
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
File: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (raw, json)
Hash identifier: ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=
Subject key identifier: 9B:43:9B:0E:9A:29:17:EB:63:E3:BB:9A:D7:21:DE:32:1F:54:12:F4
Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial: 0381
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
Signing time: Thu 27 Mar 2025 01:07:15 +0000
ROA not before: Thu 27 Mar 2025 01:07:15 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 149518
IP address blocks: 103.182.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Validity
Not Before: Mar 27 01:07:15 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e4a4c2-2d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:f4:d0:74:bd:a7:35:84:f1:d2:78:35:30:
ea:f3:16:a2:50:57:79:0d:d3:62:b9:ab:b3:20:4f:
ec:46:2f:44:2e:6a:cb:da:48:1a:18:b1:84:09:32:
04:7a:39:d6:d3:0f:0f:ce:84:30:58:d0:4b:2d:6c:
20:ab:c3:d1:20:e2:75:b6:53:8d:ec:50:9f:78:63:
08:3f:0d:ab:f2:75:99:b1:9b:18:a0:71:95:94:b3:
4d:6a:02:a7:46:b9:76:43:1c:57:c4:7a:da:75:a3:
a3:04:41:c8:b5:46:87:bb:6c:34:7f:b9:d6:dc:39:
73:cc:b9:fd:25:f2:82:36:71:be:9c:40:b4:25:f4:
0a:7b:09:5e:4a:d8:a1:93:f3:d7:cf:47:ff:e0:38:
e8:d0:74:db:0c:5a:f3:cc:c5:c8:a2:04:6f:29:9d:
12:9b:cb:b8:7a:ca:75:24:fd:c7:0a:2c:bc:07:a6:
5b:af:bf:75:01:9d:a6:55:d4:5e:f7:9c:4d:bf:98:
82:d4:91:15:a1:53:0e:d5:1a:cb:7d:e7:d1:45:68:
f2:2d:28:f4:58:d0:c2:19:19:60:8b:82:d2:c9:96:
ee:db:29:37:d0:77:c8:34:f8:7d:a8:4c:21:d5:dc:
10:ac:82:69:f8:6f:be:cc:75:26:6e:8a:ce:ed:35:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:43:9B:0E:9A:29:17:EB:63:E3:BB:9A:D7:21:DE:32:1F:54:12:F4
X509v3 Authority Key Identifier:
keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.73.0/24
Signature Algorithm: sha256WithRSAEncryption
42:9e:3c:ec:f0:a4:e6:60:22:12:ba:6c:a0:4e:34:1e:9b:a8:
c3:fe:67:f3:04:e2:29:73:fe:8e:14:f0:0a:40:61:a1:35:33:
9b:3b:40:23:2c:4e:26:86:1b:d6:84:2d:3b:9b:ae:94:b1:b9:
f1:ce:d6:63:10:ca:77:d4:da:66:20:22:57:0a:9d:34:e2:83:
a4:12:d3:e6:81:94:1b:f0:d3:ad:5d:19:7e:af:d7:77:98:e3:
05:be:b5:6f:a1:44:8d:8b:98:17:60:49:bf:b3:48:ca:8f:b8:
96:8c:c9:5d:29:79:90:d0:18:e9:86:74:a8:63:11:36:2a:8c:
ba:45:ab:49:b9:cd:2c:0e:ce:51:a8:d1:bc:2a:ec:23:53:58:
10:8a:33:7a:22:ae:2e:df:5f:67:ca:1f:5d:63:ab:3c:7f:02:
b1:fa:da:d0:27:5a:e2:be:02:5a:5c:90:be:4e:b9:3c:1c:4d:
a9:2e:5b:7f:4c:ca:d7:c6:25:99:94:f4:16:08:05:dc:ee:e6:
79:df:65:71:9c:53:72:53:29:d0:3a:cc:8e:5a:ea:d4:d5:e9:
24:7c:93:18:8b:62:51:56:aa:36:0e:f5:63:0f:f3:c9:37:ef:
81:e9:eb:8c:b6:12:a4:38:18:57:a3:d1:b9:ca:82:77:97:be:
b6:f2:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:14:48 2025 by rpki-client