
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/F3ABAB8E67B811F0976F6A50C4F9AE02.roa
File: F3ABAB8E67B811F0976F6A50C4F9AE02.roa (raw, json)
Hash identifier: uRR/m+p39oHAi/sHNgk1sFfUujjCt9edvKbA8+8v5fk=
Subject key identifier: 78:3D:27:6D:F2:97:C4:CD:C1:9E:49:E7:1A:AD:67:00:DB:3F:D5:7F
Certificate issuer: /CN=A913B6D4/serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Certificate serial: 0666
Authority key identifier: 0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/F3ABAB8E67B811F0976F6A50C4F9AE02.roa
Signing time: Wed 23 Jul 2025 11:34:11 +0000
ROA not before: Wed 23 Jul 2025 11:34:11 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 48024
IP address blocks: 103.197.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B6D4, serialNumber=0D5028986A356B69B4AF7D2F6649D6BBDCBE8BED
Validity
Not Before: Jul 23 11:34:11 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6880c8b3-1d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:4e:12:b9:18:b7:63:2e:59:13:ba:d6:4e:
1d:e5:76:20:16:5c:c6:7c:81:f2:d6:c8:b8:57:d9:
05:f4:a7:17:50:66:03:29:6a:87:6f:78:bb:52:fe:
4d:fe:67:27:06:bb:ec:4b:41:b3:aa:d6:37:9e:2e:
59:8b:5b:fd:c5:b3:07:a1:82:43:fa:ca:f4:cf:75:
ab:d4:fc:06:16:b5:05:5e:fc:f6:3b:20:74:72:be:
be:d4:fb:9f:17:3b:b2:f2:18:78:c2:dc:03:43:11:
dd:e2:b3:03:7e:34:90:e1:f8:51:34:ea:05:00:fc:
21:3c:a3:b7:a8:be:17:47:ec:5d:f6:e2:e9:f3:2c:
4e:84:34:9d:21:47:c5:a3:b5:54:fe:d7:aa:ea:55:
e7:95:4c:cf:6d:9e:3c:88:97:67:bf:b9:fc:51:4d:
51:4e:3a:17:01:d5:62:92:9b:23:4d:c5:05:d2:d8:
ee:82:0b:3e:35:26:b3:f0:f4:e8:0b:85:c9:86:1b:
56:11:d6:71:94:a6:bb:b5:4d:03:c7:25:d5:d4:c6:
00:6f:b0:84:c4:21:37:c0:b9:80:eb:e5:ad:cc:2b:
d0:be:bb:07:85:9b:93:e1:17:e2:71:7c:83:a2:32:
03:3a:ae:05:87:f8:47:6a:44:99:a2:82:d1:f1:d5:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3D:27:6D:F2:97:C4:CD:C1:9E:49:E7:1A:AD:67:00:DB:3F:D5:7F
X509v3 Authority Key Identifier:
keyid:0D:50:28:98:6A:35:6B:69:B4:AF:7D:2F:66:49:D6:BB:DC:BE:8B:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/DVAomGo1a2m0r30vZknWu9y-i-0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVAomGo1a2m0r30vZknWu9y-i-0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B6D4/957253689E7911EB8F7A4487C4F9AE02/F3ABAB8E67B811F0976F6A50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.197.68.0/22
Signature Algorithm: sha256WithRSAEncryption
20:38:ec:8e:8d:51:54:29:d0:07:c4:cf:75:ad:b5:f5:46:89:
80:61:db:a0:9e:9b:f9:5b:34:ea:98:d5:f3:1a:44:3c:c2:b1:
1d:99:ec:32:ba:2f:50:91:2e:31:aa:65:b0:08:b6:04:06:b0:
e8:4c:ba:19:92:a5:2b:81:7a:58:71:5f:92:06:c7:ae:72:69:
eb:a5:70:5e:c3:4a:12:74:ca:3e:f8:34:70:9d:1f:a2:f4:d7:
7d:16:42:42:18:99:83:2f:a3:08:a2:97:bf:db:b5:88:10:9a:
a3:45:42:2c:64:2f:98:1e:e9:4a:ff:04:ef:69:56:f8:7d:8e:
9a:0e:36:4c:b1:84:d9:f2:3e:ef:75:ba:ef:7e:3d:f0:79:17:
22:4e:65:e9:bc:a2:0b:2f:0c:6b:8e:00:d1:1f:d9:84:8f:85:
44:57:33:9a:7a:87:8a:74:10:b7:24:af:8a:8c:10:c4:fb:0f:
ff:f1:2b:2f:81:ed:e9:ac:39:09:8e:4a:b3:35:8a:e4:32:c1:
be:e4:41:6d:c4:80:1e:76:79:f8:b4:a0:42:d8:8b:7d:b4:48:
e9:2b:35:d5:35:9b:13:8c:37:ce:1b:e7:91:b9:30:c3:92:b2:
2f:2e:47:6f:6b:81:9e:ce:2d:26:1b:9b:99:c9:70:9a:cc:81:
94:b2:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:31 2025 by rpki-client