
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/81ACEA76E74711EFA8F61A3DC4F9AE02.roa
File: 81ACEA76E74711EFA8F61A3DC4F9AE02.roa (raw, json)
Hash identifier: ukg+6KCGHkrsTy11bBIK1xYhpVPUVwZenM7mxd/8rc4=
Subject key identifier: E4:DC:4C:C1:6D:AE:80:87:80:C4:83:80:3D:99:A2:37:3F:CA:E9:A2
Certificate issuer: /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D
Certificate serial: 0649
Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/81ACEA76E74711EFA8F61A3DC4F9AE02.roa
Signing time: Wed 02 Apr 2025 22:53:47 +0000
ROA not before: Wed 02 Apr 2025 22:53:47 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 141754
IP address blocks: 103.163.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl
rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151EB5, serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D
Validity
Not Before: Apr 2 22:53:47 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67edbffb-5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:31:2b:27:1f:ee:11:57:68:b7:23:23:ca:
77:c0:49:dd:b3:ff:65:bb:fd:99:c8:84:b3:1b:83:
15:6e:23:6d:98:c5:82:a4:4f:0a:ee:ad:9f:3e:61:
4f:ef:41:d7:f4:53:0e:42:60:18:50:42:84:04:39:
d6:e7:9f:f9:38:b8:ec:82:5b:6f:50:40:c6:73:18:
77:bd:92:3e:e6:63:04:a0:4e:b2:f7:47:3e:ad:f2:
2d:77:23:d3:e0:5c:90:e7:f1:c8:9d:a4:cb:29:13:
c2:16:93:2b:88:17:83:d6:38:5f:ab:73:80:5f:45:
c6:94:f8:a1:e5:bd:d3:a0:0d:7c:2a:56:6a:ed:7e:
2b:bf:ce:e5:d8:a3:5a:b7:54:49:3a:34:56:12:36:
d8:16:70:41:ae:63:84:2b:97:6a:26:20:a6:4a:c9:
c3:0e:bd:11:62:1b:68:ce:57:3e:8e:54:12:dd:01:
7c:d6:d9:3d:38:7d:6c:e4:9d:46:71:01:6c:7b:da:
eb:8a:db:31:6d:ce:0d:8a:53:94:ae:e5:33:f3:33:
4b:f7:69:2e:0a:3a:06:e6:c0:c2:35:73:0a:f9:2c:
f4:6d:c2:ed:f2:97:09:fa:69:b3:8a:de:7c:68:98:
a3:55:0f:ce:93:1b:56:6b:a6:62:52:fd:a0:df:ca:
a5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:4C:C1:6D:AE:80:87:80:C4:83:80:3D:99:A2:37:3F:CA:E9:A2
X509v3 Authority Key Identifier:
keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/81ACEA76E74711EFA8F61A3DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.142.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:5a:16:1a:a3:a6:c5:44:df:13:fc:c7:99:7e:27:ea:40:a6:
3b:12:01:21:b7:e9:f0:21:a2:48:8f:28:65:e6:a1:35:ce:1a:
1a:9d:15:52:0a:ac:27:9a:8a:97:85:87:f6:72:75:03:bd:d8:
e7:39:a7:73:92:3c:58:34:7e:20:a6:2f:11:67:df:ce:9b:b4:
8a:de:37:c5:6e:40:5a:c9:9a:dc:2b:02:9b:df:f9:12:89:f2:
04:35:77:5a:98:56:d6:6f:31:13:6b:16:d2:f5:4a:5c:8d:a8:
ce:54:49:70:aa:49:73:80:25:e5:13:00:f9:33:cc:0a:49:25:
6d:97:7f:a9:1f:26:2f:ed:e4:c0:50:58:5b:33:a1:8f:66:b2:
c2:7e:33:11:10:2e:be:cc:df:bb:75:10:08:e0:f2:80:2e:df:
e4:8d:a5:97:3b:dd:be:fe:37:d5:11:12:4c:9c:38:ab:24:d3:
44:a1:c5:e6:f8:2b:26:ac:c4:d3:f4:34:d0:91:39:45:80:0b:
e9:aa:37:59:8e:df:d9:8a:82:6c:04:d0:4f:c3:30:0e:b1:27:
97:30:7f:09:fc:e6:18:63:09:58:41:7c:79:79:5d:ee:9f:0d:
0d:97:48:e3:09:e4:1c:8a:f5:be:13:43:40:07:31:6e:ee:e7:
25:cd:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:05 2025 by rpki-client