
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa
File: 804B03560A7211EE8FA2CD58C4F9AE02.roa (raw, json)
Hash identifier: +4X61DthcWz4IP6DOyrL7Yd1Zc+RFVYAukm8M+MD8hs=
Subject key identifier: 1C:D5:C5:3A:6D:F4:70:09:C1:C0:2E:A2:D5:2F:37:B7:62:0E:33:86
Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Certificate serial: 036C
Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa
Signing time: Thu 01 May 2025 00:36:45 +0000
ROA not before: Thu 01 May 2025 00:36:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138398
IP address blocks: 103.185.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876 (0x36c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70
Validity
Not Before: May 1 00:36:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6812c21d-6cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:cd:eb:6a:af:80:4c:a7:15:9c:c4:c3:4d:
ad:fa:2c:8b:c4:23:a2:be:02:e0:92:96:88:c1:ee:
19:af:56:31:6a:82:d4:e5:9b:b1:da:ca:1b:23:67:
59:00:ce:f4:70:74:57:b6:df:d8:9e:46:fb:16:ad:
b0:f6:0a:51:ad:02:ff:88:9e:8a:b9:df:6c:51:dc:
7a:a2:61:ee:2b:8e:26:88:64:d7:e2:95:fe:a9:5a:
84:5c:84:7c:32:b6:a6:81:32:ec:4e:5f:92:94:f3:
17:08:ad:34:bb:b3:17:6e:29:f4:b3:89:76:6c:ea:
be:80:0a:31:d5:92:f9:af:f3:1b:bf:78:e8:e9:49:
7f:42:57:63:6b:78:3a:86:e2:22:cf:45:d9:46:12:
1d:ac:d5:cf:0f:b6:23:52:1e:06:5f:07:59:97:f0:
34:26:95:78:ea:95:1a:c2:66:6e:2f:af:9c:3a:8a:
55:f5:31:8a:1d:a7:3e:fa:0f:b5:1f:49:a7:d2:52:
d0:57:8a:91:0c:90:7a:1c:06:54:4f:06:24:55:00:
52:09:c9:b2:1c:5c:11:de:33:bb:81:25:bc:bb:01:
70:48:3d:c1:11:e0:2e:56:1a:c4:e9:27:82:0e:f3:
61:37:ed:0f:46:f4:24:2b:98:8a:f2:af:2f:d6:32:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:C5:3A:6D:F4:70:09:C1:C0:2E:A2:D5:2F:37:B7:62:0E:33:86
X509v3 Authority Key Identifier:
keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/804B03560A7211EE8FA2CD58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.22.0/24
Signature Algorithm: sha256WithRSAEncryption
09:08:6f:80:2d:45:09:cd:2f:5f:ce:c0:51:89:48:7f:23:1a:
cb:ed:8c:99:25:ac:39:91:87:cc:95:72:f8:d6:2e:0c:21:a6:
a1:dd:26:2a:32:7f:98:99:6a:24:78:4a:9a:f2:52:85:4a:41:
75:7e:c2:ff:63:36:3f:49:76:83:87:13:ee:80:36:04:16:84:
d5:7d:72:ae:4b:f4:dc:62:6c:17:b5:9c:dc:40:24:cc:bf:1f:
50:7e:8b:f2:b5:cf:3c:af:cb:a2:04:de:25:6a:fa:08:b5:6a:
17:62:d2:1d:29:d2:f7:94:54:06:e1:99:ab:84:d0:32:44:57:
9f:8c:ea:5f:4a:ff:d9:b7:e0:42:94:59:7d:1c:0e:18:e2:be:
dd:90:1c:da:39:99:51:78:37:8e:89:a6:bf:6d:98:f0:08:13:
a8:89:52:3e:da:3a:67:f1:47:37:76:d3:cb:90:d4:52:03:9b:
20:4f:ca:99:95:44:be:61:7d:9b:30:c4:11:0a:46:42:e6:a0:
cf:f4:dd:43:02:42:54:9e:93:ee:79:f8:f5:94:29:a3:30:39:
66:e2:63:fe:7b:9f:8d:40:28:2e:67:41:7f:12:53:72:16:be:
33:93:c0:19:e5:4c:3c:d9:d9:c0:4e:b4:6c:35:5d:44:9c:b5:
66:22:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:59:20 2025 by rpki-client