
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
File: B69382D2CCC911EBB3A3513CC4F9AE02.roa (raw, json)
Hash identifier: HE6I/F13bN4XohmVDBqxBCGNwt3v/V2iNwzXes290uY=
Subject key identifier: 87:83:1B:C9:CA:7E:81:F0:C1:6F:4A:4F:BF:8B:25:A5:AB:4F:1D:94
Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial: 05DC
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
Signing time: Mon 28 Jul 2025 23:35:31 +0000
ROA not before: Mon 28 Jul 2025 23:35:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55567
IP address blocks: 103.1.7.0/24 maxlen: 24
103.231.159.0/24 maxlen: 24
103.231.168.0/23 maxlen: 24
202.61.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1500 (0x5dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Validity
Not Before: Jul 28 23:35:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68880943-4049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:25:98:63:84:6f:63:9a:a8:dc:cf:78:39:
ee:4c:4b:be:45:af:2a:f3:5d:ca:ea:e4:0d:ea:24:
9b:29:63:21:56:03:ee:a3:47:90:f0:1a:56:8c:08:
85:ba:9a:53:e0:6b:89:1e:2b:b7:f9:47:55:6e:68:
1b:3b:6f:ee:51:46:50:e3:33:63:a2:9e:35:4e:36:
2f:e0:49:92:f2:57:b3:64:4e:bd:73:ee:50:85:a3:
0b:8d:80:00:0a:77:41:fe:f6:7c:a6:98:d9:f4:74:
d9:d2:be:02:14:b2:57:53:19:25:8f:d2:1c:dd:cf:
63:48:51:ab:a3:2d:f3:59:40:75:8e:d0:69:a2:16:
d1:50:df:29:3a:a9:81:71:3c:a6:ff:e6:86:0b:c9:
f3:69:15:fd:a4:90:c9:ce:74:f4:ec:ec:6e:e3:71:
3b:75:3e:ec:f4:d5:70:86:66:bc:81:2a:16:80:14:
7c:6b:30:49:f2:41:9c:4e:61:42:f7:62:00:97:01:
8c:61:e0:ae:a2:10:05:54:3f:f1:25:02:46:c0:78:
52:9b:01:eb:49:db:32:96:17:b3:ae:32:0f:b2:b0:
42:98:f4:6c:2a:76:68:ca:93:a0:ff:06:36:60:c8:
d8:7b:d4:d0:85:d8:fb:f5:f6:60:9b:12:99:60:c6:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:1B:C9:CA:7E:81:F0:C1:6F:4A:4F:BF:8B:25:A5:AB:4F:1D:94
X509v3 Authority Key Identifier:
keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.1.7.0/24
103.231.159.0/24
103.231.168.0/23
202.61.122.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f5:e8:35:38:a1:28:11:9a:51:cd:87:b7:27:31:2f:bf:62:
03:fc:89:a4:71:1d:84:90:9f:19:0e:02:2b:b3:a7:6f:d9:71:
0e:13:c0:77:8e:89:3a:2c:f6:3a:18:35:8c:0a:a1:42:a2:29:
74:28:27:95:25:1a:29:59:04:58:9b:50:ca:43:13:0c:8e:9c:
80:38:a1:14:bb:dd:49:7d:c2:8c:08:2b:9b:df:69:19:94:ad:
07:69:0e:20:8d:57:70:fb:07:5f:4e:0c:ae:ed:ee:46:02:08:
19:cf:40:8d:16:ca:79:92:68:fd:9e:0c:37:49:7e:3e:20:de:
34:85:73:94:88:b5:09:0e:fe:63:6c:36:f7:0b:b4:ff:96:a7:
77:33:80:d0:20:41:09:fc:1e:8b:bd:91:a8:9e:08:f9:3f:42:
63:ac:ad:06:f9:3b:30:9c:2b:26:50:d6:0c:b7:2c:18:14:d7:
78:b9:e6:29:17:1c:ef:9c:b8:26:55:94:25:33:a3:f1:f2:91:
dc:b0:90:17:2e:47:95:17:cd:42:7c:63:52:69:1b:a7:82:89:
f2:2c:83:aa:e6:97:da:40:e0:e0:9f:d4:66:6a:08:b2:7d:26:
d9:78:fb:ac:5d:8b:ba:0f:8b:e7:76:e3:e0:43:d2:77:4b:a0:
23:fa:ef:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:38 2025 by rpki-client