
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/948A2714980211EB82357D6CC4F9AE02.roa
File: 948A2714980211EB82357D6CC4F9AE02.roa (raw, json)
Hash identifier: 74FNJ7o4TVn1NClkrq7IveC/njESqBKp93SgAkTbR9E=
Subject key identifier: EC:31:CD:80:BD:19:2F:67:7D:3B:44:0A:C8:C7:7C:C3:06:42:DE:A2
Certificate issuer: /CN=A9149BFB/serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Certificate serial: 068E
Authority key identifier: F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/948A2714980211EB82357D6CC4F9AE02.roa
Signing time: Tue 04 Nov 2025 22:42:33 +0000
ROA not before: Tue 04 Nov 2025 22:42:33 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9723
IP address blocks: 203.10.6.0/24 maxlen: 24
203.10.7.0/24 maxlen: 24
203.10.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149BFB, serialNumber=F6E712FC5C69E72F69396E5E1142CC7F78C68FD1
Validity
Not Before: Nov 4 22:42:33 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=690a8159-3ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:d4:77:60:38:f3:b2:f5:ae:d1:55:2e:e7:
8f:9f:5e:e9:94:4d:78:56:60:8c:b5:cd:a7:ab:b5:
53:b2:0e:01:97:b8:cc:77:2a:f7:d7:5f:4b:b7:17:
fd:4b:4a:c5:34:e6:bb:fe:7d:4a:7b:01:e8:b0:ba:
81:d1:6b:d3:e2:63:55:da:49:06:c9:ca:6c:bb:88:
b2:68:da:e6:09:fb:9f:33:c9:0b:63:c7:65:ca:21:
9a:50:ef:92:fa:39:93:57:d5:8b:01:e2:71:f5:77:
e4:f4:c4:5d:78:dc:fe:b7:f8:92:e3:1c:d7:c7:79:
2e:fc:62:bc:7b:f6:1f:a1:b0:23:fd:13:d1:5a:d6:
07:8c:68:65:60:fb:7d:ee:99:c0:34:1c:c7:7a:d2:
b9:90:3d:e8:2f:27:eb:c9:71:81:3d:b8:5f:aa:1c:
c6:f6:ef:ab:5c:c0:76:ba:16:42:a3:b8:43:18:56:
cf:dd:5e:0e:d8:6e:ef:34:82:5c:67:04:7d:31:20:
d4:e3:3c:59:86:9f:58:92:30:9e:87:67:3c:5e:87:
24:81:fe:cf:d6:3b:0e:1d:e2:13:b4:7b:d6:08:dc:
4d:95:d0:67:96:da:6b:51:4c:c3:31:a1:dd:5e:7d:
1a:27:04:be:4a:e4:f9:da:28:77:cb:de:7e:2b:0f:
7c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:31:CD:80:BD:19:2F:67:7D:3B:44:0A:C8:C7:7C:C3:06:42:DE:A2
X509v3 Authority Key Identifier:
keyid:F6:E7:12:FC:5C:69:E7:2F:69:39:6E:5E:11:42:CC:7F:78:C6:8F:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/9ucS_Fxp5y9pOW5eEULMf3jGj9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ucS_Fxp5y9pOW5eEULMf3jGj9E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149BFB/DE2DE646980011EB8071DD68C4F9AE02/948A2714980211EB82357D6CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.10.6.0-203.10.8.255
Signature Algorithm: sha256WithRSAEncryption
60:bf:86:df:9c:cc:3d:b9:65:54:ac:9c:a6:82:d3:b1:41:45:
86:12:f2:bf:97:cf:e7:18:a4:d1:a5:60:43:03:21:3b:bb:67:
8e:6c:7e:53:1e:c0:a9:3e:1d:1c:65:e3:46:be:b4:da:a7:16:
cd:af:82:f6:57:17:64:93:13:bc:6a:5e:98:32:45:72:db:e6:
70:36:6d:96:eb:31:ec:26:58:f8:0b:46:6e:09:75:49:eb:9b:
ef:e7:98:6d:c7:75:bc:da:8b:58:99:f7:68:52:ef:0d:82:c2:
1c:19:3f:fd:ad:7a:7a:87:76:59:69:85:0c:35:5d:ad:cd:13:
b3:0f:db:ac:9d:26:42:1b:7a:f0:cd:cd:12:a5:d6:42:0f:95:
41:43:97:53:e7:e6:15:6e:0a:88:8a:ad:84:ef:6a:35:8a:1f:
e7:db:27:21:df:5d:dc:a9:7f:06:0e:be:0b:e6:de:ae:72:f3:
af:f6:83:ce:13:a3:0c:78:39:02:97:81:ff:c6:69:e4:a1:e9:
48:d1:11:d0:71:d7:f8:1b:86:bd:85:20:7d:a0:e5:4d:1d:27:
f4:40:90:b5:9f:61:e3:29:fb:ba:6c:f4:98:d2:6d:3c:02:b3:
29:3f:0d:2c:f7:5d:db:1a:97:a9:ac:11:9a:b7:f1:f4:a0:fe:
d3:11:3b:9f
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlCRkIxMTAvBgNVBAUTKEY2RTcxMkZDNUM2OUU3MkY2OTM5NkU1RTExNDJDQzdG
NzhDNjhGRDEwHhcNMjUxMTA0MjI0MjMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTBhODE1OS0zYmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYDUd2A487L1rtFVLuePn17plE14VmCMtc2nq7VTsg4Bl7jMdyr3119Ltxf9
S0rFNOa7/n1KewHosLqB0WvT4mNV2kkGycpsu4iyaNrmCfufM8kLY8dlyiGaUO+S
+jmTV9WLAeJx9Xfk9MRdeNz+t/iS4xzXx3ku/GK8e/YfobAj/RPRWtYHjGhlYPt9
7pnANBzHetK5kD3oLyfryXGBPbhfqhzG9u+rXMB2uhZCo7hDGFbP3V4O2G7vNIJc
ZwR9MSDU4zxZhp9YkjCeh2c8Xockgf7P1jsOHeITtHvWCNxNldBnltprUUzDMaHd
Xn0aJwS+SuT52ih3y95+Kw98rwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFOwxzYC9
GS9nfTtECsjHfMMGQt6iMB8GA1UdIwQYMBaAFPbnEvxcaecvaTluXhFCzH94xo/R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUJGQi9ERTJERTY0Njk4
MDAxMUVCODA3MURENjhDNEY5QUUwMi85dWNTX0Z4cDV5OXBPVzVlRVVMTWYzakdq
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl1Y1NfRnhwNXk5cE9XNWVFVUxNZjNqR2o5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlCRkIvREUyREU2NDY5ODAwMTFFQjgwNzFERDY4QzRGOUFFMDIvOTQ4QTI3MTQ5
ODAyMTFFQjgyMzU3RDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAcsKBgMEAMsKCDANBgkqhkiG9w0BAQsFAAOCAQEAYL+G
35zMPbllVKycpoLTsUFFhhLyv5fP5xik0aVgQwMhO7tnjmx+Ux7AqT4dHGXjRr60
2qcWza+C9lcXZJMTvGpemDJFctvmcDZtlusx7CZY+AtGbgl1Seub7+eYbcd1vNqL
WJn3aFLvDYLCHBk//a16eod2WWmFDDVdrc0Tsw/brJ0mQht68M3NEqXWQg+VQUOX
U+fmFW4KiIqthO9qNYof59snId9d3Kl/Bg6+C+bernLzr/aDzhOjDHg5ApeB/8Zp
5KHpSNER0HHX+BuGvYUgfaDlTR0n9ECQtZ9h4yn7umz0mNJtPAKzKT8NLPdd2xqX
qawRmrfx9KD+0xE7nw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:48:24 2025 by rpki-client