
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa
File: CE74C490AA4911EF80B4D381C4F9AE02.roa (raw, json)
Hash identifier: ZbN7HX75z4kqrPzQKLv8pw3PHkYxa9adZyy5gxVNx/4=
Subject key identifier: 45:DF:5C:15:A4:EF:2B:29:47:0F:72:E8:34:94:58:7B:B8:B3:C7:6F
Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial: 0199
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa
Signing time: Wed 29 Oct 2025 03:18:13 +0000
ROA not before: Wed 29 Oct 2025 03:18:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138197
IP address blocks: 103.72.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Validity
Not Before: Oct 29 03:18:12 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69018774-0010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:99:98:f6:6a:76:f3:1f:89:94:f1:09:c9:
6e:55:7b:fc:0c:8a:51:b3:65:60:fa:e1:c8:5e:9e:
e7:eb:9e:d3:c6:05:cc:ac:9c:a9:bf:36:8b:32:33:
ac:23:ed:d0:e5:dc:a8:1e:62:bf:9b:19:8f:2a:6d:
d8:e2:e7:80:60:b0:52:bb:5c:b4:63:b8:0c:46:58:
dd:2e:1e:3e:1d:af:3e:9e:51:68:02:a2:98:4f:34:
e1:e1:30:62:9b:bc:6b:a1:21:e0:95:ce:dd:89:89:
0d:eb:e3:36:71:73:e1:a8:a2:26:fa:f5:4a:e6:a8:
58:15:95:24:91:a3:07:96:6b:4b:d1:bf:68:ab:19:
0e:40:e5:c7:36:52:18:99:48:bd:18:94:61:15:d9:
7a:75:6c:8f:ef:cf:b2:a0:f3:ac:21:b3:d3:e4:e0:
f6:dd:7a:cb:f6:d0:52:0d:a6:81:91:9e:b2:ab:f9:
d3:3f:7e:dd:e6:13:7d:83:d0:8e:71:da:77:25:87:
5d:29:bc:94:90:c2:14:2d:b6:08:91:46:cc:49:52:
54:01:47:b4:ee:c4:14:f8:39:4f:3c:9a:ed:62:8f:
43:32:ee:6b:9f:e2:de:9e:0f:25:7c:ad:ff:92:5f:
53:13:b3:6b:1b:85:cd:f2:9b:c7:bd:de:94:06:09:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DF:5C:15:A4:EF:2B:29:47:0F:72:E8:34:94:58:7B:B8:B3:C7:6F
X509v3 Authority Key Identifier:
keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.65.0/24
Signature Algorithm: sha256WithRSAEncryption
72:34:4b:35:ff:35:01:bc:50:77:5a:78:63:db:e8:43:27:85:
cc:bb:28:e2:90:f3:8d:b7:7f:7c:3c:fe:53:c9:b2:8f:19:98:
34:bf:23:da:2f:cd:a5:5e:a5:f1:92:a3:25:6a:47:44:10:1c:
5f:62:bc:33:b3:ae:d0:29:68:13:0b:26:be:b6:e7:d6:9b:3b:
89:98:61:83:ed:6c:d3:c7:0c:c4:7a:9f:e4:c0:25:16:05:6a:
c2:75:d2:9f:9b:ca:4e:ff:27:63:dd:76:ed:ee:c3:95:16:9f:
29:1d:cb:ed:e3:91:28:85:29:97:84:ad:b6:f3:04:9b:7d:13:
4f:a9:b0:2c:28:bc:15:c7:75:65:0c:67:17:54:c9:45:57:b8:
45:f0:78:87:bc:52:8f:91:c7:90:eb:02:2a:b8:8f:41:e9:1a:
87:68:50:ed:55:27:d7:e3:43:ed:ca:87:ca:19:20:07:80:59:
71:b4:f5:a4:e5:76:77:b4:9b:ae:69:24:e6:92:38:54:cf:b7:
2f:c9:2c:63:e3:c0:e9:01:89:8e:8a:c3:a0:ec:b1:00:a8:de:
cc:be:f9:1a:22:32:5c:23:57:09:0b:cb:30:6e:c5:c5:e4:68:
16:a5:c3:3c:55:27:d8:69:fa:e3:5d:12:b8:75:d0:e4:dd:35:
3f:39:32:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:13:41 2025 by rpki-client