
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa
File: BB9C86EA0B0F11E89DF24170C4F9AE02.roa (raw, json)
Hash identifier: J1isGAaAC1N3wCHlklcmvvBBqBFgE12sIwzwgEuPOdA=
Subject key identifier: 27:DD:B4:83:05:A3:F2:E1:33:7B:11:20:22:A3:BD:F8:3F:8B:EA:79
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 18AD
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa
Signing time: Tue 04 Nov 2025 16:34:52 +0000
ROA not before: Tue 04 Nov 2025 16:34:52 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38719
IP address blocks: 103.101.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6317 (0x18ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Nov 4 16:34:52 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a2b2c-9db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:a7:6c:7b:b8:57:b5:df:a5:7f:70:4f:61:
2d:87:2d:0f:94:e6:b1:76:5c:ea:24:32:8c:85:33:
e7:77:e0:e6:bf:22:5b:d9:04:73:ad:be:69:62:ba:
40:da:75:cb:1d:1e:db:91:b1:12:97:07:17:f5:05:
29:48:27:0a:36:f5:13:a5:56:4c:b0:34:c2:60:30:
c9:b7:b7:2b:33:72:86:4c:0e:56:4c:a3:d1:40:b8:
78:eb:ad:58:0b:6f:bf:37:f0:ba:cd:7e:be:cb:b1:
b2:77:36:2b:81:ed:f7:47:17:60:49:08:f5:c9:a6:
1c:3c:8c:24:89:df:04:71:59:b9:01:9b:98:d1:e9:
c5:87:ed:2b:c5:e0:32:5a:2b:94:88:bd:32:0a:f3:
40:21:69:39:ca:aa:47:9a:ea:0b:90:f6:bd:3c:17:
98:7a:96:ed:a7:dd:42:de:80:5e:38:2f:47:71:15:
af:90:cb:a6:52:bf:97:15:39:90:2c:d1:6c:7f:d3:
33:5e:09:76:30:58:1b:eb:4a:b1:ea:19:3a:af:fe:
c3:bb:8b:1f:59:39:81:86:4d:e8:0d:19:c0:14:c9:
50:64:f7:fa:93:ba:9e:69:8a:80:d9:d8:61:a5:72:
18:35:69:e2:d8:f1:79:cc:e9:a7:7c:c6:bc:b1:e1:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DD:B4:83:05:A3:F2:E1:33:7B:11:20:22:A3:BD:F8:3F:8B:EA:79
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6d:61:7b:cd:74:91:70:12:b6:56:15:7e:c1:8d:8f:60:8f:
69:86:75:be:2a:3d:ae:cd:de:cf:26:55:0e:80:c7:49:39:ec:
c2:5d:c1:a3:c6:82:f8:43:8f:41:0f:c5:9d:90:5a:06:64:65:
f7:54:3e:67:cb:4e:da:60:62:7a:c3:ba:98:31:ba:ff:e9:90:
c4:23:7b:07:77:7e:15:96:e7:ff:a8:9b:2a:13:cf:f0:95:29:
8b:ca:d8:63:f4:e4:b7:63:b6:99:7e:bd:f6:d3:af:58:1d:c8:
d7:6b:bc:d7:88:6f:61:01:d8:d4:2c:38:fa:9f:aa:38:e2:d6:
5d:c5:69:df:a7:8e:16:6b:01:33:47:1b:1f:8c:52:3d:94:ba:
3a:a4:de:69:fe:b0:94:62:39:f0:a0:1e:1c:53:9d:6a:0a:33:
76:9f:d4:76:e5:9e:44:c1:9b:b8:14:d0:60:c4:7d:4d:bb:9a:
9b:3a:50:0f:09:5b:1d:f7:7c:7f:02:46:ab:44:13:e0:b7:e0:
f1:b7:25:11:51:33:81:5a:1d:61:05:f1:a2:3f:8d:20:59:58:
29:bb:03:bb:ed:7f:ee:24:31:fa:59:18:92:a3:01:b2:ef:5c:
a1:90:16:2b:df:cd:6b:ba:5f:f2:96:36:92:d9:10:47:c8:ee:
cd:66:7b:17
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw
MUNFM0Q5MDIwHhcNMjUxMTA0MTYzNDUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhMmIyYy05ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx7GnbHu4V7XfpX9wT2Ethy0PlOaxdlzqJDKMhTPnd+DmvyJb2QRzrb5pYrpA
2nXLHR7bkbESlwcX9QUpSCcKNvUTpVZMsDTCYDDJt7crM3KGTA5WTKPRQLh4661Y
C2+/N/C6zX6+y7GydzYrge33RxdgSQj1yaYcPIwkid8EcVm5AZuY0enFh+0rxeAy
WiuUiL0yCvNAIWk5yqpHmuoLkPa9PBeYepbtp91C3oBeOC9HcRWvkMumUr+XFTmQ
LNFsf9MzXgl2MFgb60qx6hk6r/7Du4sfWTmBhk3oDRnAFMlQZPf6k7qeaYqA2dhh
pXIYNWni2PF5zOmnfMa8seE/zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCfdtIMF
o/LhM3sRICKjvfg/i+p5MB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB
NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZCQ0YvNEFCNTc2QkVBQTVBMTFFN0FFNDM2RjMyQzRGOUFFMDIvQkI5Qzg2RUEw
QjBGMTFFODlERjI0MTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZfgwDQYJKoZIhvcNAQELBQADggEBAFltYXvNdJFwErZW
FX7BjY9gj2mGdb4qPa7N3s8mVQ6Ax0k57MJdwaPGgvhDj0EPxZ2QWgZkZfdUPmfL
TtpgYnrDupgxuv/pkMQjewd3fhWW5/+omyoTz/CVKYvK2GP05Ldjtpl+vfbTr1gd
yNdrvNeIb2EB2NQsOPqfqjji1l3Fad+njhZrATNHGx+MUj2Uujqk3mn+sJRiOfCg
HhxTnWoKM3af1HblnkTBm7gU0GDEfU27mps6UA8JWx33fH8CRqtEE+C34PG3JRFR
M4FaHWEF8aI/jSBZWCm7A7vtf+4kMfpZGJKjAbLvXKGQFivfzWu6X/KWNpLZEEfI
7s1mexc=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:28 2025 by rpki-client