
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
File: 1396BBE630E811EEAE1F1212C4F9AE02.roa (raw, json)
Hash identifier: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=
Subject key identifier: 7F:D8:1F:A4:79:F8:63:4F:6A:6C:5C:F1:C9:C9:E3:BC:D3:71:6E:52
Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial: 0662
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
Signing time: Wed 08 Jan 2025 22:01:57 +0000
ROA not before: Wed 08 Jan 2025 22:01:57 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 198584
IP address blocks: 103.161.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 21:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1634 (0x662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Validity
Not Before: Jan 8 22:01:57 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677ef5d5-af69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:ba:3a:08:0b:8d:96:8f:75:e3:8a:e3:9b:
ae:64:95:43:b6:1e:00:0b:31:d3:db:c4:28:2f:65:
30:10:5c:3c:b5:27:65:53:f6:41:da:29:83:03:a6:
d2:27:91:95:b7:ef:45:ea:8f:93:c3:4e:58:c2:93:
1a:fd:6a:18:d8:df:29:f6:1b:a4:c7:04:bc:73:2b:
82:f0:70:9c:e0:53:29:73:50:a5:f1:3d:42:90:43:
c6:77:95:a6:4b:dd:87:ef:99:2d:4b:fc:aa:3e:88:
ec:95:0e:a7:15:c9:d2:73:ed:98:7e:d8:0c:6a:32:
f7:3d:af:df:34:45:55:d9:a1:e5:ca:f1:d6:6b:76:
f4:4e:d1:5a:a7:0a:c1:78:36:79:1d:4d:32:03:57:
e9:a7:0c:58:9a:a9:a5:aa:a7:06:ef:9f:14:9e:10:
4a:b7:2f:8a:e0:24:f1:8d:95:a7:5d:85:81:a9:ae:
10:4a:30:98:22:28:c1:10:b8:d9:ca:6b:ad:2f:83:
56:13:bf:f2:21:ce:50:89:1e:c3:a6:2e:ac:70:1b:
51:96:56:a1:0b:a8:43:1d:15:73:a1:f5:15:b1:55:
a0:c3:3f:e9:f7:af:e8:1e:8a:06:bb:22:a7:a4:f5:
33:2e:cd:59:44:7c:55:30:9e:fa:ce:57:46:1a:80:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D8:1F:A4:79:F8:63:4F:6A:6C:5C:F1:C9:C9:E3:BC:D3:71:6E:52
X509v3 Authority Key Identifier:
keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.34.0/23
Signature Algorithm: sha256WithRSAEncryption
58:1d:12:a9:6b:87:b6:05:f2:9c:bf:bc:74:8e:94:96:5b:a0:
5a:c3:e4:ec:30:bf:89:2e:f1:27:dc:53:0d:70:f9:88:2b:8a:
ee:d9:d3:e8:05:91:b7:be:0c:5b:c4:80:f0:e2:00:95:1e:b9:
2b:ee:25:68:9e:5f:3f:d6:cf:c7:2b:eb:c5:78:8b:d9:35:ec:
79:54:1a:33:0f:ea:44:eb:d2:50:c2:9b:0d:74:48:b8:30:8c:
e2:40:5a:c8:32:87:63:c8:8b:56:09:dc:07:b8:98:a2:02:14:
65:cc:2f:4f:38:c4:f3:06:4f:ec:16:93:30:6f:11:fa:a4:f5:
62:0a:80:bb:0f:ea:70:60:50:ce:26:02:50:b7:15:6b:c8:00:
ca:7e:f1:b8:3a:33:44:ab:55:70:2c:aa:62:62:d8:1f:23:95:
ca:97:01:98:c4:1d:d5:45:6b:e7:b4:58:19:62:e6:8a:b6:23:
94:41:8a:c9:d1:ba:68:28:58:90:c3:d1:05:9b:d3:bb:b4:a0:
46:f5:8d:3e:06:df:53:ef:5f:ac:e8:72:68:4c:ef:a8:be:40:
86:5f:26:98:41:c2:b1:68:46:7e:8d:c4:15:b6:bf:6c:e9:d4:
fb:91:98:22:f1:90:82:fa:b5:f8:ab:6b:17:f4:ee:e0:34:42:
11:ff:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:04:05 2025 by rpki-client