
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
File: 311647C0896C11EBA85B0747C4F9AE02.roa (raw, json)
Hash identifier: MVtlwW2sU7CkBdehjteFY61IQnaVOAPQQ+etloBMPo4=
Subject key identifier: AF:36:F5:EA:CA:3D:F8:ED:23:8F:F9:2F:80:D6:31:B9:55:A9:D0:8F
Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial: 096A
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
Signing time: Fri 18 Jul 2025 20:30:48 +0000
ROA not before: Fri 18 Jul 2025 20:30:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132290
IP address blocks: 103.140.82.0/23 maxlen: 24
2001:df0:b380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2410 (0x96a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Validity
Not Before: Jul 18 20:30:47 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=687aaef7-8802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:43:c3:27:56:9d:77:98:36:c4:84:50:61:
59:e1:bb:d8:54:b3:8f:06:51:96:f7:17:29:f9:33:
bc:35:81:96:a5:a9:3e:82:ca:78:f0:70:cc:14:fe:
07:d3:1e:b9:e5:04:2b:cb:c6:10:9d:9b:ab:c3:4c:
ea:73:39:f2:ea:d7:bc:3e:49:c3:be:fd:91:43:54:
bd:91:b5:f4:a6:20:84:5d:b1:c4:7f:66:a1:98:1c:
14:1c:3b:4c:98:b4:5f:6b:8f:4a:e7:a6:4e:a7:07:
93:ff:6a:ea:30:9f:91:99:51:c1:03:e2:f1:8d:37:
67:08:45:fb:01:0a:54:4e:9c:dc:f2:8c:0c:5b:0f:
cd:b0:71:18:fb:48:ef:e5:4b:f0:40:3f:aa:58:fc:
70:f6:5f:8f:28:95:d9:15:d0:6d:6a:f1:e7:d8:fe:
a4:86:4e:2e:67:19:81:90:d0:bb:34:12:f5:5a:98:
72:fd:8a:ab:d7:92:b8:ee:ca:cf:06:98:20:7f:3f:
64:66:bd:f1:b3:dd:29:b5:c9:6c:3b:d0:53:33:a6:
1e:89:8f:26:e6:b8:64:c5:68:47:65:73:4a:e6:c7:
6d:28:09:8b:f4:d4:af:65:5e:53:ef:72:2a:21:19:
cb:8a:3d:19:b3:67:29:91:2f:eb:65:f0:84:fd:fc:
79:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:F5:EA:CA:3D:F8:ED:23:8F:F9:2F:80:D6:31:B9:55:A9:D0:8F
X509v3 Authority Key Identifier:
keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.82.0/23
IPv6:
2001:df0:b380::/48
Signature Algorithm: sha256WithRSAEncryption
94:e3:0f:01:ed:2f:04:45:9e:54:d7:7b:0d:bd:ad:e6:73:73:
2c:54:10:9b:d8:17:27:d7:97:e3:d0:24:e8:6e:1f:19:c9:29:
2e:d0:d2:61:45:2b:24:9b:61:c2:df:cf:24:11:ec:20:54:eb:
54:b2:2a:3b:4a:27:a3:c1:a6:81:29:bb:e0:25:6a:8e:30:b1:
82:66:3d:47:f4:d3:11:c9:77:4e:f5:bd:51:0b:84:10:98:ac:
91:02:13:ca:60:2c:4b:f6:fd:a6:a1:57:e9:9b:51:44:4e:07:
ef:8d:e5:6c:75:e4:6d:cd:e2:ed:f3:04:85:b3:d7:67:ad:64:
e4:32:d8:1d:00:b7:c6:59:e5:13:2a:0a:f0:0d:75:f1:8d:3d:
3a:5d:81:28:50:2d:c4:31:bf:1e:1f:a3:58:e9:34:6f:af:31:
44:db:ad:df:67:2e:34:08:db:67:73:ec:b8:82:c0:8d:4f:67:
64:dd:db:17:8c:80:b8:77:b4:0f:7a:d2:1e:96:a3:fe:48:cd:
6d:e7:73:3b:ca:55:ff:29:21:e4:3e:e2:be:06:86:d3:0c:9a:
a7:9b:53:03:24:a2:80:36:be:1c:8b:bf:e1:c6:7e:7a:7c:f9:
ec:4f:5e:9a:a4:56:06:63:9c:f6:73:9e:dd:59:c0:ff:ea:a1:
e8:e0:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:15:39 2025 by rpki-client