
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
File: 9F685E60678511F0999A252DC4F9AE02.roa (raw, json)
Hash identifier: rtz7OxIwFTXkSQ5WNIzBL1Yz4MuSuCsv4csZ+s+4QFk=
Subject key identifier: FF:CA:FB:76:24:BC:CB:49:B3:F2:72:73:E2:73:B5:81:A8:7E:91:83
Certificate issuer: /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial: 1C
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
Signing time: Fri 29 Aug 2025 08:59:15 +0000
ROA not before: Fri 29 Aug 2025 08:59:15 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.141.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 07:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Validity
Not Before: Aug 29 08:59:15 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b16be3-3262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:9b:c8:96:9d:3b:75:89:c5:bb:b9:94:be:
30:c5:90:33:e4:b6:26:0f:06:85:3d:d4:f1:d5:90:
24:f5:a3:20:c4:69:5d:3c:2e:0f:30:d0:36:9d:6f:
f2:fe:99:bc:75:99:d5:ea:ad:86:cb:6f:a0:7f:10:
61:3a:c8:57:39:58:58:6f:53:41:aa:26:2a:a2:e1:
c3:09:bb:2a:49:f8:25:76:25:b8:2b:6d:a9:d8:ae:
f8:ce:bf:7b:08:5b:b9:d9:ae:d7:cd:6a:59:3b:0e:
0a:f4:63:8c:88:a0:21:7b:0a:dd:cb:11:e0:e0:6b:
92:f0:b9:fb:20:a4:82:02:cb:e2:0c:ed:a3:f4:2f:
12:83:9a:f1:06:02:52:45:a7:64:64:83:94:93:56:
a9:59:c0:46:61:64:22:8f:b3:0e:b1:ad:5c:13:f7:
51:fd:ee:3b:65:3d:42:c8:a6:b7:4d:b3:99:6c:36:
e9:37:b8:c6:3f:c0:c9:4f:4c:c6:87:55:49:a4:f8:
06:d2:ca:17:d0:49:87:94:cc:ae:c4:2e:5d:08:51:
90:12:6e:3c:a2:80:d1:7b:65:f9:db:22:22:a0:d2:
90:7d:9e:96:e4:71:b1:43:3e:ce:da:b2:64:bd:a7:
05:f4:b8:f4:67:8c:8b:14:1b:3a:34:72:19:7a:9d:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CA:FB:76:24:BC:CB:49:B3:F2:72:73:E2:73:B5:81:A8:7E:91:83
X509v3 Authority Key Identifier:
keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:34:5f:b0:86:3e:64:ad:7d:da:78:3a:7c:a3:46:f5:7a:ea:
d4:1b:5e:7d:b7:77:b2:be:67:5a:97:21:8a:32:0e:ad:78:f3:
78:87:b7:c6:ee:40:3a:47:b0:13:1f:3d:43:ea:49:0f:87:05:
27:1a:cb:db:cf:f9:a3:96:b3:6d:0a:f1:4e:a3:2f:e5:29:18:
be:9b:70:00:b7:97:f6:6d:b1:17:9c:9d:a2:23:59:82:a0:2e:
e8:1f:96:17:9a:65:f9:47:07:ff:24:5c:f4:5e:01:08:59:62:
42:dc:33:20:e5:11:88:98:43:5c:c4:bd:69:ca:f4:a6:b3:71:
0a:cc:fb:67:0b:91:2c:cb:b7:ff:ae:d2:47:b3:32:ce:ec:f2:
df:57:90:38:36:9f:fa:cb:6b:fd:75:53:eb:0a:fc:3e:73:bc:
4f:91:fc:29:71:0e:48:12:cb:a7:f3:77:73:59:84:2f:dc:2f:
d3:23:57:8b:8a:3e:f1:62:34:11:3f:0d:99:1e:b2:00:53:e0:
54:90:18:3c:20:1c:8d:60:8b:4d:94:3d:f2:24:09:09:6c:6b:
2e:32:d3:77:be:54:ea:59:b3:d2:d7:c0:14:78:21:97:d1:0a:
3b:a8:2d:f2:b7:11:a7:93:94:33:9f:b5:b4:fe:09:08:88:7e:
8d:f9:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:34:18 2025 by rpki-client