
$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
File: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (raw, json)
Hash identifier: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=
Subject key identifier: 37:95:C9:8E:E3:09:F7:E5:43:C0:AE:71:44:E9:A8:98:57:56:1B:86
Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial: 0198
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
Signing time: Tue 03 Jun 2025 03:21:41 +0000
ROA not before: Tue 03 Jun 2025 03:21:41 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 152464
IP address blocks: 103.131.198.0/24 maxlen: 24
103.131.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Validity
Not Before: Jun 3 03:21:41 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=683e6a45-e9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:50:86:a5:47:35:a5:a0:02:b0:20:60:44:
71:d6:1b:2c:77:02:4e:a2:8f:a2:bf:9f:d8:a1:85:
59:44:4b:ed:40:80:34:75:61:39:31:50:f4:6c:1b:
ae:a0:71:46:ac:9a:25:3b:be:91:e4:6d:1f:b2:93:
1f:81:86:60:26:84:ef:ef:7a:40:23:e6:17:0a:fc:
1f:67:38:7d:4d:85:d2:a7:9d:a2:38:3b:7d:48:7e:
08:8f:77:f1:5c:d2:e2:d8:35:2c:f7:62:f9:de:02:
1b:a6:8f:52:10:83:42:c7:02:21:44:6b:9f:a3:81:
e5:5d:19:7c:75:60:0f:0d:55:0d:50:1b:9f:eb:a9:
48:75:a1:25:9e:32:97:7b:27:5c:79:66:d7:de:9b:
72:e4:b7:95:40:57:cf:fe:31:b8:70:8f:85:fd:a9:
ba:fa:62:49:0d:f7:c0:54:c3:19:ed:33:43:89:ad:
f8:f3:ff:7c:89:c8:01:05:11:17:36:53:6f:05:29:
f8:3d:5a:03:ab:7f:ad:20:f9:ec:d2:fd:14:ab:2d:
db:b8:6b:19:3c:8f:4b:54:3b:8d:12:e6:e5:ad:ca:
6d:06:69:33:38:f4:a5:4a:7a:2c:c1:8d:90:08:89:
08:4f:5c:d7:2b:d4:59:ce:8f:36:3b:fa:5d:b6:87:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:95:C9:8E:E3:09:F7:E5:43:C0:AE:71:44:E9:A8:98:57:56:1B:86
X509v3 Authority Key Identifier:
keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.131.198.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:ac:4d:1a:f4:c7:b0:1e:68:4a:5e:d1:82:27:8b:0d:3c:fe:
10:dd:16:15:ff:fa:ba:52:60:3e:64:f6:b7:92:cc:5a:8f:db:
25:5f:90:cf:db:e0:24:2d:83:82:20:a1:06:d1:53:a7:2b:7c:
39:1e:6c:37:8a:df:f5:69:60:1e:31:2e:7d:3a:4c:56:7c:b7:
49:54:e9:9f:c0:e5:97:bc:7a:76:65:8c:3a:9f:92:31:8a:75:
0f:e0:9d:b9:a4:77:3a:11:db:ed:a9:a4:aa:89:4f:62:d7:e2:
c1:3c:89:39:b0:e7:28:82:1f:40:23:b9:6f:52:d5:4c:90:02:
d2:28:36:7e:2d:1d:7d:b6:90:05:65:21:16:b2:bd:94:ed:fd:
87:7a:7e:42:61:a0:02:e7:fa:f7:a2:5e:d5:f6:f2:07:9a:da:
5c:97:e2:10:07:e2:de:80:d3:20:3b:87:22:49:06:af:1b:c6:
00:6c:60:71:f0:a6:ab:2a:96:92:10:49:77:fc:86:4e:c0:dd:
dd:8f:51:46:45:01:96:a4:a1:70:43:94:8c:55:fa:82:6e:78:
50:35:82:e2:83:31:86:29:6a:0f:9d:03:b0:ad:64:3f:79:ad:
4d:d1:fe:74:63:c1:f8:a7:e4:10:b0:e9:13:8f:a8:04:12:e2:
83:a7:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:43 2025 by rpki-client