
$ rpki-client -vvf rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa
File: 9FAB1ADC65C111EF8769DC14C4F9AE02.roa (raw, json)
Hash identifier: WiTy8cm0FJ/aEESc91vlgZl0JT8P/pFPtZ2Ry9TBveA=
Subject key identifier: B0:D5:6F:C6:1D:64:9F:5F:A5:7F:24:B2:BD:29:BC:DC:6A:5C:B3:BD
Certificate issuer: /CN=A911980F/serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Certificate serial: 06D9
Authority key identifier: 3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa
Signing time: Tue 04 Mar 2025 23:11:21 +0000
ROA not before: Tue 04 Mar 2025 23:11:21 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 137426
IP address blocks: 103.108.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753 (0x6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911980F, serialNumber=3BC6B321FD7B60C560F15D7D24CAC5A337440FB4
Validity
Not Before: Mar 4 23:11:21 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c78899-48ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:8d:1c:cd:7e:3a:7f:d4:80:9c:0c:c0:97:
92:ba:05:8c:eb:f2:5e:97:e2:61:d8:2d:0b:68:22:
a3:42:01:33:fc:ef:07:a1:be:b6:27:03:9b:f7:49:
5a:42:8d:50:d8:ed:43:5c:36:57:90:12:2e:01:55:
f5:80:f7:b3:33:5a:49:78:b0:86:26:5b:16:fc:65:
12:4e:f2:20:4c:78:11:a8:ab:23:6c:e3:7c:d2:9f:
8f:7d:c8:1f:e6:e8:38:43:1c:b9:65:29:1f:e4:3b:
57:88:b4:ef:07:84:9d:ac:7f:30:7b:25:fe:33:bd:
23:00:92:8f:1f:b0:f6:9e:fd:30:c2:2e:fe:5f:3a:
a7:2b:29:b6:d2:58:2b:8c:41:fe:f3:32:f7:52:59:
c9:c1:5e:f4:be:a7:63:5a:6d:4f:ec:5b:70:32:5e:
78:b0:8f:da:e9:af:81:02:84:6f:ae:4d:e9:80:22:
cd:bf:f0:71:86:b6:32:5e:c3:c0:9d:56:72:3f:39:
6a:a9:dd:69:ab:80:76:b7:ab:56:b5:6f:ef:d3:f3:
33:1e:d8:15:84:a3:23:f5:a2:8b:dd:b3:af:2a:a1:
6e:99:5e:4a:f8:97:9e:bb:b4:48:15:35:f1:5f:ad:
c6:7e:44:d7:8d:8b:fc:06:da:d8:52:79:dc:84:de:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:6F:C6:1D:64:9F:5F:A5:7F:24:B2:BD:29:BC:DC:6A:5C:B3:BD
X509v3 Authority Key Identifier:
keyid:3B:C6:B3:21:FD:7B:60:C5:60:F1:5D:7D:24:CA:C5:A3:37:44:0F:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/O8azIf17YMVg8V19JMrFozdED7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O8azIf17YMVg8V19JMrFozdED7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911980F/16617D6C483211EB8754311AC4F9AE02/9FAB1ADC65C111EF8769DC14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.68.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c1:26:ea:bb:9a:36:0f:b3:3e:bf:97:fd:60:ff:a0:81:7b:
1c:52:8c:97:30:91:80:76:d7:5a:32:83:18:40:8a:07:e8:9f:
07:4e:46:8b:b4:b7:50:e9:be:4d:e7:b1:fb:51:c6:61:75:95:
21:36:2a:87:fa:62:21:05:f2:b0:42:68:af:6f:59:d2:88:4e:
38:6c:c6:0c:8e:c1:18:01:f9:75:23:8d:1c:e5:8a:9c:1d:ab:
4a:26:d9:27:ed:1d:59:34:fe:54:71:9b:b2:61:aa:ac:31:97:
5f:fd:64:d0:59:f6:47:fc:76:be:f2:86:ed:2c:89:82:54:f0:
c4:15:94:c9:24:53:09:0d:c0:25:2c:e7:f8:83:c4:ee:f9:53:
62:48:0a:31:c4:5e:c9:98:b6:9c:4c:6c:8b:d7:c1:52:60:36:
1f:20:c4:48:39:af:bd:2b:7a:be:71:57:47:3d:27:19:13:e9:
76:37:19:c5:58:a6:be:80:eb:9b:62:18:b4:b0:41:12:a6:ff:
19:bc:3c:53:85:22:ce:fa:fd:64:89:99:a5:ce:44:73:49:1f:
15:21:1c:4f:e0:77:3e:e7:43:5e:f9:fb:16:22:19:60:f7:97:
bf:83:21:84:23:0a:6c:72:75:d5:be:7c:c7:9a:83:e6:7b:b7:
ce:ac:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:35 2025 by rpki-client