
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa
File: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (raw, json)
Hash identifier: 4YDRwgWfjN1vzby5e89LZ7NBG042AaPIPiBWwyrl3v0=
Subject key identifier: FF:E9:C3:88:42:4E:A7:08:2A:18:05:6F:90:37:3F:3F:D4:BB:5B:AE
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 0261
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa
Signing time: Mon 03 Nov 2025 01:46:43 +0000
ROA not before: Mon 03 Nov 2025 01:46:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153385
IP address blocks: 103.12.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 01:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Nov 3 01:46:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69080983-03a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:a4:b5:a3:60:cf:01:5f:c7:3c:39:05:2e:
1d:a4:de:fe:51:15:af:f8:da:dc:98:02:53:60:05:
29:3e:17:3a:e4:fe:e2:11:12:d3:d9:3a:e0:e4:48:
9f:9d:ef:15:e0:95:79:2e:ac:3f:15:83:a2:da:15:
6d:39:a4:63:92:c1:6b:45:d1:ee:bf:5d:8f:52:b5:
94:37:a3:84:2f:2f:08:93:b2:bc:d9:2f:0f:31:7c:
02:a1:25:f0:8a:db:64:50:92:db:d9:7d:98:82:aa:
fd:fb:20:25:24:6d:7d:78:67:e5:d9:eb:bf:35:85:
45:a1:38:96:22:a9:f6:d9:ac:da:16:b5:32:39:0e:
cd:dd:ef:bf:92:bc:6e:46:60:83:e3:e4:07:05:96:
a5:d7:88:77:12:71:e0:a7:16:68:aa:36:b7:11:67:
49:5d:05:22:27:24:0b:70:a3:ed:a1:a8:17:44:ac:
f6:1b:bc:28:60:15:a8:76:9b:70:55:6a:b1:2b:8a:
c0:c2:47:cf:dd:4f:35:0d:4d:f9:bc:26:2c:b5:24:
f4:31:ad:ec:0c:59:0e:a5:af:b7:03:e4:cb:b6:d8:
b2:25:c5:c0:13:04:a0:28:cc:c6:86:81:73:b8:73:
26:70:b5:19:1a:f5:3c:96:0a:72:2b:22:21:08:b8:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:C3:88:42:4E:A7:08:2A:18:05:6F:90:37:3F:3F:D4:BB:5B:AE
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.12.205.0/24
Signature Algorithm: sha256WithRSAEncryption
97:11:1d:1c:6e:2b:9b:3f:bc:29:f5:ef:88:5b:01:b7:c4:2e:
75:50:ea:e0:8d:cb:0b:cb:ea:e4:8f:8a:ec:2a:d7:45:ee:bd:
05:cd:dc:34:93:4a:35:61:74:01:a9:1d:24:e4:f5:fd:42:83:
69:8f:25:cb:f9:b0:96:33:10:a6:d6:b8:7e:95:4b:95:8e:8d:
ec:e1:3d:c7:04:a2:ef:71:0d:bf:58:f3:cd:08:ae:3b:75:1e:
74:be:f3:c5:d8:2a:b7:df:04:47:9d:74:a7:ce:c4:7a:46:f2:
c3:ec:a2:04:fc:c6:ae:fc:93:7c:b0:ee:88:f5:f1:88:a0:02:
49:bf:7b:e4:ba:49:0f:63:98:5f:46:d4:23:96:65:61:ae:b9:
28:8f:72:19:4f:0d:60:5f:23:65:6d:95:bc:ee:47:cc:c4:60:
de:87:66:40:cd:ea:c8:9c:ab:69:10:4c:35:2a:6b:a9:ea:6f:
99:2d:0f:fd:59:c0:7c:b5:da:f4:e8:94:95:0d:8a:ad:e3:0f:
19:c9:6e:69:e5:b4:22:76:0f:06:0a:a3:d8:97:fd:b3:9e:da:
16:27:14:89:dc:ae:61:de:32:3f:9b:3b:19:2a:94:fb:fe:34:
95:c6:2b:36:0b:c7:99:3f:e3:21:48:2d:7f:39:3a:8f:bd:90:
4d:8d:ab:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:59:53 2025 by rpki-client