
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/11A843B467D811EEA0543B5CC4F9AE02.roa
File: 11A843B467D811EEA0543B5CC4F9AE02.roa (raw, json)
Hash identifier: 4ZzJfaYDIWcwC7QMRrN8yPR83xv8sh7dqWbbzPE3dT0=
Subject key identifier: 5E:C3:E5:13:9C:D9:21:DC:9D:83:EA:99:31:9F:79:7C:65:9C:CE:95
Certificate issuer: /CN=A914DC56/serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Certificate serial: 0188
Authority key identifier: 9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/11A843B467D811EEA0543B5CC4F9AE02.roa
Signing time: Fri 31 Oct 2025 03:48:21 +0000
ROA not before: Fri 31 Oct 2025 03:48:21 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137263
IP address blocks: 103.129.252.0/22 maxlen: 22
103.129.252.0/23 maxlen: 23
103.129.252.0/24 maxlen: 24
103.129.254.0/23 maxlen: 23
2403:9d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 10 Nov 2025 03:36:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC56, serialNumber=9E6A0AA439CFE347B04F746840A6E434C509B1A7
Validity
Not Before: Oct 31 03:48:21 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69043185-b965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:f7:99:2c:eb:d6:2c:0f:0f:b1:db:76:d7:
99:1b:38:3a:1d:b1:13:f9:5d:0f:85:ea:2a:fc:22:
43:24:e4:4a:09:12:92:63:5a:94:e5:17:8a:de:7a:
f7:e3:3c:67:82:cf:a4:d4:a6:23:6c:5e:4d:5b:a4:
7d:9f:62:6c:45:f2:cc:49:cb:1c:8b:ef:46:1c:28:
f7:6d:8c:54:99:af:69:2d:8f:29:ce:77:e8:d8:fb:
8c:1c:84:74:29:cd:a1:c5:c8:ae:84:5a:49:fa:27:
7c:d3:14:66:24:ea:3a:37:9c:84:13:17:48:42:c4:
6e:55:31:81:24:93:41:7a:17:2a:b4:6a:d9:61:3a:
96:52:db:40:0c:7d:9b:42:aa:f2:c4:53:51:3e:e0:
36:fa:e0:95:0f:3d:cd:6b:19:9c:b3:f7:10:64:1e:
aa:dd:3b:bd:e2:f7:54:a4:64:e5:9e:8c:28:c8:c2:
a5:59:6e:0d:46:6c:26:09:33:92:f2:c9:7c:0d:ff:
d3:00:37:34:72:dc:35:80:85:01:10:c4:e9:c6:9e:
1c:d1:df:a8:1b:f5:9e:b3:c7:cb:bd:bb:22:fd:4d:
43:94:01:5e:0f:c9:10:19:4b:7c:32:e5:ed:f4:6a:
46:c9:b9:ba:13:38:11:27:21:16:4c:9b:ab:47:f9:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:E5:13:9C:D9:21:DC:9D:83:EA:99:31:9F:79:7C:65:9C:CE:95
X509v3 Authority Key Identifier:
keyid:9E:6A:0A:A4:39:CF:E3:47:B0:4F:74:68:40:A6:E4:34:C5:09:B1:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/nmoKpDnP40ewT3RoQKbkNMUJsac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmoKpDnP40ewT3RoQKbkNMUJsac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC56/CDBCF63A669311EE98CEAA50C4F9AE02/11A843B467D811EEA0543B5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.252.0/22
IPv6:
2403:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
55:0b:90:32:04:f1:ee:41:e2:9f:a8:52:f7:33:a4:53:a8:ec:
58:4e:10:97:30:7a:60:85:aa:91:6f:27:74:07:a2:1f:51:71:
06:c5:c5:b5:01:1f:8d:80:06:f7:ce:28:f4:90:24:13:a1:a2:
72:6a:1a:35:9a:31:89:d7:6c:d6:33:a2:36:87:b8:9c:4b:25:
99:8a:00:3c:de:dd:80:b7:e8:52:0f:da:d1:5b:c8:73:d5:65:
35:9c:ed:d5:1c:c7:f0:83:37:6c:c6:78:fc:04:67:fa:46:95:
26:17:6d:a4:64:86:e1:f2:78:28:ac:e4:84:be:1e:7c:3c:4c:
67:4c:da:e0:38:5c:05:08:a3:bc:e4:ea:11:99:ad:0f:cd:16:
27:c5:41:56:7e:c5:bc:29:29:a6:32:b3:53:6d:b5:99:bd:b5:
e8:53:31:7f:36:77:65:0b:5b:35:fa:da:0e:ef:fe:0d:5d:59:
66:41:15:96:56:ee:ec:3f:ba:6a:25:10:4f:01:6a:5b:a0:cc:
2c:23:29:b5:ee:d4:fd:2e:b0:f8:66:d5:86:88:6f:86:7f:8d:
54:40:8c:ed:75:57:fd:89:c5:fb:f1:9a:fc:fa:8e:39:37:da:
29:72:0e:f6:09:49:4a:7f:84:3d:79:f0:4f:db:5e:2b:14:bb:
f4:9c:28:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:21:36 2025 by rpki-client