
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/3F82CC6E234E11EFAF9F0F60C4F9AE02.roa
File: 3F82CC6E234E11EFAF9F0F60C4F9AE02.roa (raw, json)
Hash identifier: Gp+VrNNQKJoE7nZhj+fgxNCDM9H0dRu0kS108OiQiRY=
Subject key identifier: 6B:3E:92:4C:95:A3:F6:30:33:CC:2C:44:6B:CC:5F:93:36:BD:E4:53
Certificate issuer: /CN=A916B4A3/serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Certificate serial: 0656
Authority key identifier: FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/3F82CC6E234E11EFAF9F0F60C4F9AE02.roa
Signing time: Mon 04 Aug 2025 23:35:22 +0000
ROA not before: Mon 04 Aug 2025 23:35:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 18013
IP address blocks: 103.117.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 22:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4A3, serialNumber=FE49C2CF7EF7BCFB44424583DF44A47332082C59
Validity
Not Before: Aug 4 23:35:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=689143ba-3b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:f2:37:7a:15:3f:25:03:6f:a0:60:5d:b7:
c0:cc:80:45:94:0a:5c:1b:53:05:a9:3a:cb:31:3f:
35:25:7a:ed:01:36:43:55:ac:06:fd:f9:ac:6b:2d:
cd:82:26:97:a0:78:23:d9:d5:94:c5:06:54:b0:c7:
d3:5e:92:4d:37:ad:82:8f:e7:dd:6c:f5:7d:a3:63:
78:fb:e7:73:87:b6:e6:96:f9:b6:78:e0:42:87:74:
de:34:64:d5:90:6b:04:e2:66:50:a3:d7:25:07:b2:
23:8e:7d:6f:98:7f:82:39:66:17:ad:aa:79:20:ce:
1b:42:38:67:98:ba:e5:51:8a:c9:81:fe:e1:ff:9c:
58:10:fc:8e:50:9d:6a:76:50:0e:0f:3d:8c:8a:29:
e7:50:69:a2:1a:ed:99:09:68:4f:d4:39:4d:0d:dd:
51:a0:84:b2:da:10:41:c8:0a:ee:92:ef:75:b6:b3:
90:a0:5d:28:a5:cc:fc:21:d5:25:9c:d6:ee:45:42:
ba:52:ae:f9:e1:5d:6f:16:e8:05:d4:96:01:2b:59:
98:40:9e:bd:b9:17:0c:18:b9:c7:3b:8f:ce:3b:73:
0e:6c:fb:f9:2e:5c:74:51:20:a2:d6:05:2f:14:99:
42:ca:2d:83:12:83:3c:4a:9a:92:4c:31:73:66:37:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3E:92:4C:95:A3:F6:30:33:CC:2C:44:6B:CC:5F:93:36:BD:E4:53
X509v3 Authority Key Identifier:
keyid:FE:49:C2:CF:7E:F7:BC:FB:44:42:45:83:DF:44:A4:73:32:08:2C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/_knCz373vPtEQkWD30SkczIILFk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_knCz373vPtEQkWD30SkczIILFk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4A3/6D62C8C4A04211EB81BFFD1FC4F9AE02/3F82CC6E234E11EFAF9F0F60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:0c:5c:48:1b:43:19:a2:ce:28:57:ac:ed:92:01:dc:9a:8c:
3a:32:dc:cc:f1:aa:37:95:be:8f:23:95:c0:4a:8c:c9:9f:87:
e5:7b:83:b0:b8:10:5d:31:59:22:00:09:28:b0:82:f7:1f:96:
c2:69:cb:3b:41:f9:cc:00:65:be:9a:46:64:77:90:3c:2b:82:
64:67:25:e6:fe:1d:8a:b3:b4:37:c0:17:30:2e:5a:5a:53:78:
41:0e:d5:e3:2c:51:57:6e:39:c9:00:94:33:7a:f3:04:b7:a3:
6f:73:82:77:32:98:1c:9e:ee:3d:c4:65:f5:d5:22:2e:53:79:
a9:6a:d7:d4:2b:33:9a:e4:82:a0:0a:c2:c6:6c:3b:17:6e:ea:
b7:35:78:cd:c8:77:fe:f9:cb:aa:90:7e:82:9f:51:9a:ea:b7:
e0:08:6c:16:84:af:89:50:bf:0d:37:58:12:a1:b6:16:84:1c:
ff:ba:61:a0:a1:65:f3:e3:2f:69:47:88:0f:73:68:18:d2:10:
da:41:4b:b9:28:28:38:8f:48:51:c9:88:04:39:b6:f1:2c:ca:
6b:54:22:48:9f:24:fd:36:2f:f2:69:57:d2:f3:5f:5a:85:2e:
f7:fa:4e:d9:b1:94:1d:4a:a0:92:16:45:ca:92:82:27:d8:20:
6e:40:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:16:35 2025 by rpki-client