
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6CE6E15ECEF311EEBCE7894DC4F9AE02.roa
File: 6CE6E15ECEF311EEBCE7894DC4F9AE02.roa (raw, json)
Hash identifier: dEO++79BUk5ahAousLOU8sxWcE1quKezgUCE1Hu7wA4=
Subject key identifier: 2C:FE:B6:51:C4:B1:FA:67:16:9E:16:F3:AC:8C:1A:6B:84:C7:FC:9A
Certificate issuer: /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial: 01F8
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6CE6E15ECEF311EEBCE7894DC4F9AE02.roa
Signing time: Mon 03 Nov 2025 03:17:24 +0000
ROA not before: Mon 03 Nov 2025 03:17:24 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9268
IP address blocks: 103.25.115.0/24 maxlen: 24
103.74.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Validity
Not Before: Nov 3 03:17:24 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69081ec4-708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:23:19:c7:5f:73:5d:fb:ab:a1:e3:03:e0:9d:
56:2a:fb:b4:8c:90:b9:03:32:b6:ac:20:86:ce:67:
2e:54:e4:59:11:fe:85:02:91:75:be:1a:61:fd:46:
f1:ee:58:4d:cc:15:dd:d7:24:bf:57:e9:79:2b:b8:
3c:b1:e3:6b:2c:aa:1e:2c:61:ac:b8:81:d9:17:85:
ce:a0:28:a8:37:14:0c:e7:5e:ad:cb:5d:86:ec:b7:
9a:5a:75:98:90:53:a0:bc:7a:ec:14:a5:5d:92:9c:
46:14:da:65:75:69:0d:cb:5a:26:8b:f7:3e:df:77:
a7:9c:4b:ef:6f:63:d6:9d:d1:a9:c4:c4:9a:d6:3d:
1d:a2:98:df:fa:63:dd:dd:d8:c1:61:d3:a3:63:06:
16:86:a5:2f:c8:d2:16:a0:d6:a0:7c:42:5c:c4:44:
46:2e:67:6d:b7:40:65:7b:74:a2:1a:f0:cf:46:bf:
51:e3:8c:cb:38:bc:19:fc:ee:5b:92:10:69:94:b8:
42:2f:da:9b:40:1f:59:c5:44:29:38:9b:7c:14:df:
2e:bd:72:a7:ed:81:04:57:09:96:12:d8:44:f8:13:
a1:a3:0c:75:a8:8c:99:64:0f:f1:1a:63:8c:0b:0d:
37:d7:27:23:d9:1c:65:57:07:c6:cf:5e:69:50:1e:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:B6:51:C4:B1:FA:67:16:9E:16:F3:AC:8C:1A:6B:84:C7:FC:9A
X509v3 Authority Key Identifier:
keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/6CE6E15ECEF311EEBCE7894DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.115.0/24
103.74.216.0/24
Signature Algorithm: sha256WithRSAEncryption
45:10:4d:a8:a9:d4:ba:a8:1f:32:c3:da:75:d5:40:77:4b:8b:
df:7e:fb:dd:71:d7:db:25:be:77:db:6a:7e:ad:ac:2b:ff:b2:
66:ff:4f:fe:6b:f3:ea:78:ca:ff:01:1e:c9:2d:90:c8:6b:eb:
72:9e:84:97:2e:1d:16:83:83:77:3d:61:f8:2b:d8:26:c3:e2:
b2:39:8e:62:e8:75:8e:e6:f9:3f:79:da:b6:75:66:ff:0a:ce:
38:48:5d:10:c1:d9:00:00:04:b7:9e:58:24:cc:e6:79:0f:44:
01:51:b4:88:49:bd:a3:59:42:1c:f4:10:79:09:a4:77:c3:97:
8c:00:a4:0a:27:6d:7f:75:58:91:da:4a:40:23:09:c7:2f:b3:
5f:25:52:4b:e9:50:a2:87:b4:98:e3:f1:ea:b1:cc:cc:84:94:
2d:7e:fc:02:ea:cb:23:6a:59:50:2e:df:76:ef:fb:04:b7:23:
1a:1d:e5:b7:ed:bc:e3:ad:fa:d7:1b:42:28:6c:8c:07:87:f6:
af:01:34:8d:fa:5a:75:94:69:ab:a0:1b:1e:9a:ec:83:73:a7:
ad:18:c1:f0:a8:4e:3f:eb:b2:f4:87:e5:83:76:b0:58:be:cf:
d7:4e:53:a6:8e:6a:38:ed:d9:48:4c:76:5c:49:01:68:7a:4e:
4b:dc:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:21:42 2025 by rpki-client