
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
File: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (raw, json)
Hash identifier: muOcSUHydOybWaIbIJqpYR7U55ErO7bT8T8E0VaV7DU=
Subject key identifier: D3:71:96:B1:B7:1C:6B:7B:AE:91:BE:93:59:B2:3F:56:68:45:34:CA
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 0184
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
Signing time: Fri 31 Oct 2025 03:48:30 +0000
ROA not before: Fri 31 Oct 2025 03:48:30 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141210
IP address blocks: 103.173.188.0/24 maxlen: 24
103.173.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 03:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388 (0x184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Oct 31 03:48:30 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6904318e-18d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:07:ff:f1:9c:be:b9:d5:05:48:61:5d:59:2d:
1d:37:77:ca:27:3b:f1:3d:6d:7f:87:6c:8d:80:ed:
5c:5b:ba:a1:c6:72:7d:7b:76:fd:16:21:6e:27:da:
01:a2:bf:63:a7:9b:b9:1e:2d:35:56:41:5a:c9:a0:
52:f4:4c:0b:79:da:f3:85:cb:33:ff:da:b2:07:ca:
fc:6a:a1:b7:05:3c:a9:7a:b9:02:70:8b:eb:bb:36:
86:d2:60:57:ca:77:c1:61:71:b2:ae:2b:28:35:b9:
a3:c4:15:ed:df:09:d0:6e:63:71:3f:53:5f:c0:c7:
f1:a0:45:53:c8:40:f2:58:a4:51:54:64:cf:85:63:
f7:13:16:d7:40:25:28:c0:26:67:de:fb:85:d8:ea:
05:e1:b7:06:95:a0:29:84:70:78:34:23:e2:bd:2c:
23:52:73:83:0f:df:2c:f4:8b:98:0d:31:c2:24:50:
83:7b:06:5f:3c:28:36:e8:b2:cf:09:b4:35:4b:e8:
dd:9c:58:d0:d3:f4:10:ce:af:97:f8:56:be:dc:aa:
41:45:16:d2:4a:6f:40:c4:41:ef:77:6a:6f:86:bb:
b1:27:2a:4b:63:ae:27:32:26:d2:84:6b:8e:4c:55:
15:49:3f:d9:54:d5:71:d0:d0:02:db:d5:94:e4:f1:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:71:96:B1:B7:1C:6B:7B:AE:91:BE:93:59:B2:3F:56:68:45:34:CA
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.188.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:4f:db:38:ec:0a:95:75:93:c5:ff:b4:05:dc:69:93:35:61:
77:52:35:a3:56:45:a3:b6:28:63:31:9d:f0:43:2e:ec:d8:45:
60:bc:da:6d:bb:97:15:5a:d1:0a:41:aa:3d:d4:a4:3e:60:67:
c5:4f:2f:fc:82:a0:c3:d4:4d:66:ae:e5:90:44:6f:55:2d:76:
df:1a:c6:24:bf:38:4f:db:9b:c1:18:2a:66:d8:7e:29:07:55:
28:98:77:7a:12:f9:aa:ef:e6:dd:72:77:de:02:c8:40:eb:f4:
2b:29:54:f8:74:e8:07:1c:df:47:f8:1c:71:6f:9f:6a:fb:63:
c2:36:65:e4:4a:21:07:31:1f:32:84:3f:12:24:6a:ca:12:2a:
73:b3:9e:24:66:40:0b:32:9d:2d:f2:77:38:33:cd:fc:f7:f0:
20:7d:99:f4:61:81:d6:a6:97:76:fd:b6:b4:87:02:9e:c6:5a:
3b:a2:f4:23:7d:fe:d2:7c:57:a7:0f:58:06:20:2c:d4:42:63:
d2:d1:08:18:9c:e9:c3:80:18:a8:32:22:74:0c:da:8a:38:47:
cf:5b:91:7c:61:79:76:ec:d9:e9:6c:4c:fd:86:ed:fd:c0:e8:
44:b7:37:6b:42:74:84:93:a3:26:69:ce:ac:cb:1f:b2:d3:3c:
21:eb:bc:2c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERCNjkxMTAvBgNVBAUTKEY5N0M2QjlGMDY5QjZDMDJDQjNEOEVBRDVBRjczRTUw
NkMwOENBMzgwHhcNMjUxMDMxMDM0ODMwWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA0MzE4ZS0xOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Af/8Zy+udUFSGFdWS0dN3fKJzvxPW1/h2yNgO1cW7qhxnJ9e3b9FiFuJ9oB
or9jp5u5Hi01VkFayaBS9EwLedrzhcsz/9qyB8r8aqG3BTyperkCcIvruzaG0mBX
ynfBYXGyrisoNbmjxBXt3wnQbmNxP1NfwMfxoEVTyEDyWKRRVGTPhWP3ExbXQCUo
wCZn3vuF2OoF4bcGlaAphHB4NCPivSwjUnODD98s9IuYDTHCJFCDewZfPCg26LLP
CbQ1S+jdnFjQ0/QQzq+X+Fa+3KpBRRbSSm9AxEHvd2pvhruxJypLY64nMibShGuO
TFUVST/ZVNVx0NAC29WU5PGL5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNNxlrG3
HGt7rpG+k1myP1ZoRTTKMB8GA1UdIwQYMBaAFPl8a58Gm2wCyz2OrVr3PlBsCMo4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REI2OS9EQTg2MENDODZF
NUMxMUVFOUMwMTMzNjFDNEY5QUUwMi8tWHhybndhYmJBTExQWTZ0V3ZjLVVHd0l5
amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeHJud2FiYkFMTFBZNnRXdmMtVUd3SXlqZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERCNjkvREE4NjBDQzg2RTVDMTFFRTlDMDEzMzYxQzRGOUFFMDIvQzRBQTdBM0E2
RTVGMTFFRTlGNjZFOTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnrbwwDQYJKoZIhvcNAQELBQADggEBAJ5P2zjsCpV1k8X/
tAXcaZM1YXdSNaNWRaO2KGMxnfBDLuzYRWC82m27lxVa0QpBqj3UpD5gZ8VPL/yC
oMPUTWau5ZBEb1Utdt8axiS/OE/bm8EYKmbYfikHVSiYd3oS+arv5t1yd94CyEDr
9CspVPh06Acc30f4HHFvn2r7Y8I2ZeRKIQcxHzKEPxIkasoSKnOzniRmQAsynS3y
dzgzzfz38CB9mfRhgdaml3b9trSHAp7GWjui9CN9/tJ8V6cPWAYgLNRCY9LRCBic
6cOAGKgyInQM2oo4R89bkXxheXbs2elsTP2G7f3A6ES3N2tCdISToyZpzqzLH7LT
PCHrvCw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:20 2025 by rpki-client