
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D226E012A4EA11ECA8C4D151C4F9AE02.roa
File: D226E012A4EA11ECA8C4D151C4F9AE02.roa (raw, json)
Hash identifier: LegWRIHcFoKxOTl/RoZPTqnhGh7caDlHuymj8lMlN4w=
Subject key identifier: 3F:3C:9B:07:F7:D1:78:98:FF:6C:AB:66:B3:9B:36:68:D0:31:56:9D
Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial: 03CC
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D226E012A4EA11ECA8C4D151C4F9AE02.roa
Signing time: Fri 05 Sep 2025 01:06:58 +0000
ROA not before: Fri 05 Sep 2025 01:06:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4755
IP address blocks: 103.121.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972 (0x3cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Validity
Not Before: Sep 5 01:06:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68ba37b2-b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:f5:51:45:e6:70:fc:4a:aa:86:71:3a:a3:
78:87:7e:01:30:2b:0c:a0:3c:1b:e0:2b:ca:57:d5:
c0:5d:aa:b9:80:82:93:b9:0d:b1:45:66:1f:21:58:
36:a0:06:0c:95:61:aa:15:bf:12:a7:e5:f5:d3:5f:
f5:f6:1d:d6:27:8e:4c:07:b9:7e:a7:8d:0b:19:a8:
0d:58:27:f3:d0:4f:b0:d0:ea:a2:c9:3b:9a:10:44:
ec:00:77:e4:ad:f4:00:0d:14:d4:c1:c6:e5:b1:77:
5f:07:8d:4d:c6:de:e8:85:22:cf:ae:bf:aa:a0:49:
e9:49:2e:24:e9:ee:7b:cc:ce:37:a4:25:dd:59:60:
8a:78:c4:57:ed:17:aa:1e:45:79:e7:3e:cd:89:32:
1c:91:a7:65:53:cd:d5:b3:b9:45:84:0a:02:f1:2f:
a9:4f:b8:25:8c:05:bb:c2:61:54:62:c9:80:f6:26:
79:30:cc:38:31:0c:d0:86:b8:be:3d:5d:e0:39:fc:
19:60:bd:ff:cb:63:24:c8:74:46:64:83:b4:a9:0f:
c7:fc:8b:c7:21:7f:15:6c:81:dc:1b:c6:ce:8d:a9:
65:79:c4:36:bb:58:5b:ee:22:0b:1b:b5:f4:ee:5a:
29:df:ca:07:5a:50:08:a7:13:1a:c6:22:04:17:a9:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:9B:07:F7:D1:78:98:FF:6C:AB:66:B3:9B:36:68:D0:31:56:9D
X509v3 Authority Key Identifier:
keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D226E012A4EA11ECA8C4D151C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b0:11:e1:46:4b:57:65:b1:b1:f3:32:b4:a3:c7:ab:3f:fd:
c6:6f:ce:9d:86:88:2e:65:ab:5f:67:54:e3:f6:09:ee:b7:fb:
77:c6:51:31:a1:ce:ac:db:85:48:1b:e0:64:73:cd:28:13:93:
0d:ca:04:92:c8:de:ff:63:08:3e:c2:40:0f:b6:90:e9:9d:70:
8c:ab:f7:83:bc:bf:a5:f3:08:3e:39:43:32:36:32:ce:00:22:
d5:e6:04:47:2a:f9:d6:2c:b6:ee:75:e9:b5:1e:49:58:ec:d5:
2c:08:dd:0c:c2:42:4c:48:52:ce:82:fb:e3:c4:ba:f1:4f:fc:
7c:ba:5a:55:17:e9:68:95:5b:23:34:01:8d:1b:89:d1:ab:f7:
48:6e:5c:45:d4:e1:69:94:4a:e4:cc:31:6a:c1:3d:bf:40:c1:
09:c8:e1:17:df:08:ac:1b:10:9c:f5:1c:c7:3e:51:c0:fc:6d:
ba:f3:7f:bf:f5:e9:1b:7e:2a:d5:e8:c2:ec:b5:e1:1e:12:b1:
03:06:16:8c:88:a4:18:3b:40:1e:40:85:36:f5:5a:73:96:18:
8b:39:f1:22:4c:1e:aa:a3:98:0c:9c:62:61:f0:6d:4b:65:2c:
fe:03:6d:ea:ae:d6:e1:07:bb:51:eb:59:85:79:e3:13:7a:be:
4b:f5:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:02:04 2025 by rpki-client