
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/7A88B1FCB44311F09019B577C4F9AE02.roa
File: 7A88B1FCB44311F09019B577C4F9AE02.roa (raw, json)
Hash identifier: iVlZdF400YE1svBZYfuYRDCRkAx2sa2lS4bS/VqGffg=
Subject key identifier: 0A:5E:65:5A:E8:D0:27:54:C5:EE:BF:FA:E0:CD:CF:46:7D:F7:70:0C
Certificate issuer: /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
Certificate serial: 051D
Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/7A88B1FCB44311F09019B577C4F9AE02.roa
Signing time: Tue 28 Oct 2025 21:17:16 +0000
ROA not before: Tue 28 Oct 2025 21:17:16 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 216047
IP address blocks: 103.255.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl
rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
Validity
Not Before: Oct 28 21:17:16 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=690132dc-011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:3f:6f:21:41:18:de:ad:08:85:1b:24:e8:
ba:60:3f:46:57:3c:b1:0c:74:04:f5:f1:5f:11:8d:
2d:c5:c7:e8:1b:ed:fd:1e:fc:a2:ac:54:17:e9:8b:
59:95:fa:69:d1:10:9a:35:f4:b0:c3:c8:a8:95:6a:
ec:e2:fa:11:ef:b9:74:b5:3a:c9:82:4f:a4:f1:69:
00:f2:4a:5a:7d:0d:1b:72:9a:84:bc:56:b1:18:7a:
aa:65:ee:3d:2c:a6:45:59:ec:3e:0f:40:23:f0:9f:
02:c2:2c:5f:b7:93:67:17:21:b0:71:8c:15:b8:81:
35:ad:e4:88:7e:a7:74:97:3e:eb:95:03:83:fb:46:
56:5d:1b:9b:a8:83:98:6c:ce:50:e0:18:34:a0:c8:
48:b8:1f:55:78:21:aa:bc:68:26:d2:ad:20:6c:a3:
09:0e:9d:bb:f9:8b:45:95:d5:3d:d5:71:be:53:b4:
96:51:2c:16:df:ed:0b:ce:59:67:6a:c5:44:4a:8f:
38:fe:d5:61:8d:7c:c4:c5:d9:88:6c:b3:17:7c:38:
4f:c1:97:da:9d:69:f9:5b:b5:12:bc:aa:19:44:db:
10:af:45:06:03:66:b0:09:00:95:f0:bf:c2:b8:73:
0f:1c:68:20:6d:aa:84:28:d8:1e:b6:7f:16:e2:30:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5E:65:5A:E8:D0:27:54:C5:EE:BF:FA:E0:CD:CF:46:7D:F7:70:0C
X509v3 Authority Key Identifier:
keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/7A88B1FCB44311F09019B577C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.58.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:e5:3f:49:7d:54:7c:41:f8:e7:0a:73:0b:b5:6e:9e:5c:54:
1d:c3:6e:cc:97:ec:cd:f1:1e:47:0d:d3:17:83:e0:b2:ff:af:
20:49:b5:6b:1e:93:ff:97:f7:42:6b:82:1b:dd:c1:4a:1d:ea:
50:ce:b7:d3:88:56:5e:ec:7c:ff:28:01:db:df:97:b4:7e:b9:
0f:7a:ef:52:29:dc:c0:7f:77:5f:b1:85:cf:d4:37:e9:70:01:
0b:0b:b7:30:4c:18:4b:d4:28:ab:c9:0f:b4:e4:b3:51:51:c2:
1d:8f:9a:83:d3:ff:2f:7c:15:6a:96:fe:cc:03:a2:8b:b9:95:
5b:7c:04:a4:28:26:ea:2d:b9:5b:57:9b:43:3b:96:eb:15:01:
cc:1b:2f:a1:0d:e6:d7:aa:04:e1:f6:65:d3:ce:17:1c:db:82:
d1:16:38:54:2d:b9:9b:6c:b2:cd:4f:be:24:d3:74:ec:85:e8:
48:ee:52:b4:28:7b:7e:90:f7:e6:99:da:7e:19:fc:5c:90:cd:
df:3e:46:b7:f6:f2:5a:93:21:2c:8d:a2:3d:b2:90:1c:52:28:
91:20:46:2a:a3:fd:b9:be:96:c2:26:12:31:b8:d0:8d:04:19:
a4:43:7b:20:8c:01:43:e8:82:c2:4f:af:ed:cc:07:57:7c:fd:
c9:3a:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:21 2025 by rpki-client