
$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
File: 8E9B074050E311EF8624AC36C4F9AE02.roa (raw, json)
Hash identifier: pSCYQ3uLsCLOJxTrAoE8Q2pLkXLNKvUAYP3brjTHhbs=
Subject key identifier: 10:E7:C7:07:AF:32:D6:ED:F0:AE:9E:55:B4:D4:D7:10:9A:6A:A1:31
Certificate issuer: /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial: B6
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
Signing time: Mon 07 Jul 2025 06:42:30 +0000
ROA not before: Mon 07 Jul 2025 06:42:30 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136920
IP address blocks: 103.99.26.0/24 maxlen: 24
103.176.215.0/24 maxlen: 24
2001:df0:f980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 05:29:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Validity
Not Before: Jul 7 06:42:30 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=686b6c56-9610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ec:72:53:64:c5:2e:c8:24:cc:55:7e:ff:a2:
31:d7:48:78:83:04:5e:af:e6:05:f7:a2:a7:d0:30:
97:a9:45:0f:b4:2a:17:ff:99:d8:c0:ba:3f:a5:3a:
07:78:b2:3c:4c:96:9a:af:cf:3f:1b:b1:81:1a:5b:
5f:f2:24:69:d0:d6:bf:f4:9c:fa:86:cd:7f:d4:e0:
40:a7:a5:dc:be:01:cb:37:93:01:a4:81:e1:4c:42:
0e:df:3c:0a:08:4f:76:2a:55:a0:66:50:60:56:17:
65:bf:ab:69:fe:fe:97:57:77:f2:cc:d3:85:0d:50:
aa:a7:a4:83:25:00:13:c8:84:1a:13:9c:53:7f:e0:
28:20:6c:b2:07:dc:36:d2:21:51:fe:6d:21:41:30:
f5:25:13:22:e8:dc:c4:79:18:e6:a5:c6:62:2f:20:
00:88:99:b9:44:16:d9:2d:59:5e:c7:78:7f:4b:a4:
de:37:c1:ae:61:cc:e3:01:36:91:83:d6:ea:e4:08:
e1:29:d3:6b:fa:ed:da:3c:43:0c:28:ed:7e:0b:a2:
3f:8e:e2:68:f5:54:25:2b:0e:f3:1d:40:19:72:48:
00:b5:c5:88:e6:b2:13:ea:34:ab:03:18:f7:46:97:
cd:8b:00:f7:a4:80:a4:15:ba:69:27:47:a7:1c:1e:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E7:C7:07:AF:32:D6:ED:F0:AE:9E:55:B4:D4:D7:10:9A:6A:A1:31
X509v3 Authority Key Identifier:
keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.26.0/24
103.176.215.0/24
IPv6:
2001:df0:f980::/48
Signature Algorithm: sha256WithRSAEncryption
96:bf:1d:61:3d:fb:ca:9e:da:50:9c:26:1a:a6:e5:c7:29:ee:
43:bf:e7:60:19:14:d7:15:fb:40:81:81:93:44:b1:e9:66:a0:
9c:3b:52:90:42:a2:8a:44:9b:31:c2:bc:d7:27:6c:fc:11:33:
ad:82:fd:e8:5a:0a:24:43:91:e1:fd:9a:cc:4d:68:41:ba:a1:
1d:d2:9b:02:75:50:e3:74:9b:c9:ab:8d:b5:3f:32:fa:c8:a3:
aa:30:e0:33:b1:3c:6e:be:07:60:2e:00:a9:25:cb:c2:4c:b4:
c3:2c:60:6f:e0:49:3c:12:f3:d5:9d:c0:07:55:c2:4d:6a:c0:
0c:8b:ef:60:25:48:ce:e6:d9:ba:e2:64:ce:4c:30:ef:45:66:
21:a4:e1:ed:0e:87:c1:a1:61:9d:da:b3:67:18:cb:40:28:84:
9a:4c:44:70:eb:2b:c9:96:b5:d9:08:18:48:c3:83:e8:fc:ae:
e7:fd:49:b8:b9:1c:ce:d1:ad:32:2a:89:82:75:39:f2:4e:36:
0c:db:1d:aa:a4:bf:5b:dc:e0:a7:13:49:a6:cf:1f:e2:e7:44:
84:e2:39:bd:9d:35:cc:b1:6b:21:df:88:e6:ac:00:05:cb:e0:
71:6d:13:b2:4f:6e:51:3c:bb:36:64:88:71:41:59:59:da:67:
eb:23:7f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:19:00 2025 by rpki-client