
$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/58105BCA5ACB11EA84F2392EC4F9AE02.roa
File: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (raw, json)
Hash identifier: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=
Subject key identifier: AB:A4:47:4F:F7:91:F1:F0:CC:16:54:B1:A5:C9:CB:8B:BA:04:EF:1A
Certificate issuer: /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial: 0E74
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/58105BCA5ACB11EA84F2392EC4F9AE02.roa
Signing time: Fri 14 Feb 2025 18:36:39 +0000
ROA not before: Fri 14 Feb 2025 18:36:39 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136523
IP address blocks: 103.208.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 17:43:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3700 (0xe74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Validity
Not Before: Feb 14 18:36:39 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67af8d37-4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:06:2a:33:e4:fa:93:14:e4:06:b1:2e:e3:
f6:f4:d9:d6:41:93:7e:41:76:ca:18:c4:48:27:6e:
54:15:83:1e:dc:ea:38:78:a3:78:77:f3:d0:90:64:
1a:4b:f7:ba:d1:87:13:28:58:fb:69:ff:13:32:5e:
e1:73:04:17:af:47:af:7d:9a:24:74:11:07:db:ba:
3a:ec:18:90:ec:17:04:47:a5:e6:4f:ba:dc:81:16:
70:2c:ab:d3:8f:06:39:fd:2d:15:eb:d4:32:e7:c8:
97:ab:f5:33:72:f3:45:40:b0:25:d8:b6:3b:f1:a7:
fc:5f:7a:9a:7b:83:41:4d:99:9e:fb:f1:8f:3a:9a:
f6:4c:d8:b0:72:be:77:5f:c7:4b:76:0e:78:13:a1:
6b:2f:3e:a6:2d:c0:8f:d3:92:0b:e9:9b:f2:27:10:
4b:96:4f:04:77:11:54:1f:4a:c7:d2:9b:91:ed:d5:
6e:ea:bd:c6:db:6c:57:bf:d3:d6:e0:ef:f7:4c:45:
1e:d6:a2:70:f3:39:46:13:00:04:86:a1:bd:e2:55:
8c:a5:b6:7e:9e:a1:d2:77:99:cd:9a:61:af:09:b0:
bf:bb:5d:98:47:64:29:91:48:c1:e6:eb:e8:2a:4f:
3b:74:47:69:11:f1:31:67:14:47:70:07:38:2e:0c:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A4:47:4F:F7:91:F1:F0:CC:16:54:B1:A5:C9:CB:8B:BA:04:EF:1A
X509v3 Authority Key Identifier:
keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/58105BCA5ACB11EA84F2392EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.208.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c0:3b:57:d1:19:9e:86:54:59:6a:cb:d7:35:55:e6:4e:f6:
c6:3d:55:07:c7:94:10:df:d7:c1:17:e1:78:50:97:e3:20:a2:
b4:e0:0f:1c:d7:04:b8:b1:7c:53:98:e7:40:76:5e:d4:ae:76:
70:3c:ba:5f:61:cf:65:44:fe:c8:05:7e:1e:77:94:6d:55:05:
91:cf:39:9a:42:34:c4:3d:a4:d4:7e:55:05:87:53:38:53:bc:
20:db:3c:42:03:54:31:1d:c7:29:0b:1a:09:63:a5:66:8c:99:
b9:20:77:65:83:de:15:d0:92:9d:6e:7d:0e:bf:0f:fb:c4:19:
0d:ad:ea:47:38:84:cf:17:95:31:9f:28:96:08:21:f0:99:6a:
df:d8:0d:28:04:88:e1:05:6f:6c:2e:c7:81:c5:ee:c7:61:9b:
99:2e:80:db:fd:b1:f3:d5:a0:b9:8e:ee:58:32:77:e1:c3:91:
2a:21:f9:e5:fa:73:0f:83:4a:4f:93:af:23:6c:e1:30:c8:2f:
93:ac:af:85:aa:f9:90:60:a1:b2:86:51:00:cb:d7:cf:2e:b7:
d8:56:54:84:69:a0:25:c1:ff:fc:35:94:4c:73:77:de:9a:71:
65:43:ff:86:f8:21:36:12:db:c5:61:28:99:14:7e:cf:ac:27:
14:15:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:33:08 2025 by rpki-client