
$ rpki-client -vvf rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/B8B720BEF9EF11EDA3C9C234C4F9AE02.roa
File: B8B720BEF9EF11EDA3C9C234C4F9AE02.roa (raw, json)
Hash identifier: RiYKggVueinAfkkm1CWWkBP9HAijB4Cuv9DZ3Kk07P4=
Subject key identifier: B0:4E:08:1C:B6:AC:68:83:45:C4:EF:C2:84:95:49:0B:64:A3:3C:B1
Certificate issuer: /CN=A913BBE6/serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Certificate serial: 0653
Authority key identifier: 93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/B8B720BEF9EF11EDA3C9C234C4F9AE02.roa
Signing time: Thu 30 Oct 2025 22:43:11 +0000
ROA not before: Thu 30 Oct 2025 22:43:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 132042
IP address blocks: 103.5.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913BBE6, serialNumber=9359DD2E1214EB6BA5622AB3C80B6A9216680CCC
Validity
Not Before: Oct 30 22:43:11 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6903e9ff-a2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:d2:44:15:36:40:95:5c:b2:58:ca:ed:4f:
24:e1:b9:5f:85:7c:6d:6e:e2:33:b1:28:17:c1:b7:
47:f5:35:f2:2d:d6:2a:4b:5b:34:5f:39:ad:7f:3f:
4d:35:1c:72:f8:4f:08:47:af:fe:1f:95:8d:e8:97:
98:41:ae:db:f2:e3:ef:d3:e5:f1:1f:cb:0f:3b:2f:
32:cc:24:19:ef:f2:23:f9:45:45:1f:3e:41:38:01:
1e:ee:a7:d9:01:c4:ef:ee:4a:89:36:9d:cd:7c:37:
47:9d:c9:61:4e:85:15:ce:92:00:3e:f6:de:4c:11:
42:ca:bc:6a:39:a0:54:a9:08:fc:9f:6b:c9:e9:d6:
a9:6c:cd:ea:62:5e:53:65:fe:48:d0:18:af:5c:d8:
dc:72:24:d1:2d:6a:91:23:04:cf:66:a5:35:a5:74:
33:f6:63:f5:c1:e4:dd:48:b5:c8:a5:b1:0e:fe:cb:
fb:55:fd:63:f4:05:f4:f6:63:ee:8b:19:11:65:21:
16:42:b7:6c:be:4e:30:d4:6c:44:d2:e3:53:a2:03:
90:c8:1a:b6:9d:91:0f:31:0e:92:c0:5d:50:0e:8f:
ee:d0:31:50:01:17:c3:9c:d1:df:11:d0:24:2e:7c:
95:49:b7:58:90:1c:1c:e9:c7:9f:b1:24:87:1e:0e:
a7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:08:1C:B6:AC:68:83:45:C4:EF:C2:84:95:49:0B:64:A3:3C:B1
X509v3 Authority Key Identifier:
keyid:93:59:DD:2E:12:14:EB:6B:A5:62:2A:B3:C8:0B:6A:92:16:68:0C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/k1ndLhIU62ulYiqzyAtqkhZoDMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k1ndLhIU62ulYiqzyAtqkhZoDMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BBE6/A097F0D4AD3011EBB127B623C4F9AE02/B8B720BEF9EF11EDA3C9C234C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.224.0/22
Signature Algorithm: sha256WithRSAEncryption
44:17:e5:5b:e7:65:61:58:4a:55:33:cb:61:a3:71:8b:2d:37:
c6:c5:e3:c3:58:04:35:97:74:c5:63:f2:bb:04:99:70:1f:48:
d3:83:79:24:db:b7:84:51:34:4a:d3:33:cb:34:e2:64:81:f6:
0b:ab:54:43:4e:92:98:62:6b:bc:5d:29:0f:7a:e9:8c:96:95:
02:74:88:db:a1:7b:8a:9a:8e:a2:f2:b6:4c:4a:33:58:86:7e:
db:47:66:60:98:1f:7e:37:98:1b:84:83:60:00:61:5d:f5:82:
28:e8:1f:9a:86:92:da:93:5b:37:76:fd:58:86:53:54:90:c2:
bb:78:76:6f:c7:37:1b:41:51:3a:7a:e7:1d:df:cb:ae:03:3f:
5e:33:d5:03:18:a4:ce:9b:d7:9f:5e:8a:2c:87:a5:54:94:d4:
cf:99:1b:d2:51:5c:67:29:31:8e:74:8b:64:3f:41:5b:81:7b:
a3:c3:6a:75:ea:58:be:8d:51:01:b8:5b:ef:d3:02:8c:91:d6:
04:50:84:67:e6:e9:1f:f2:e4:fe:b4:53:90:bd:52:7e:bf:03:
57:94:cc:90:e2:00:f0:a3:7c:a5:de:cf:2f:3e:90:f0:e2:d8:
a7:dd:42:35:2f:33:06:dc:61:1e:e4:58:fe:b8:0e:2d:02:d4:
e5:d6:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:33:23 2025 by rpki-client