
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa
File: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (raw, json)
Hash identifier: QwIma1yY7YkOQP5MP7P6PHkUn+CQDErkQ0yx5EKSwl8=
Subject key identifier: 8B:24:B0:FF:95:A3:D4:33:6C:BA:60:33:14:F2:F5:0D:79:2D:3E:EE
Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Certificate serial: 0A32
Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa
Signing time: Thu 30 Oct 2025 20:09:27 +0000
ROA not before: Thu 30 Oct 2025 20:09:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139701
IP address blocks: 103.143.211.0/24 maxlen: 24
103.144.195.0/24 maxlen: 24
2001:df1:9880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Validity
Not Before: Oct 30 20:09:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6903c5f6-2c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:89:fd:05:d7:9a:f4:79:51:95:1c:5b:5b:f6:
2f:93:e8:d0:a6:f0:c8:21:11:9a:df:6c:32:fe:de:
56:95:2a:43:63:f9:31:6e:c7:e5:d3:b4:a9:0d:da:
54:7a:33:e1:c8:89:89:00:2d:89:6e:38:f5:48:87:
dd:0a:03:ef:66:e3:24:0a:93:64:4c:55:10:65:c1:
a3:bf:2d:2b:95:96:2a:b9:b7:75:77:33:9f:1a:6b:
2c:c0:9c:e7:7a:0b:ce:63:0d:3c:fa:94:22:78:8d:
4f:20:75:22:1a:e3:f1:ef:9e:6b:70:e8:fd:e1:2a:
8e:51:11:8c:89:8a:59:93:14:c7:c7:5c:4c:81:d0:
87:ad:f4:21:6b:14:96:4e:b3:ea:bc:e8:f7:72:3a:
fe:c3:89:58:f9:d3:05:79:dd:1c:57:f3:09:2d:dc:
dc:fc:63:71:7f:8b:68:6b:e7:6a:92:1e:99:ed:1b:
66:ac:7a:1f:b8:36:bd:5f:bf:a8:2c:12:13:97:65:
db:5a:3e:db:8b:4c:b4:c2:7f:e1:e5:50:f6:91:bf:
4c:d1:74:da:f0:e6:8f:43:67:0a:2a:fc:80:5a:e8:
e6:e6:2b:04:d1:0e:a1:19:29:ab:7f:da:d0:56:ba:
07:a8:56:63:30:f8:1f:ed:87:3f:24:76:d2:e9:43:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:24:B0:FF:95:A3:D4:33:6C:BA:60:33:14:F2:F5:0D:79:2D:3E:EE
X509v3 Authority Key Identifier:
keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.211.0/24
103.144.195.0/24
IPv6:
2001:df1:9880::/48
Signature Algorithm: sha256WithRSAEncryption
b7:07:07:9e:37:08:54:e8:c8:91:f8:49:dd:e6:8c:04:26:e8:
bd:eb:d9:13:fb:82:44:b5:3f:66:35:2d:72:5c:45:f0:fd:6a:
d5:cc:44:de:b7:92:6b:db:78:ab:92:ef:e8:e8:f7:9e:51:b4:
7e:6c:5a:f5:ab:a8:aa:7b:64:6a:cc:ac:5b:30:d2:3d:36:c6:
56:49:84:d8:3b:56:8d:11:03:5b:cc:f5:f4:5f:1f:30:7a:a2:
7d:0f:3b:2a:b7:9d:9f:89:ba:80:21:d1:32:46:32:16:80:26:
b3:04:c4:22:9c:17:15:24:9a:fc:f3:d4:3f:be:27:54:85:cd:
7c:65:d2:7c:3f:67:29:b6:ce:70:ec:a1:f8:80:ab:29:53:2d:
5e:a9:f3:4f:26:e2:6b:28:2f:00:85:7f:c7:74:ac:88:58:39:
42:15:ee:81:20:2c:50:a9:cc:c3:6d:90:c1:5b:39:08:0c:07:
8f:cc:e1:93:83:41:02:d5:28:c8:55:db:1d:e7:34:16:74:80:
2d:9e:86:67:23:24:c2:a5:35:75:59:0c:fd:80:77:4a:f1:25:
94:b3:c5:c2:64:60:46:ae:44:45:0b:f1:35:d7:97:9f:32:b9:
80:8f:37:61:5c:46:1c:bf:d3:b9:a0:db:86:0a:61:86:d0:4a:
dc:92:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:10:33 2025 by rpki-client