
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa
File: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (raw, json)
Hash identifier: UfEQHpbIkG4N2xJZlQdcj3CUM9IauXhIw+vNgpLvVqs=
Subject key identifier: C6:FD:7A:D4:78:36:2C:6E:BC:36:FA:1E:5E:38:38:F3:7A:DB:28:49
Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Certificate serial: 0221
Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa
Signing time: Fri 31 Oct 2025 02:16:45 +0000
ROA not before: Fri 31 Oct 2025 02:16:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 140607
IP address blocks: 103.4.102.0/24 maxlen: 24
103.4.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 02:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90
Validity
Not Before: Oct 31 02:16:45 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69041c0d-e2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:9d:0b:9c:42:ba:ff:ce:b2:95:f5:d7:f7:
1e:8c:5e:98:b4:59:a0:c0:39:94:b7:89:b5:9a:ef:
21:72:7b:4b:d8:1e:42:c0:f1:65:5d:17:c4:c4:67:
0c:44:fd:6c:82:eb:59:f9:12:f3:93:07:31:cf:df:
27:d6:83:1e:c6:ed:fb:d8:fe:0d:f7:95:56:e6:1c:
28:fc:f2:9c:d2:8e:11:01:77:37:be:f3:59:f9:f8:
9f:50:04:30:a6:6b:03:be:aa:6a:07:c8:65:fe:8c:
39:13:b5:69:3a:4b:fc:57:d6:f1:fe:65:24:56:5f:
ef:ff:48:91:50:e3:86:cf:41:c8:6f:73:f6:49:3f:
68:2d:2e:92:2e:89:03:f7:8e:b3:1e:35:1f:42:f9:
80:31:b2:0e:1e:da:93:ee:a3:c4:98:59:d4:d9:b1:
e0:b6:70:ee:28:92:96:c5:8b:67:09:70:a7:82:a1:
c6:a8:37:ff:d5:6b:80:85:3c:6e:91:d3:d3:d2:87:
60:a5:ae:94:93:df:cf:52:74:26:83:2b:83:3c:d7:
ac:f1:fd:3c:85:fe:dc:7e:5e:9b:6f:8d:62:09:28:
9e:cb:1e:80:a8:1d:f0:2d:14:7a:31:38:ad:aa:59:
16:6c:38:c6:a6:e8:f7:34:b1:06:72:0a:28:db:6c:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:7A:D4:78:36:2C:6E:BC:36:FA:1E:5E:38:38:F3:7A:DB:28:49
X509v3 Authority Key Identifier:
keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.102.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f5:18:45:27:5f:a6:1c:8f:2f:32:93:3a:41:1b:ec:0b:48:
59:f5:57:1b:89:e3:bd:ba:3e:44:ef:9d:10:29:a1:a4:c7:37:
30:13:28:4e:ed:0e:f7:48:f0:e3:17:aa:1e:ca:1a:47:65:81:
1e:63:62:2e:f5:af:02:83:d5:47:20:c4:09:0d:e3:92:ff:3f:
53:14:68:56:d9:c5:03:d3:e7:b6:87:d6:f3:28:6c:18:09:87:
bb:12:5b:59:05:5d:ca:8c:72:83:2b:47:15:41:02:a1:95:6d:
f7:19:40:53:f8:5f:85:29:43:b8:1e:7f:af:3e:70:3c:ea:77:
ca:be:ba:23:85:4d:b5:36:ba:11:23:e2:98:4d:aa:15:c4:e0:
69:08:57:9f:75:ef:31:44:ed:d0:e6:f3:a0:0d:ff:d4:4f:86:
6c:0f:c7:86:fc:11:64:70:81:1e:d0:4f:61:a3:06:d8:c4:0d:
46:ad:ff:9b:60:aa:ff:8d:38:7b:0a:4c:71:84:5d:7d:51:30:
cd:4d:de:4b:e9:fb:32:f0:4c:b2:62:45:ec:e7:91:1c:f5:5e:
60:5c:e4:72:44:73:85:fc:aa:2e:8d:9b:f2:63:f8:3d:97:8a:
70:fa:d8:4f:a3:c9:ba:4d:bd:09:1f:61:c6:f9:8d:ce:71:bd:
be:c0:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:18:07 2025 by rpki-client