
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
File: CB7909B4B26C11F08ED1666AC4F9AE02.roa (raw, json)
Hash identifier: 1gL4I2egnCSqsLf7l6tXcfDd5pBtB+GKyBssuG680/k=
Subject key identifier: C6:1B:A8:91:66:BA:93:CE:50:A9:38:9D:2C:16:19:F0:12:1D:80:6F
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 05DB
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
Signing time: Sun 26 Oct 2025 13:07:59 +0000
ROA not before: Sun 26 Oct 2025 13:07:59 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140287
IP address blocks: 103.112.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1499 (0x5db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Oct 26 13:07:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=68fe1d2f-df1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:ce:35:f2:d1:38:55:fb:9d:0a:72:d9:31:
0c:c4:aa:3a:d2:a3:a3:38:63:4c:5d:ed:d0:1c:1c:
f6:9c:a8:38:52:ea:49:2d:c6:6f:56:d1:86:22:74:
46:ee:4c:6b:97:42:f3:93:84:79:e3:36:1f:76:7c:
16:22:ec:5b:14:22:cc:58:ca:b9:f5:47:3d:03:1b:
41:ae:2a:54:c5:71:c0:cb:ef:3d:e1:4d:b1:53:5a:
89:69:c1:ba:c2:7b:c9:ce:92:2a:9b:c6:86:41:7b:
6d:18:3f:01:c5:2e:88:fc:66:ae:80:66:46:4a:91:
52:4b:4a:18:09:fa:07:37:c8:76:74:8f:b4:dd:bf:
03:b6:83:bb:15:ca:ac:ab:7a:d6:c1:c7:4d:d4:8e:
93:96:4e:93:fe:d7:cb:66:97:7b:b6:ee:5b:a3:9b:
b2:4d:d7:73:5d:76:78:4c:e6:15:12:c6:00:d3:a9:
5f:6c:73:d4:82:af:c5:49:89:a9:53:a6:82:3c:cb:
6b:c1:cb:32:b7:c3:1d:3b:71:f3:c8:0b:97:ba:e9:
87:82:4f:41:55:6d:a0:c4:2a:f8:bb:10:22:d9:76:
66:2c:54:e7:4b:03:c7:24:54:2a:80:48:73:e8:08:
ed:b0:ec:f6:32:f1:41:b0:f5:66:43:1c:83:15:b9:
09:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1B:A8:91:66:BA:93:CE:50:A9:38:9D:2C:16:19:F0:12:1D:80:6F
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1c:68:81:e4:df:cb:ec:b7:88:91:36:eb:c3:81:e2:4f:5e:
5f:9f:87:7b:f7:86:de:b2:d4:4a:0d:fb:71:bd:f3:a6:75:c0:
be:85:90:a9:5e:ce:b4:50:6a:3d:f9:0a:2c:2a:7b:9e:cd:27:
c9:1e:c9:9a:7c:82:93:a8:71:e2:3e:e4:87:0b:ff:90:96:29:
d4:7e:bc:5b:08:2f:6c:50:8c:b4:c6:fe:3d:60:7f:a1:b3:7f:
8f:f0:4d:b4:6f:30:7b:4b:6e:70:57:64:0a:6a:6d:a1:ae:ad:
b0:ec:33:21:3c:3e:84:86:03:30:6c:3a:ea:06:73:c5:36:0f:
15:69:8e:ba:b5:e9:d4:11:7a:e5:71:ec:fc:25:c3:06:56:32:
9c:a6:8f:8e:df:ae:aa:97:0a:70:77:ee:d7:b6:cf:a5:54:e3:
28:30:de:7e:40:4c:01:11:c0:34:16:b6:fe:0a:61:6a:ab:e0:
82:17:21:9d:74:59:42:64:ea:91:72:f0:30:eb:84:c5:d4:5b:
a3:cb:33:97:7c:d9:f8:58:4f:6e:a2:65:b1:fa:11:86:c2:79:
eb:3d:12:f4:15:81:52:7f:f6:82:2c:3a:9e:0d:cc:a5:2d:ee:
47:e1:dc:6f:a3:cc:05:92:b8:ae:2e:ca:25:7c:85:a9:39:df:
f8:a1:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:15:00 2025 by rpki-client