
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
File: 34386BAAB90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier: EFu9fWzB4CHYh3zr3NOY2aOQ9lFVqr9qWCqhREefbqg=
Subject key identifier: 6C:5E:CC:F2:63:68:8F:28:73:C3:A6:EE:4B:91:21:98:B7:FA:83:BD
Certificate issuer: /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial: 0242
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
Signing time: Wed 05 Nov 2025 02:16:41 +0000
ROA not before: Wed 05 Nov 2025 02:16:41 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151354
IP address blocks: 103.210.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Validity
Not Before: Nov 5 02:16:41 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=690ab389-d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:e2:7f:ef:45:b6:02:c2:7a:d3:00:d5:0e:
a4:3e:35:b4:9c:87:b1:51:e9:96:3e:32:d2:7e:28:
28:e6:87:75:9c:53:c0:34:02:4e:92:a7:41:70:20:
19:72:de:cc:97:be:4c:ed:2d:fb:a8:46:b2:49:4c:
fc:68:dd:3a:89:9e:2b:08:1c:e4:97:70:ce:a3:ef:
d1:1c:ac:97:57:7f:90:86:06:d7:2a:11:56:1d:cf:
fa:1a:68:d2:cd:02:bf:a8:5e:db:30:b6:d3:cb:16:
cc:76:8e:3a:92:36:1d:fa:a9:52:79:9d:f8:49:a5:
85:e1:50:85:b3:49:6b:c9:04:a7:31:c2:ed:eb:9a:
77:4e:0b:85:aa:9b:a2:d1:6d:3f:23:0e:a6:71:f8:
b7:88:3a:eb:b8:ad:93:bd:a3:d7:da:e6:84:b4:84:
0c:39:7d:60:ca:c2:ae:f8:68:60:af:75:33:d3:e6:
0c:30:71:b4:fa:a1:a9:d2:92:06:a9:fd:79:46:7b:
9d:fe:c0:b8:d5:22:b5:55:86:da:77:a0:a9:af:8e:
a3:06:78:61:06:9b:f9:d7:9f:e1:56:99:a8:08:d0:
f0:8c:30:66:0f:15:ae:17:fc:ed:30:9b:e1:26:53:
61:85:72:17:1d:db:9c:bb:79:63:9b:12:b1:88:46:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:CC:F2:63:68:8F:28:73:C3:A6:EE:4B:91:21:98:B7:FA:83:BD
X509v3 Authority Key Identifier:
keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/34386BAAB90A11EF97D24653C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.115.0/24
Signature Algorithm: sha256WithRSAEncryption
84:40:17:db:e1:66:79:d1:05:57:60:00:36:6b:3c:ee:d1:1b:
49:47:f5:d0:9a:3a:ec:7b:0a:9f:9c:bd:ab:c4:0c:40:2b:61:
70:f9:60:f3:f3:9d:dd:d1:b7:81:89:1e:30:f6:b0:32:b9:2b:
29:ed:57:ce:98:a7:62:f6:05:79:ac:59:36:bc:67:43:f9:16:
d6:f2:4a:d2:6c:1d:47:c8:7c:63:0e:de:8a:40:1c:60:63:b4:
7f:27:0a:16:f6:24:83:c7:11:90:e1:ea:cb:f4:23:a0:8f:6f:
b6:3b:64:e0:b5:25:fe:d9:ee:02:86:93:72:9c:c1:f9:1c:d8:
cf:3f:ba:41:b0:54:09:c0:ba:42:cf:4d:05:4a:4e:f5:f2:33:
3c:24:2e:65:cc:3a:bf:73:62:4f:e4:0b:3f:6d:0c:f3:63:c7:
79:83:28:ff:cc:10:7e:de:69:82:37:3b:f1:ae:ae:6e:30:76:
8e:8f:de:0b:f4:4b:0f:d3:c2:57:63:01:c5:a3:64:39:14:99:
5b:6c:56:b9:cb:40:ce:98:d9:66:14:34:5e:53:a8:0b:0e:fe:
bb:f5:b0:85:45:63:f0:2f:55:94:97:0d:db:d1:bf:e7:76:20:
dc:1b:9d:7b:a7:82:39:a9:30:ce:64:a9:49:3d:bd:1d:e4:83:
31:9f:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:49:56 2025 by rpki-client