
$ rpki-client -vvf rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/919ECCA8412C11F09E17FC56C4F9AE02.roa
File: 919ECCA8412C11F09E17FC56C4F9AE02.roa (raw, json)
Hash identifier: F9SWB+aMa8yAFDLLoHpTZLS07WYExS6i1iQ0h3SINVA=
Subject key identifier: B0:0D:4A:08:74:10:F8:7C:C9:D5:69:4E:37:DE:CA:EE:90:AA:04:9C
Certificate issuer: /CN=A916E501/serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Certificate serial: 078D
Authority key identifier: 43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/919ECCA8412C11F09E17FC56C4F9AE02.roa
Signing time: Tue 28 Oct 2025 21:40:59 +0000
ROA not before: Tue 28 Oct 2025 21:40:59 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 141423
IP address blocks: 103.159.0.0/23 maxlen: 23
103.159.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1933 (0x78d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E501, serialNumber=43B39C8FA3346D6319EA49BC5A067EEFE0D3446D
Validity
Not Before: Oct 28 21:40:59 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6901386b-372e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d3:2a:67:6c:c8:1a:0e:3e:ff:52:76:6a:42:
04:6a:a3:7d:2b:a2:62:39:49:62:75:d6:f7:7a:05:
d5:fe:92:99:9b:29:31:7a:e7:43:bb:a2:2d:01:92:
73:82:a0:38:61:9a:99:e5:d6:d0:a9:11:8c:ed:ae:
fe:e9:48:8c:6c:d6:c1:db:92:85:3e:b2:2e:14:18:
23:f3:60:58:64:22:79:8e:e9:b6:82:27:c0:07:d5:
08:a5:53:08:a2:72:04:ed:5d:4f:d7:59:74:b3:12:
23:79:e1:64:4a:13:b6:88:3a:30:56:83:d1:95:20:
ce:27:b8:80:7e:89:88:ef:35:de:e5:73:ff:b3:0b:
86:51:5b:8f:93:e0:da:2a:ed:4d:00:4d:65:6a:97:
e1:d4:00:35:94:4e:eb:bd:b9:b3:c1:14:06:81:b8:
88:e1:ff:39:9c:62:df:49:e6:f4:7e:d3:7f:81:dc:
30:06:5a:b0:cb:7f:ff:85:88:9e:25:02:0d:2b:67:
63:df:34:e3:7f:59:05:c9:0e:57:7d:40:be:61:13:
0f:80:ed:57:da:8e:70:00:6c:9f:03:95:f4:3d:ab:
aa:f6:ec:c7:09:ca:70:33:cc:ca:b3:61:18:06:a9:
6a:20:e0:30:9b:6e:30:03:d4:35:de:65:1d:8a:60:
87:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0D:4A:08:74:10:F8:7C:C9:D5:69:4E:37:DE:CA:EE:90:AA:04:9C
X509v3 Authority Key Identifier:
keyid:43:B3:9C:8F:A3:34:6D:63:19:EA:49:BC:5A:06:7E:EF:E0:D3:44:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q7Ocj6M0bWMZ6km8WgZ-7-DTRG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E501/2B2D88042FB311EBB58A463DC4F9AE02/919ECCA8412C11F09E17FC56C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:13:48:06:97:4d:14:50:87:1a:d5:01:26:fd:f3:e4:58:c0:
90:27:75:a0:78:56:ff:55:1b:29:f2:c2:68:a0:70:3c:b1:e3:
9e:50:79:d2:2d:9d:bb:20:57:e8:9b:89:bc:7d:ef:25:e6:4e:
c6:7f:c9:d1:67:76:6e:54:0f:90:1a:89:fd:c9:5c:1d:da:af:
82:59:88:00:16:71:e6:b7:18:d3:26:c4:72:56:5d:be:b7:bd:
e7:72:71:1e:fa:3a:67:e7:3c:8d:bb:4b:57:91:d8:d6:29:aa:
0e:1f:18:e4:86:8e:61:9e:b6:5c:bc:19:4c:da:c9:e8:18:7c:
23:b8:91:14:b7:17:54:e7:02:65:0b:0f:06:00:66:d3:10:4f:
88:b8:b1:4f:d2:50:70:eb:fa:90:82:f3:75:94:0c:3e:34:f7:
5d:1e:f1:8e:21:a4:02:72:45:c6:c8:ac:f4:c6:42:92:57:3f:
d0:df:d4:3d:a9:d3:37:e5:84:48:6e:28:74:7d:ae:f2:cd:c2:
19:58:08:ff:d8:35:d6:e6:c3:ab:be:44:85:6e:7c:6b:a8:b0:
9b:d1:c0:e0:82:95:e5:72:b5:43:84:77:b4:23:3b:c4:dd:78:
29:20:eb:34:6e:7d:39:df:65:96:17:fb:7e:bb:07:85:b5:4d:
6f:e8:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:00:19 2025 by rpki-client