
$ rpki-client -vvf rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
File: 0B33A3D45C0411EC83F9BB50C4F9AE02.roa (raw, json)
Hash identifier: +vGM/9CgyibDa8IJ1wrnXBZP0xMzNOinRMgn92r9zxY=
Subject key identifier: 13:2C:9F:3A:B6:F7:2F:65:4E:55:20:92:81:16:8E:50:CA:F2:9A:58
Certificate issuer: /CN=A913339B/serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Certificate serial: 0490
Authority key identifier: D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
Signing time: Wed 29 Oct 2025 00:13:54 +0000
ROA not before: Wed 29 Oct 2025 00:13:54 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 10021
IP address blocks: 103.173.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913339B, serialNumber=D67BE2194DB8626A43D39ABFA7608FBC5ACCB523
Validity
Not Before: Oct 29 00:13:54 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69015c41-6835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:f2:d5:b5:57:b8:70:82:68:6b:54:5f:20:
78:6f:5c:21:ba:5c:db:24:4f:39:46:73:f0:7b:c9:
16:f1:c2:bc:b4:19:c0:76:26:d1:07:65:d5:15:c2:
c5:51:68:08:19:81:c8:1f:df:7e:71:d8:87:f1:71:
19:c3:8f:d9:a9:59:e4:2f:ab:49:d6:40:01:47:81:
66:10:83:90:4c:1e:f5:d1:49:33:3c:55:14:d0:9a:
ca:b7:e3:4e:87:36:3e:1a:e9:f6:be:68:79:db:4c:
86:9e:cb:b9:38:c5:9f:26:d0:c2:c5:ac:ca:9d:04:
df:43:af:e8:c6:a0:2d:f8:50:7e:d3:57:b8:c0:27:
5f:30:c2:76:89:d3:6e:94:09:75:a2:98:0a:9e:ae:
a2:b4:c6:70:60:6e:cf:5f:6d:29:db:7e:3b:f6:4a:
c3:ef:a7:a8:5c:76:33:3c:22:9f:cf:ad:21:7a:07:
da:fd:14:a3:7c:aa:1d:3b:d8:55:84:fc:97:ac:6a:
df:5c:9c:24:1f:4f:e6:7e:16:c4:6a:26:67:eb:2b:
70:b4:70:a7:0e:09:53:56:fa:3f:61:94:ee:65:01:
f1:1c:16:29:76:99:7e:45:95:1a:b4:15:b1:3b:4e:
86:40:a0:1f:3f:b2:4e:5a:55:bf:61:43:a0:71:17:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:9F:3A:B6:F7:2F:65:4E:55:20:92:81:16:8E:50:CA:F2:9A:58
X509v3 Authority Key Identifier:
keyid:D6:7B:E2:19:4D:B8:62:6A:43:D3:9A:BF:A7:60:8F:BC:5A:CC:B5:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/1nviGU24YmpD05q_p2CPvFrMtSM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nviGU24YmpD05q_p2CPvFrMtSM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913339B/D4F3F0B05C0011EC9B23134DC4F9AE02/0B33A3D45C0411EC83F9BB50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0d:48:ce:8b:85:cf:d0:67:ed:5a:45:a4:83:b1:62:0c:12:
d1:55:86:bd:a8:30:06:1f:25:44:a9:99:56:6b:fe:fc:94:86:
04:aa:62:31:c9:77:1a:9f:45:89:49:33:ba:95:61:75:33:a0:
11:aa:b3:4f:35:85:65:08:aa:bb:f5:0b:29:6e:de:10:c1:25:
fe:3b:73:7e:b9:af:50:99:85:0d:8d:1a:af:f5:64:58:c4:fc:
6d:1c:30:1b:29:69:eb:d6:d9:df:35:23:db:03:cf:2d:ba:60:
61:31:0d:fa:50:1a:bb:e9:1d:cd:84:77:e3:b8:80:9a:c9:a5:
0c:e2:57:27:de:31:2c:2d:81:88:dc:ab:f4:60:75:06:ab:21:
1e:84:66:61:42:8e:c8:19:15:a1:4d:87:be:af:91:30:1e:da:
b2:b6:1e:92:11:e8:b8:06:ab:58:1d:64:fd:1d:0a:a0:a2:0b:
3a:72:35:78:cf:40:a2:1f:34:36:f9:44:5b:30:c3:a8:c5:c7:
12:ed:1f:00:ba:53:4b:8b:0f:51:ee:85:36:f5:41:85:30:26:
31:9e:69:8c:3e:80:67:d6:56:1f:3e:b0:99:02:d6:59:b5:41:
af:dc:78:29:9c:63:b6:7b:65:72:d7:ea:e9:24:dd:a5:d2:66:
65:6d:fc:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzMzOUIxMTAvBgNVBAUTKEQ2N0JFMjE5NERCODYyNkE0M0QzOUFCRkE3NjA4RkJD
NUFDQ0I1MjMwHhcNMjUxMDI5MDAxMzU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAxNWM0MS02ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqzny1bVXuHCCaGtUXyB4b1whulzbJE85RnPwe8kW8cK8tBnAdibRB2XVFcLF
UWgIGYHIH99+cdiH8XEZw4/ZqVnkL6tJ1kABR4FmEIOQTB710UkzPFUU0JrKt+NO
hzY+Gun2vmh520yGnsu5OMWfJtDCxazKnQTfQ6/oxqAt+FB+01e4wCdfMMJ2idNu
lAl1opgKnq6itMZwYG7PX20p23479krD76eoXHYzPCKfz60hegfa/RSjfKodO9hV
hPyXrGrfXJwkH0/mfhbEaiZn6ytwtHCnDglTVvo/YZTuZQHxHBYpdpl+RZUatBWx
O06GQKAfP7JOWlW/YUOgcReLCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMsnzq2
9y9lTlUgkoEWjlDK8ppYMB8GA1UdIwQYMBaAFNZ74hlNuGJqQ9Oav6dgj7xazLUj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzM5Qi9ENEYzRjBCMDVD
MDAxMUVDOUIyMzEzNERDNEY5QUUwMi8xbnZpR1UyNFltcEQwNXFfcDJDUHZGck10
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFudmlHVTI0WW1wRDA1cV9wMkNQdkZyTXRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzMzOUIvRDRGM0YwQjA1QzAwMTFFQzlCMjMxMzREQzRGOUFFMDIvMEIzM0EzRDQ1
QzA0MTFFQzgzRjlCQjUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnre0wDQYJKoZIhvcNAQELBQADggEBAKYNSM6Lhc/QZ+1a
RaSDsWIMEtFVhr2oMAYfJUSpmVZr/vyUhgSqYjHJdxqfRYlJM7qVYXUzoBGqs081
hWUIqrv1Cylu3hDBJf47c365r1CZhQ2NGq/1ZFjE/G0cMBspaevW2d81I9sDzy26
YGExDfpQGrvpHc2Ed+O4gJrJpQziVyfeMSwtgYjcq/RgdQarIR6EZmFCjsgZFaFN
h76vkTAe2rK2HpIR6LgGq1gdZP0dCqCiCzpyNXjPQKIfNDb5RFsww6jFxxLtHwC6
U0uLD1HuhTb1QYUwJjGeaYw+gGfWVh8+sJkC1lm1Qa/ceCmcY7Z7ZXLX6ukk3aXS
ZmVt/K4=
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:27:43 2025 by rpki-client