
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E2D7894562911F0A243A66DC4F9AE02.roa
File: 5E2D7894562911F0A243A66DC4F9AE02.roa (raw, json)
Hash identifier: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=
Subject key identifier: 8D:19:A3:95:AB:D0:EA:9C:14:C8:BE:E5:7D:D2:05:57:57:04:A0:D2
Certificate issuer: /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial: 63
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E2D7894562911F0A243A66DC4F9AE02.roa
Signing time: Tue 01 Jul 2025 03:13:32 +0000
ROA not before: Tue 01 Jul 2025 03:13:32 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 151654
IP address blocks: 103.49.42.0/24 maxlen: 24
103.49.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Validity
Not Before: Jul 1 03:13:32 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=6863525c-bdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:45:3c:8b:99:f9:42:70:47:87:3d:dc:fa:
30:50:0f:12:86:1d:c2:af:f1:f1:57:e9:ee:c6:4f:
1c:5e:31:db:43:3d:e1:b4:53:6a:c3:aa:24:d4:f0:
1f:05:ae:42:77:1e:5b:65:4e:b3:91:07:32:34:b8:
70:61:91:6f:e7:ef:d3:1d:57:d0:90:24:6d:14:bf:
24:ce:a9:fc:0d:11:1d:15:ee:17:7c:b9:1d:3a:30:
a5:6e:e0:80:2e:1a:31:5f:5e:d4:77:e0:24:38:5d:
00:81:fc:a8:a4:1e:1c:fa:ad:1b:c0:91:b6:2a:21:
75:a7:7c:b7:47:b5:f2:9c:d1:1f:c7:fe:1c:45:2b:
6b:cc:3c:0d:0e:b2:3d:b1:5f:e5:b8:41:81:80:4e:
ab:3e:0b:aa:5d:46:2e:74:d5:4c:d3:38:77:f0:c0:
ae:bf:ed:d9:59:99:52:a8:46:b1:69:67:e3:4a:53:
1c:22:cd:38:4b:fb:4e:45:5e:58:db:30:6b:0f:4c:
84:d1:60:68:bd:33:de:3e:25:cd:3e:4e:ea:97:81:
90:39:59:85:eb:74:9b:6d:6e:70:79:e2:98:16:75:
05:8c:5a:82:6a:3c:3f:88:ec:89:74:3a:de:f7:a7:
42:d4:93:51:1f:2c:23:da:6f:c2:b0:c0:0d:b6:18:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:19:A3:95:AB:D0:EA:9C:14:C8:BE:E5:7D:D2:05:57:57:04:A0:D2
X509v3 Authority Key Identifier:
keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/5E2D7894562911F0A243A66DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.42.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:73:81:d0:fb:e8:3a:43:c0:f1:da:3b:5c:49:a6:ff:28:6c:
16:f8:8f:5a:89:ec:f3:cd:93:27:be:c8:ef:ba:2b:ce:fd:f8:
40:64:22:a2:8c:9e:21:a6:88:bd:0c:25:8c:de:e5:39:d6:43:
ba:20:fa:f5:3b:d0:ee:37:fa:a2:c1:15:af:89:c7:2d:7b:ea:
69:da:cd:7e:fc:20:d0:c5:80:dc:32:82:bb:49:1a:75:b5:ce:
9e:c2:8b:6a:89:31:3d:f1:cf:f7:b8:0a:e8:f8:ac:91:a4:44:
d9:1b:b9:2e:02:e0:11:60:0b:11:a4:e0:ec:1d:81:86:a3:b9:
7b:7c:25:5b:c7:56:b4:44:7a:56:f3:60:cb:39:70:0f:e7:05:
fc:5c:14:94:6f:4a:57:03:d7:c3:dd:17:91:75:9a:70:17:17:
97:ff:a6:27:bd:d9:dd:b0:9c:74:af:50:b0:6a:ce:91:32:a1:
59:59:e8:e9:39:00:6c:a9:25:a2:36:5c:f2:14:3c:e5:57:1a:
95:27:39:cd:0b:51:1e:cc:67:a9:e5:06:fd:6d:c7:1e:a6:c2:
17:86:a9:c4:13:7e:19:d5:59:38:f1:6d:5e:ca:ec:5d:66:98:
e9:2f:75:d6:c1:e9:f9:06:1a:3b:4f:62:a9:df:8f:85:55:a6:
dc:f6:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:19 2025 by rpki-client