bf:89:5f:46:dc:04:78:52:fb:a4:a6:c3:9d:83:b2:76:bc:b7:
1c:f5:53:39:16:29:d6:22:cc:83:2d:70:68:ae:57:ed:10:04:
52:be:e5:3a:07:ee:09:a0:55:5c:76:d1:0a:e1:0c:20:2a:f9:
3f:93:a0:42:0a:e9:4b:7f:36:93:a2:d0:8b:ea:28:c5:ca:51:
d3:f9:2a:29:be:c9:88:bc:5c:dc:45:0b:66:52:17:b6:01:8f:
ae:3d:72:39:c8:6d:ba:0e:87:5f:bb:8c:af:64:d6:08:c8:e6:
92:58:66:2d:fc:c7:fc:98:fb:a6:f6:62:86:2e:a8:8f:b8:fb:
1d:a2:4c:12:cd:08:d5:f9:02:ab:01:40:1e:23:ca:17:da:0d:
94:8c:ab:2d:50:03:4f:9e:4c:09:ae:69:b8:5d:c4:c1:59:d8:
31:a2:cb:a3:28:46:8e:1c:c0:61:b6:fc:ea:b1:21:8d:00:9b:
f0:29:66:cf:6a:50:94:99:44:bc:3b:f8:7f:04:71:fa:29:fd:
5b:a8:9c:e2:fb:8e:3e:ed:b0:17:44:7a:a1:ca:9a:19:71:7e:
9f:a6:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:16 2026 by rpki-client