
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
File: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (raw, json)
Hash identifier: 66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=
Subject key identifier: D6:4C:4B:AC:F4:3D:3A:9A:73:6E:0A:C2:D3:35:F2:02:FE:30:62:E9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 0192
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
Signing time: Wed 03 Sep 2025 04:22:39 +0000
ROA not before: Wed 03 Sep 2025 04:22:39 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140958
IP address blocks: 103.153.200.0/23 maxlen: 23
2406:4ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Sep 3 04:22:39 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b7c28f-6860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:7f:56:8f:0e:3e:31:4d:72:80:da:7f:40:
7f:0e:07:da:99:f3:b5:5d:18:3b:11:69:1b:fb:cb:
6f:18:89:01:76:c3:4e:26:e3:e1:92:62:72:2d:c7:
d5:e6:a6:63:7e:8a:81:67:4e:87:07:ce:0e:7c:42:
45:f9:7a:8d:0c:c1:52:17:3f:7f:5b:56:e5:2a:c2:
22:5e:99:f3:63:60:f2:46:80:dd:9e:89:e3:db:bb:
fe:6e:32:60:ea:49:3d:fd:45:4a:b7:da:ac:9f:a0:
31:df:79:02:96:35:d1:28:df:13:a7:fc:ce:e9:74:
11:e5:57:ea:e5:2e:8e:a0:aa:ff:c1:28:f3:78:b6:
47:d4:a5:3b:5c:39:61:ed:9f:6d:42:65:07:4b:a2:
83:83:d8:ef:ab:a7:52:ac:9e:6c:c4:2d:70:e9:0a:
18:91:61:13:9a:4b:06:f1:1f:c6:27:8a:e3:3b:77:
b5:e7:53:3f:8f:31:c5:b2:0b:5d:d4:54:84:5e:76:
54:0d:f2:09:48:be:cc:a7:26:93:ea:ea:d5:75:c5:
93:9f:eb:6b:5d:a2:75:9e:ba:09:d8:17:70:f0:ed:
89:dd:d8:e1:12:b6:a3:86:14:20:0b:50:72:09:5f:
08:60:38:d2:97:ce:84:9d:ed:78:42:8b:1e:53:73:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:4B:AC:F4:3D:3A:9A:73:6E:0A:C2:D3:35:F2:02:FE:30:62:E9
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.200.0/23
IPv6:
2406:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
1d:51:ba:50:45:25:e1:a9:c9:95:68:c8:16:aa:35:0f:ca:ef:
96:07:a9:75:cc:c1:e9:f5:c2:8b:5e:2b:79:a7:a4:f4:95:48:
c3:78:de:52:f2:ed:bf:b1:b5:58:cb:0d:be:fe:20:aa:f1:ba:
76:f1:57:6b:b2:5a:b6:45:77:9a:a9:d9:c1:37:7b:60:65:e9:
82:b8:58:af:45:d9:0d:e6:7d:5a:d3:8f:99:30:c6:d7:1b:0f:
f4:06:dd:38:0d:4f:e8:8a:2d:d8:87:9a:dd:ab:f2:13:3f:d4:
77:7f:7c:8b:c0:fb:40:1d:28:46:68:43:54:a3:d7:cf:3e:6a:
05:b1:7f:86:9e:07:c4:04:f6:f0:67:eb:b3:d5:9b:a0:f1:f2:
53:86:31:b3:d3:a6:f1:59:96:8e:61:94:ce:09:61:14:8c:21:
0f:82:82:fd:46:4a:7e:73:df:16:49:33:1a:36:f8:9f:2f:f5:
51:07:a4:0e:15:41:35:a3:f3:d3:2d:17:dd:05:d6:20:7b:df:
00:33:24:10:a5:2a:c1:85:a2:29:80:f2:02:a9:0d:64:6b:1b:
2b:aa:99:22:36:51:b6:be:c1:a8:04:20:c2:7e:33:b1:56:99:
76:0e:6e:b3:21:42:e1:d8:88:47:0f:99:70:54:a0:78:86:b3:
14:c9:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:00:17 2025 by rpki-client