
$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
File: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (raw, json)
Hash identifier: g57FwhkXQlNtbgCZ9eTxeYlEqsu00SG/NfOG9n/2VFM=
Subject key identifier: 9B:8D:92:DB:FF:BF:A0:70:FD:AC:8D:6C:92:8A:63:1B:62:44:1F:18
Certificate issuer: /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial: 07BB
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
Signing time: Fri 12 Sep 2025 21:32:32 +0000
ROA not before: Fri 12 Sep 2025 21:32:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141158
IP address blocks: 103.155.132.0/23 maxlen: 23
103.155.132.0/24 maxlen: 24
103.155.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:24:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1979 (0x7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Validity
Not Before: Sep 12 21:32:32 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=68c49170-ef9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:63:37:ce:85:85:96:87:35:52:38:46:44:
7f:37:ec:21:49:5c:38:5f:e0:c4:bc:20:39:d9:28:
69:6a:94:48:69:88:a5:d2:68:48:87:e3:5a:0d:5d:
0f:e7:13:a7:7d:b7:8d:2b:b9:ba:e2:71:cc:73:6a:
1b:d2:d5:d3:b1:b6:58:2c:78:93:f4:32:c7:81:ad:
0b:96:22:b2:6c:a2:17:64:83:17:0e:f0:5c:78:67:
d8:ee:76:2f:c3:51:ef:a6:2a:73:fa:44:ec:7e:c3:
8a:aa:21:6b:62:e2:6c:76:d8:30:3b:32:12:28:88:
69:ee:ab:56:bc:e0:b5:27:87:03:d2:92:70:90:60:
2e:de:29:17:21:20:b6:e4:b5:d3:17:94:a9:ef:4b:
40:e3:bf:52:09:62:7c:7e:d2:59:95:d3:de:85:25:
87:c1:27:a3:52:31:62:cb:e0:d4:ab:31:94:ee:5e:
e9:a0:35:35:65:11:c1:f6:54:fd:cd:b5:75:0d:ee:
3b:2a:5e:14:80:55:0d:f2:33:93:fe:9c:86:a5:f0:
58:e6:e9:65:b3:c8:b8:5d:cf:bd:15:b1:24:a5:78:
4a:b0:83:03:35:48:b8:eb:d2:54:05:ce:77:56:cf:
f0:5e:b8:6f:91:af:72:9d:12:93:16:b9:5d:75:28:
b9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8D:92:DB:FF:BF:A0:70:FD:AC:8D:6C:92:8A:63:1B:62:44:1F:18
X509v3 Authority Key Identifier:
keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.132.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:93:07:95:74:fc:6a:2d:9b:df:04:86:12:ab:b7:00:b2:96:
26:e5:8e:19:99:f9:f2:e7:af:93:82:a5:c7:27:3a:62:02:59:
58:7e:ee:b3:b4:a4:74:ed:3c:c3:de:b2:27:7e:2d:f1:ec:ac:
92:bd:71:89:7e:ae:48:15:6f:88:7a:9b:fe:ee:9b:58:1c:c6:
ab:53:1c:cc:ec:a9:7e:4e:ae:62:ba:ba:79:9e:62:4a:a5:c3:
eb:07:3d:f3:37:51:5a:35:26:6d:c6:e0:e8:bb:09:6e:72:95:
ff:0a:17:a9:65:b5:dd:3b:1f:1c:1d:60:a7:07:7e:dd:a7:57:
cd:48:f7:8c:2a:3e:e1:12:ce:4e:37:d9:6a:93:5e:fd:f7:f7:
80:39:85:97:8a:4d:f0:a5:1f:14:b3:45:f6:ef:d3:2f:03:cf:
7b:d2:3a:00:00:d0:bf:51:cc:0b:ac:cd:e2:26:19:74:74:99:
c2:18:e9:60:10:9b:07:e6:fd:30:40:5b:7a:56:4b:d7:68:49:
51:62:e5:f4:03:9f:c6:45:c6:4f:37:12:ec:b9:0b:98:96:18:
41:e8:95:ff:f9:0b:76:f6:06:72:df:cd:1f:2d:10:44:d5:d4:
2d:67:e2:9f:6d:98:ae:77:fd:30:08:9a:04:5c:5b:5f:be:d7:
69:f7:e6:cb
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3
RUFFRkExNjgwHhcNMjUwOTEyMjEzMjMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGM0OTE3MC1lZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzohjN86FhZaHNVI4RkR/N+whSVw4X+DEvCA52ShpapRIaYil0mhIh+NaDV0P
5xOnfbeNK7m64nHMc2ob0tXTsbZYLHiT9DLHga0LliKybKIXZIMXDvBceGfY7nYv
w1Hvpipz+kTsfsOKqiFrYuJsdtgwOzISKIhp7qtWvOC1J4cD0pJwkGAu3ikXISC2
5LXTF5Sp70tA479SCWJ8ftJZldPehSWHwSejUjFiy+DUqzGU7l7poDU1ZRHB9lT9
zbV1De47Kl4UgFUN8jOT/pyGpfBY5ulls8i4Xc+9FbEkpXhKsIMDNUi469JUBc53
Vs/wXrhvka9ynRKTFrlddSi53QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJuNktv/
v6Bw/ayNbJKKYxtiRB8YMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5
OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA1NEQvNkUwODIzQjAxOThDMTFFQkFGQ0I5NDU5QzRGOUFFMDIvMENBQ0I1QUMx
OThFMTFFQkJERjYwMjc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnm4QwDQYJKoZIhvcNAQELBQADggEBAK6TB5V0/Gotm98E
hhKrtwCylibljhmZ+fLnr5OCpccnOmICWVh+7rO0pHTtPMPesid+LfHsrJK9cYl+
rkgVb4h6m/7um1gcxqtTHMzsqX5OrmK6unmeYkqlw+sHPfM3UVo1Jm3G4Oi7CW5y
lf8KF6lltd07HxwdYKcHft2nV81I94wqPuESzk432WqTXv3394A5hZeKTfClHxSz
Rfbv0y8Dz3vSOgAA0L9RzAuszeImGXR0mcIY6WAQmwfm/TBAW3pWS9doSVFi5fQD
n8ZFxk83Euy5C5iWGEHolf/5C3b2BnLfzR8tEETV1C1n4p9tmK53/TAImgRcW1++
12n35ss=
-----END CERTIFICATE-----
Generated at Thu Nov 6 02:56:54 2025 by rpki-client