
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
File: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (raw, json)
Hash identifier: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=
Subject key identifier: B3:F6:3A:13:47:1F:3F:03:81:03:2B:6F:21:7D:A7:03:B3:DA:25:BC
Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial: 0659
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
Signing time: Thu 02 Oct 2025 22:53:51 +0000
ROA not before: Thu 02 Oct 2025 22:53:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135386
IP address blocks: 103.155.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1625 (0x659)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Validity
Not Before: Oct 2 22:53:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68df027f-614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:6d:b4:6f:da:60:de:5f:42:a1:81:6b:19:
2b:1c:34:75:f5:b6:6c:c9:7a:70:f2:19:38:36:82:
0b:04:54:a6:51:02:ab:b5:a2:cd:45:c8:97:60:b8:
e7:e2:c2:0a:72:2d:67:e4:f9:6f:1d:aa:ac:fa:6f:
11:21:0f:5e:19:8c:d5:ea:de:5e:1a:93:e9:15:74:
27:83:3a:02:4e:ff:6a:60:92:bd:9b:ae:7b:80:52:
b3:86:a1:6b:e6:95:83:07:cf:c1:f1:62:31:52:85:
b3:9d:ba:d6:cb:05:9d:9f:ce:7b:98:01:65:66:72:
cd:1b:c2:35:0c:55:01:75:45:fe:6e:46:31:df:33:
65:a9:71:04:ea:c0:19:fa:56:1b:7f:52:b3:c2:1a:
43:da:6d:d9:49:22:b2:a6:77:d5:d6:ae:e0:ed:c9:
48:a7:42:51:84:7e:73:61:40:a2:9a:56:64:e3:d7:
d4:6a:60:a1:10:12:26:9f:7d:63:0e:ef:7f:dc:67:
8d:02:c1:75:5e:f7:1f:31:53:1d:6b:9a:ef:d3:a7:
80:7a:e0:c6:b5:70:8f:ba:d0:7d:69:b9:46:c0:72:
4f:d3:50:7f:d6:4e:96:4c:f2:dd:b6:41:a5:38:da:
e7:b4:4f:af:e8:92:71:41:b8:4b:a6:95:52:dd:04:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F6:3A:13:47:1F:3F:03:81:03:2B:6F:21:7D:A7:03:B3:DA:25:BC
X509v3 Authority Key Identifier:
keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.110.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:d9:57:39:45:43:42:00:a7:90:38:6b:8e:ac:b0:8f:27:45:
a1:a0:99:4b:cd:ae:6b:e1:d4:25:a3:08:84:f7:b4:d5:9d:2e:
cc:d6:b0:59:c4:a0:f6:07:d2:d0:14:4a:3d:b8:01:ab:44:7e:
1e:76:6c:7d:ad:77:a1:65:cc:d7:f8:0e:26:0c:a9:86:30:77:
af:fb:84:0a:e9:3b:c3:0f:40:1e:73:3f:ba:bd:b5:0a:eb:f3:
9f:f1:50:a6:d5:cb:37:01:c6:00:67:0b:ff:50:7a:6e:b4:0e:
83:cf:ee:4c:0e:f1:af:41:f4:98:a6:60:df:a2:91:1e:7e:16:
eb:ab:71:a1:66:aa:3b:67:a0:3d:c9:c8:87:ce:3b:79:5d:7b:
32:45:da:3d:c6:20:b9:73:fc:2f:c3:5a:52:3d:a2:09:25:ea:
4d:97:61:e6:57:41:80:77:19:90:89:53:d4:fe:03:45:1a:81:
ed:4f:10:86:ce:dd:4d:9b:0f:4d:46:21:79:b5:3c:9f:ca:cc:
0a:68:8f:cf:3b:ea:41:6b:a2:78:71:08:de:91:0c:3b:d7:35:
e6:54:63:6f:bc:11:9b:39:d5:ae:5e:fc:5d:04:fe:70:32:2b:
ba:a5:32:38:04:36:9c:62:6f:37:e6:62:23:ff:9b:1b:1a:6e:
dc:91:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:58:51 2025 by rpki-client