
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
File: E88EE726E93611EF9E3FF729C4F9AE02.roa (raw, json)
Hash identifier: ltl+DfDEYXJ+yRffLM013Libfn2gz+fEWau0tvSsxac=
Subject key identifier: 66:1F:DD:A9:81:45:87:69:F8:C8:70:4A:E5:AC:00:85:DF:35:A2:AA
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 063B
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
Signing time: Tue 03 Jun 2025 19:31:22 +0000
ROA not before: Tue 03 Jun 2025 19:31:22 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 138453
IP address blocks: 103.79.17.0/24 maxlen: 24
122.50.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 22:59:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1595 (0x63b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Jun 3 19:31:22 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=683f4d89-7b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:ca:da:e4:ca:e0:0a:e9:90:fe:d5:7d:76:
17:9d:cd:5b:5d:b9:4a:c6:03:2a:77:8e:84:86:fc:
97:58:4e:89:77:c4:f3:93:ed:51:f3:6b:1a:08:2c:
a0:17:7e:76:f7:0f:c3:87:69:8d:02:ef:c2:ae:23:
6e:47:14:b9:ef:10:40:6d:92:50:fb:d2:03:50:6a:
e5:36:04:f1:1f:95:8c:80:52:26:75:48:2c:24:dd:
67:f6:d7:5f:b8:f3:93:76:c0:4a:f4:4a:0f:63:12:
5f:9d:2d:d8:8b:6a:2f:69:86:70:24:b2:fe:a7:97:
fe:49:a3:ac:63:d0:a6:87:1a:80:7e:d4:b5:bf:bc:
27:a4:cd:a6:bc:42:58:69:50:17:9e:ed:00:67:b0:
38:aa:e2:98:4a:a2:66:d4:c2:07:9e:8c:19:39:c0:
69:9a:50:cc:fb:3e:0f:f7:fa:e5:9b:b0:a9:aa:e4:
28:e5:c3:73:ea:ab:ed:ce:1f:4a:3e:1d:b2:aa:95:
f5:ab:e0:ea:ad:be:0f:8a:8c:b7:cd:85:a7:c2:55:
8d:82:10:e3:62:ee:bc:c4:75:9c:41:c9:7b:42:68:
6b:ad:d7:a9:d1:14:b3:9e:c0:55:ec:a7:03:e3:cc:
db:fa:88:3d:bf:9e:59:bf:bc:50:32:d6:83:8b:28:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:DD:A9:81:45:87:69:F8:C8:70:4A:E5:AC:00:85:DF:35:A2:AA
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E88EE726E93611EF9E3FF729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.17.0/24
122.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e5:e9:f4:61:dc:65:9f:71:a5:d9:38:82:c9:cb:2a:5f:2c:
28:40:00:aa:fa:9f:65:cb:27:d1:92:a9:10:97:60:1e:f3:df:
9b:f6:4f:66:f5:98:e5:8b:16:e3:15:ad:a1:3e:7d:48:ec:9d:
85:66:90:9d:1b:fc:91:46:d2:a3:db:89:1e:5c:eb:52:d0:56:
b4:c4:e3:65:5f:88:c4:db:a7:4b:08:04:c4:56:27:0a:c9:4e:
04:c7:53:55:f7:e6:90:d6:5a:c0:ef:20:77:db:bc:ab:e0:d1:
00:88:a7:0f:e7:a2:bc:b4:db:95:85:a6:9b:a3:6e:25:a0:a1:
95:20:73:13:9e:c8:74:d0:7c:ea:74:de:81:04:10:51:17:ac:
3c:30:13:32:d4:a8:2f:09:09:bc:e3:79:c2:c7:12:f9:2c:78:
b5:8f:ad:23:3f:4a:8b:f8:4e:cb:ec:a9:8f:3b:d2:da:6a:74:
a3:27:46:57:09:44:f0:8e:d5:8b:b9:5a:f9:c1:2d:4c:43:11:
69:be:65:9b:d2:c6:04:a1:26:7c:4f:f3:6b:65:7a:48:e4:a2:
81:30:04:35:10:a9:83:e2:16:5d:df:f1:d0:6f:cb:f5:eb:f1:
14:dd:fc:b8:4b:63:29:1e:90:24:c1:06:e7:93:50:70:64:03:
5c:c0:c1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:17:59 2025 by rpki-client