
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa
File: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (raw, json)
Hash identifier: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=
Subject key identifier: 77:E5:D2:9D:59:29:20:EB:D5:43:0A:98:85:C1:28:67:79:C4:E6:51
Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Certificate serial: 0104
Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa
Signing time: Tue 29 Apr 2025 05:10:51 +0000
ROA not before: Tue 29 Apr 2025 05:10:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151370
IP address blocks: 103.212.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 04:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671
Validity
Not Before: Apr 29 05:10:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=68105f5b-abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:e1:8d:1a:88:11:b2:63:50:c9:2a:83:d6:
63:1e:a1:19:92:24:ef:5a:8a:21:06:4f:fc:49:e5:
65:8c:d2:af:a7:d9:ca:bf:7c:12:c0:8c:4f:0b:3f:
6a:57:eb:80:a0:fb:c1:d1:2e:7f:33:32:bd:d3:4a:
45:34:2a:2a:79:2e:28:59:85:9e:5c:bb:a6:db:8e:
f9:40:cd:60:10:06:84:09:f0:d6:75:55:40:f2:ac:
0d:d8:e5:7a:f1:a0:23:ad:77:67:8b:bd:00:0d:fb:
8b:17:92:71:9a:25:c4:29:76:d0:d5:a2:cb:ed:97:
34:d8:45:2c:e9:37:ee:36:f7:2e:7c:ec:bc:34:54:
b8:b9:d2:01:69:9b:73:d8:2d:55:b7:26:72:98:1f:
2d:7e:b5:1f:95:99:23:d9:21:ba:a6:f5:7b:c8:f4:
d8:c8:3f:03:81:dd:49:76:51:1f:fd:ac:f3:70:c0:
2c:c9:79:15:81:ae:89:f8:06:3c:a1:85:12:2c:91:
75:89:8d:c2:0a:68:03:ea:d5:91:c1:3d:fa:ad:b5:
cc:cf:2d:71:df:c7:3a:5d:79:61:ba:38:16:a0:17:
fe:e2:8d:7b:06:c7:a9:68:2d:0b:49:f3:43:46:61:
94:66:90:09:31:b7:88:d0:42:78:d2:01:58:d7:51:
7f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:D2:9D:59:29:20:EB:D5:43:0A:98:85:C1:28:67:79:C4:E6:51
X509v3 Authority Key Identifier:
keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/430FB1B69FC411EEBA6AB80AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.212.185.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:bf:01:c2:92:ec:df:b8:c7:46:7b:04:b2:3a:5e:1a:c4:ac:
f1:e6:8a:36:bc:e1:fd:92:9b:31:00:d9:81:a4:c6:83:81:7f:
18:12:2c:a1:44:57:16:57:d5:12:ff:f4:d7:46:e4:da:f6:3f:
bd:b2:88:e4:3a:43:f0:7b:08:b5:e1:00:55:34:4b:1b:4d:2f:
7a:b0:e4:35:ec:71:2c:8f:03:79:66:86:33:de:91:24:d3:3e:
88:7c:d2:d3:5a:38:33:2b:1e:81:6c:42:7f:4a:7d:03:11:68:
ad:c4:99:5c:a7:e6:e4:65:53:85:0d:0f:93:a7:52:9f:6f:b8:
bf:17:94:ae:3c:7c:93:4c:b9:1c:53:fc:d5:85:ee:e9:30:81:
2a:42:7b:24:13:3a:02:39:31:c8:36:b7:e7:69:53:45:c2:c2:
ed:f0:a8:34:bb:81:2d:b1:01:ab:0b:46:20:74:db:49:54:51:
d5:94:2f:78:b2:97:03:6d:f2:59:f6:9d:6e:5c:fc:6c:22:3c:
01:5a:18:45:77:2c:78:2c:c9:9b:ee:d8:73:3b:78:a2:84:b6:
f5:c0:59:4a:4b:71:18:de:ad:6a:07:d9:7b:75:34:06:ca:71:
7e:e4:ce:2e:68:db:4c:6a:e4:8b:7f:7e:5b:cc:c8:70:92:5a:
ac:ba:b9:3a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5
OTI5NzI2NzEwHhcNMjUwNDI5MDUxMDUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEwNWY1Yi1hYmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4rbhjRqIEbJjUMkqg9ZjHqEZkiTvWoohBk/8SeVljNKvp9nKv3wSwIxPCz9q
V+uAoPvB0S5/MzK900pFNCoqeS4oWYWeXLum2475QM1gEAaECfDWdVVA8qwN2OV6
8aAjrXdni70ADfuLF5JxmiXEKXbQ1aLL7Zc02EUs6TfuNvcufOy8NFS4udIBaZtz
2C1VtyZymB8tfrUflZkj2SG6pvV7yPTYyD8Dgd1JdlEf/azzcMAsyXkVga6J+AY8
oYUSLJF1iY3CCmgD6tWRwT36rbXMzy1x38c6XXlhujgWoBf+4o17BsepaC0LSfND
RmGUZpAJMbeI0EJ40gFY11F/xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHfl0p1Z
KSDr1UMKmIXBKGd5xOZRMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF
MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzNGNkMvOTEzODM2OEU5RTM4MTFFRUIxQzgwNzc2QzRGOUFFMDIvNDMwRkIxQjY5
RkM0MTFFRUJBNkFCODBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn1LkwDQYJKoZIhvcNAQELBQADggEBAOC/AcKS7N+4x0Z7
BLI6XhrErPHmija84f2SmzEA2YGkxoOBfxgSLKFEVxZX1RL/9NdG5Nr2P72yiOQ6
Q/B7CLXhAFU0SxtNL3qw5DXscSyPA3lmhjPekSTTPoh80tNaODMrHoFsQn9KfQMR
aK3EmVyn5uRlU4UND5OnUp9vuL8XlK48fJNMuRxT/NWF7ukwgSpCeyQTOgI5Mcg2
t+dpU0XCwu3wqDS7gS2xAasLRiB020lUUdWUL3iylwNt8ln2nW5c/GwiPAFaGEV3
LHgsyZvu2HM7eKKEtvXAWUpLcRjerWoH2Xt1NAbKcX7kzi5o20xq5It/flvMyHCS
Wqy6uTo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:08:10 2025 by rpki-client