
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa
File: C2BE71E8AA9A11E7B4776E52C4F9AE02.roa (raw, json)
Hash identifier: QilVeNcrZMzdebQdu5lhKwqK5efz8FDEbIZ0Q0oTuqk=
Subject key identifier: 2A:3B:A1:28:21:71:85:3F:65:03:6E:43:A6:F2:87:0D:10:22:D4:9A
Certificate issuer: /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial: 18AE
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa
Signing time: Tue 04 Nov 2025 16:34:53 +0000
ROA not before: Tue 04 Nov 2025 16:34:53 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9512
IP address blocks: 103.101.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 16:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6318 (0x18ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Validity
Not Before: Nov 4 16:34:53 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=690a2b2d-cb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:23:6a:83:5c:7f:2c:54:ff:70:1b:13:c5:36:
bc:f5:81:da:d4:62:7b:50:5f:1d:79:f4:0a:b1:6c:
38:30:50:c1:09:0d:35:41:6c:e1:7c:47:91:39:1c:
bd:13:c4:6b:cb:6f:73:1d:87:af:d1:d2:95:46:84:
67:cb:e7:41:ef:e2:3c:c1:b3:b2:65:78:f6:e1:29:
34:67:55:0d:a6:75:1e:84:aa:12:e0:0e:12:e2:98:
b5:3a:85:9e:c2:e4:e2:0c:d5:22:5b:ec:20:4b:a7:
10:a0:a4:42:85:12:26:e6:e1:d6:4d:cd:85:ce:97:
4e:68:38:4d:5c:17:07:c3:e1:be:8d:6d:11:4d:71:
05:37:af:6e:5a:94:80:4d:a7:68:d0:98:f5:81:9a:
bf:55:d4:77:f0:e6:31:3b:00:93:3f:16:d9:b3:e3:
ec:e2:a2:28:70:ea:18:29:d8:b0:14:ed:a1:8e:2c:
07:7a:29:22:27:d1:86:ce:5d:99:dd:0f:06:b7:18:
9c:6b:56:8c:e3:35:c3:0d:d1:5b:d3:31:43:a0:c6:
68:7d:d8:4e:28:ed:82:e5:6e:a7:e6:db:d9:cb:86:
bd:bc:ce:01:5f:98:60:8c:3a:40:03:e7:4c:54:d8:
7f:e0:d3:ef:b9:72:50:0b:c3:0f:81:52:e1:15:e6:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3B:A1:28:21:71:85:3F:65:03:6E:43:A6:F2:87:0D:10:22:D4:9A
X509v3 Authority Key Identifier:
keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/C2BE71E8AA9A11E7B4776E52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:6a:60:38:0c:ed:8f:75:fd:58:68:c8:19:9b:09:93:67:fc:
ed:b6:22:6f:9e:97:8b:63:2e:63:83:db:64:7f:17:1c:4e:79:
ff:49:4f:91:8b:09:4e:0a:83:1a:4c:f6:dd:f3:f8:4f:2e:2b:
84:63:7b:48:16:29:82:cf:de:36:ed:0a:db:52:85:80:f1:f8:
00:db:a9:bc:c7:2e:f5:ac:0d:d3:e9:3e:eb:1c:d8:cd:1d:4e:
e3:f7:4a:f3:24:eb:27:13:30:a4:e0:fa:75:d4:2a:d7:62:1d:
80:06:fb:e5:86:95:5d:ed:28:2f:46:bf:e2:42:ea:91:e9:b1:
46:f5:27:fa:c2:14:a1:8e:70:3a:c4:3f:82:e6:d2:4a:5a:77:
1a:2f:42:ca:76:b8:12:6e:0c:03:4b:e6:eb:d4:d4:81:75:de:
75:13:06:80:40:4c:b1:93:ef:66:89:8f:75:4e:d5:a2:27:7a:
67:16:16:45:66:d5:77:36:37:06:de:26:88:ac:d8:13:a9:78:
2d:53:b3:60:3f:a7:ef:42:97:cc:43:47:dc:e5:66:3f:96:a9:
db:e4:95:f8:8a:40:ed:20:70:f9:a8:f3:3e:6b:ef:97:f5:89:
14:8f:f3:b0:0a:72:f1:8f:96:bb:f6:90:3f:7a:c3:90:57:9e:
c1:fc:fb:7e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCQ0YxMTAvBgNVBAUTKDE4NzAwQ0IzRDY1MDdBMzMwNEJBRUIyNzBERUVEMTMw
MUNFM0Q5MDIwHhcNMjUxMTA0MTYzNDUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhMmIyZC1jYjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqyNqg1x/LFT/cBsTxTa89YHa1GJ7UF8defQKsWw4MFDBCQ01QWzhfEeRORy9
E8Rry29zHYev0dKVRoRny+dB7+I8wbOyZXj24Sk0Z1UNpnUehKoS4A4S4pi1OoWe
wuTiDNUiW+wgS6cQoKRChRIm5uHWTc2FzpdOaDhNXBcHw+G+jW0RTXEFN69uWpSA
Tado0Jj1gZq/VdR38OYxOwCTPxbZs+Ps4qIocOoYKdiwFO2hjiwHeikiJ9GGzl2Z
3Q8Gtxica1aM4zXDDdFb0zFDoMZofdhOKO2C5W6n5tvZy4a9vM4BX5hgjDpAA+dM
VNh/4NPvuXJQC8MPgVLhFeb3XQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCo7oSgh
cYU/ZQNuQ6byhw0QItSaMB8GA1UdIwQYMBaAFBhwDLPWUHozBLrrJw3u0TAc49kC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJDRi80QUI1NzZCRUFB
NUExMUU3QUU0MzZGMzJDNEY5QUUwMi9HSEFNczlaUWVqTUV1dXNuRGU3Uk1Cemoy
UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dIQU1zOVpRZWpNRXV1c25EZTdSTUJ6ajJRSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZCQ0YvNEFCNTc2QkVBQTVBMTFFN0FFNDM2RjMyQzRGOUFFMDIvQzJCRTcxRThB
QTlBMTFFN0I0Nzc2RTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZfgwDQYJKoZIhvcNAQELBQADggEBAApqYDgM7Y91/Vho
yBmbCZNn/O22Im+el4tjLmOD22R/FxxOef9JT5GLCU4KgxpM9t3z+E8uK4Rje0gW
KYLP3jbtCttShYDx+ADbqbzHLvWsDdPpPusc2M0dTuP3SvMk6ycTMKTg+nXUKtdi
HYAG++WGlV3tKC9Gv+JC6pHpsUb1J/rCFKGOcDrEP4Lm0kpadxovQsp2uBJuDANL
5uvU1IF13nUTBoBATLGT72aJj3VO1aInemcWFkVm1Xc2NwbeJois2BOpeC1Ts2A/
p+9Cl8xDR9zlZj+WqdvklfiKQO0gcPmo8z5r75f1iRSP87AKcvGPlrv2kD96w5BX
nsH8+34=
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:14 2025 by rpki-client