
$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
File: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (raw, json)
Hash identifier: /viIoOdMe+feZMQPxouX5G+qgnaLfiITASYYRT4GW5Q=
Subject key identifier: AA:02:31:0E:D8:7F:39:FF:9B:CC:46:A7:4E:0A:FE:8D:8B:35:DF:D7
Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Certificate serial: 0C
Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
Signing time: Fri 31 Oct 2025 05:50:08 +0000
ROA not before: Fri 31 Oct 2025 05:50:08 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 23664
IP address blocks: 103.208.208.0/22 maxlen: 22
103.208.209.0/24 maxlen: 24
103.208.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 08:10:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF
Validity
Not Before: Oct 31 05:50:08 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=69044e10-00aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:22:9a:2c:6c:19:7f:4c:e5:a3:f9:2f:63:32:
2d:f7:0b:eb:e9:d0:ab:08:1f:be:0d:24:03:93:ad:
18:7a:da:14:9a:48:4b:ed:50:5c:90:f6:6f:43:51:
14:15:93:9f:d0:a0:5f:33:91:5b:d4:d8:9b:8c:ec:
21:27:d5:68:17:dd:ed:51:97:01:8b:72:40:ed:05:
45:26:96:de:c7:12:5b:bc:2c:bb:93:ea:11:5b:4c:
0a:b1:cf:9b:6d:bf:74:f5:f6:b6:6d:f9:26:2b:2b:
ec:17:76:42:44:5d:fc:de:c1:c0:0c:d1:1c:b2:a7:
a6:a5:6b:5d:c5:be:97:fb:f9:66:63:13:fc:32:93:
f3:93:bc:cb:9b:97:b0:e4:2c:4e:7f:73:e9:94:07:
40:fa:16:11:ea:8f:63:da:bd:db:47:32:1f:da:f1:
67:1b:2b:be:97:ac:06:f3:ce:02:85:a4:15:2a:52:
e1:5c:e1:34:24:57:97:99:18:72:50:14:d1:c7:59:
e5:30:4e:c1:d9:28:ab:4c:45:2e:de:a8:34:66:53:
87:5d:4d:aa:32:87:b1:d5:e6:9b:81:99:4a:4c:62:
6d:46:8d:15:6c:e7:01:8c:24:a1:72:7a:66:82:65:
95:9a:5f:08:87:93:25:8c:7c:3a:ff:85:57:d7:4b:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:02:31:0E:D8:7F:39:FF:9B:CC:46:A7:4E:0A:FE:8D:8B:35:DF:D7
X509v3 Authority Key Identifier:
keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/82E0EA4AA98F11F0BFFFD266C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.208.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:5e:c9:41:ec:77:d6:c8:49:5c:1a:9d:fa:1d:d3:ec:15:b1:
29:18:e8:51:cf:23:01:07:6d:ac:7c:bd:b2:88:a2:52:27:06:
02:5d:0e:82:be:73:ac:ce:d8:15:90:09:03:14:4e:d4:a7:45:
c6:a4:64:23:4b:77:f5:03:e2:e1:e8:6a:39:0a:f8:c4:49:7f:
ce:56:6e:7a:47:d3:a1:63:13:88:e3:a8:44:5f:9a:b3:48:69:
5d:c9:63:f6:55:13:f0:e8:07:b0:68:aa:9c:9d:19:e3:f7:68:
9f:c0:34:56:eb:c8:8e:2c:52:8a:ac:d7:90:5d:56:9c:e5:93:
e0:78:41:47:2a:e6:eb:42:c8:e5:92:1f:55:d2:e0:74:ee:4c:
46:2e:25:1f:e8:d7:73:34:66:c7:a3:34:ed:f5:2b:45:32:dc:
11:58:38:b4:3f:33:9b:7b:88:9a:c2:7c:52:19:f3:36:78:51:
c2:8b:db:1c:66:f6:88:67:4b:7d:ab:d5:23:c0:7e:48:58:ed:
1e:10:3d:af:09:ac:58:de:28:81:3d:3c:74:fd:df:b7:a4:c3:
9d:e4:5e:42:66:88:35:8d:ca:78:91:cb:dd:80:51:f8:58:d9:
6f:ed:77:87:8a:5d:6d:30:18:b4:f5:61:f9:07:fb:f4:93:02:
77:b6:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:39:44 2025 by rpki-client