
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
File: 13BC244C61A311F0A6E3910CC4F9AE02.roa (raw, json)
Hash identifier: PZ/Rcq3UjWrVkjq/myGAfI/HR3kWEFWwoh0XtDhdPhA=
Subject key identifier: F5:04:8F:10:F2:EC:DB:84:C0:C6:94:27:F3:07:6E:71:1B:E2:30:3C
Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial: 020F
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
Signing time: Fri 15 Aug 2025 18:22:01 +0000
ROA not before: Fri 15 Aug 2025 18:22:01 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 150661
IP address blocks: 103.48.162.0/23 maxlen: 23
103.48.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 02:04:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Validity
Not Before: Aug 15 18:22:01 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=689f7ac9-33c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:95:fa:4b:37:f5:b6:2e:57:02:4a:3f:b8:
b1:91:ef:fa:f2:d0:70:b3:51:b2:3e:1e:f9:31:82:
11:07:05:2c:87:84:ad:38:32:20:c9:a8:96:68:91:
1e:8e:7e:e3:8b:7c:22:a2:7e:41:fa:ec:ce:75:43:
c2:44:45:4b:24:79:88:b8:5b:82:c2:17:bf:b6:fe:
7b:75:9c:b4:77:1b:04:12:43:3c:13:52:c0:51:d7:
5a:95:65:58:59:fe:2f:fb:5a:33:b3:db:ee:2f:e1:
11:fb:1a:2b:c6:5f:f2:92:82:66:c3:05:08:1c:fb:
be:2c:af:29:9d:06:6e:a2:5b:98:13:00:6a:39:a2:
d7:c5:cf:b0:1a:99:a2:40:3b:f7:d9:9b:e6:a6:05:
ab:f9:6d:b8:e7:52:48:8d:60:1d:23:b5:60:eb:12:
85:93:6a:d2:65:6b:7e:e1:74:67:01:74:e2:c3:53:
9e:8b:49:64:46:22:4b:39:95:90:0a:60:a1:19:b2:
bc:09:8d:d8:a2:bf:78:52:d5:52:db:e8:d8:f7:1e:
fc:ec:40:8a:57:b5:17:5e:44:42:27:64:a7:d1:32:
35:ed:02:cf:df:47:df:2f:39:6d:e5:2e:bc:40:64:
3a:23:05:df:c8:bb:92:e0:19:26:e2:42:71:6d:60:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:8F:10:F2:EC:DB:84:C0:C6:94:27:F3:07:6E:71:1B:E2:30:3C
X509v3 Authority Key Identifier:
keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/13BC244C61A311F0A6E3910CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.162.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:bf:ea:72:48:8b:86:08:df:b0:cb:3e:8d:1d:41:16:01:18:
48:96:96:24:43:26:33:c2:53:cd:26:40:38:96:10:84:e2:c0:
56:c9:35:d3:b7:9e:ca:42:21:0f:e9:70:21:23:da:c2:71:b7:
bf:7e:3b:6f:01:d5:64:31:90:b9:e5:01:55:41:d7:bd:1e:57:
ae:08:e2:cc:62:31:5d:55:63:9a:ca:4f:14:8f:0f:05:70:d9:
fe:ac:c7:3d:38:39:95:eb:3f:de:d3:f6:cd:b1:a0:35:5c:5a:
9b:e0:bb:3a:de:33:40:0b:30:af:6f:fb:40:7b:c1:ae:5c:2c:
21:f1:4a:57:4d:3e:ea:1a:36:36:ff:51:47:4f:4c:2d:c3:fa:
d5:f1:b0:ad:4d:e0:64:2c:d2:93:1d:01:a7:6e:0f:3f:f8:ba:
cb:23:f3:f2:ea:77:ae:54:04:7e:e4:37:b3:24:00:60:61:34:
b2:af:36:ae:f8:fd:82:8d:a9:3d:ea:cf:96:ed:85:d6:d0:33:
c9:ee:a6:0c:0f:2c:f0:77:a2:01:74:e4:0a:34:f5:53:cc:23:
d2:6a:e8:d7:16:6e:47:a7:9a:2e:ea:b6:97:f9:45:ca:1c:1b:
6a:9d:0b:89:69:f3:94:4d:06:38:be:db:b3:8e:8e:87:07:ce:
de:76:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:36 2025 by rpki-client