
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
File: C202E82834B611ED815AAB32C4F9AE02.roa (raw, json)
Hash identifier: g8vcclbbREYqZXoYauTIQjOb/RVyOM/9dHk3sz7i1Lc=
Subject key identifier: 3F:D7:A4:5C:25:F9:5B:11:15:02:3C:9A:EA:07:71:B9:93:17:BB:A0
Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial: 0263
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
Signing time: Fri 17 Oct 2025 04:07:53 +0000
ROA not before: Fri 17 Oct 2025 04:07:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137538
IP address blocks: 103.5.218.0/23 maxlen: 24
2400:aae0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 01:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611 (0x263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Validity
Not Before: Oct 17 04:07:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f1c119-c223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:a7:c1:e8:d3:17:07:6b:a4:7a:fd:9f:bc:
00:64:94:0d:b5:5f:0c:8a:f4:1c:5a:7f:ba:45:09:
e0:6a:80:f6:ab:ff:ef:80:f3:5f:fb:20:85:09:95:
b0:de:63:5e:b7:9f:32:ca:e4:92:ca:4c:f1:43:c9:
ed:bf:13:48:18:54:21:a8:63:74:dc:26:a8:36:7b:
05:86:14:b6:6d:78:50:52:1a:7d:ac:35:a2:82:86:
3f:34:6d:0a:fb:11:f5:dc:48:a5:5e:b2:b2:e1:66:
33:62:f8:20:49:24:ab:02:e3:c2:d8:96:ef:65:ef:
95:e0:43:43:20:bd:31:d8:a6:2b:df:9a:32:2d:19:
74:55:d2:0c:e5:f0:15:c0:7a:34:9b:90:35:95:75:
64:e4:92:a7:24:f7:c0:16:45:be:87:0c:41:36:07:
7f:ab:f5:99:cc:dc:84:c5:c4:4e:75:61:11:cd:a0:
52:e9:1e:dd:88:56:02:d2:41:45:e9:1b:9b:36:af:
8a:75:f9:8f:14:1d:38:23:b1:d2:f9:eb:8a:0a:1f:
c8:e3:8e:30:9b:c7:dd:b3:a3:b0:3f:e3:42:33:26:
58:54:32:2a:2d:eb:93:2f:c3:cf:77:92:42:8d:c1:
f8:bf:96:46:d4:ca:c7:81:74:57:a7:fe:bf:4c:49:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:A4:5C:25:F9:5B:11:15:02:3C:9A:EA:07:71:B9:93:17:BB:A0
X509v3 Authority Key Identifier:
keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.218.0/23
IPv6:
2400:aae0::/32
Signature Algorithm: sha256WithRSAEncryption
47:78:20:f1:4c:ae:d3:cb:1b:a0:2d:16:d3:fc:09:17:31:21:
ab:69:20:b5:70:06:29:ab:ae:17:fc:8d:a8:d3:e2:7b:65:7a:
6a:ed:76:fe:ab:d5:30:77:93:1d:39:bf:2a:e8:6b:02:67:dd:
79:b2:7c:33:df:61:93:aa:24:e9:7e:fb:71:ee:fb:58:2b:43:
cd:81:05:01:d5:60:9b:73:19:42:8d:e6:e7:38:23:ef:cf:ae:
83:26:a8:e3:7f:3d:43:3f:f5:4d:b4:99:71:01:08:d5:29:96:
ec:4c:a9:eb:30:5e:1d:84:09:19:b2:26:90:2e:aa:f5:de:2b:
21:15:3d:62:21:e1:b8:96:04:f2:04:06:de:f8:5c:cc:49:e6:
1b:57:fc:58:21:4c:87:b6:85:65:d3:af:a0:81:02:a4:51:59:
42:ca:8a:da:4a:4a:ef:f0:c8:6a:39:98:fe:84:f8:07:e7:37:
42:07:e8:d4:48:4c:19:5a:98:51:11:57:e3:6b:bb:23:70:92:
65:b1:ba:8c:5b:5e:de:47:42:58:30:9e:1d:00:56:01:46:82:
dc:9d:84:c3:00:09:5a:20:6d:22:a8:6c:51:a7:cf:c8:e7:46:
e7:20:39:d8:8a:58:55:11:27:cf:eb:65:f8:55:1a:ad:0c:fd:
af:4b:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:39:07 2025 by rpki-client