
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
File: 681E9EECCAC111ECA0AC3E32C4F9AE02.roa (raw, json)
Hash identifier: yx0tgJAxnt6G+jTtg9/EBjHjIHPyHzwd9ZlOS5AoF1w=
Subject key identifier: 4A:7B:4F:AD:81:48:5C:6F:31:5B:B6:02:87:69:2B:C0:D6:C2:7C:2B
Certificate issuer: /CN=A9182B6F/serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Certificate serial: 0324
Authority key identifier: 79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
Signing time: Fri 09 May 2025 01:14:49 +0000
ROA not before: Fri 09 May 2025 01:14:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134242
IP address blocks: 103.111.16.0/22 maxlen: 22
103.111.16.0/24 maxlen: 24
103.111.17.0/24 maxlen: 24
103.111.18.0/24 maxlen: 24
103.111.19.0/24 maxlen: 24
2402:9340::/32 maxlen: 32
2402:9340:1000::/36 maxlen: 36
2402:9340:2000::/36 maxlen: 36
2402:9340:3000::/36 maxlen: 36
2402:9340:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182B6F, serialNumber=796A44CF1B70F4A9F9E6A5FFB009BB7860F35580
Validity
Not Before: May 9 01:14:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681d5708-af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:d2:3b:06:45:18:2e:82:a8:73:54:d6:6e:
53:ce:b2:e5:ed:62:62:75:36:e7:26:13:6e:ba:10:
06:30:8c:c0:0f:be:12:40:98:f5:35:e3:82:3c:73:
b4:e1:37:91:2d:f2:f3:dc:fc:c1:1d:dc:41:3a:34:
b9:2c:ff:a0:16:3c:ce:24:95:b4:7f:55:07:05:9b:
ad:e9:f7:af:9d:c5:54:68:a3:38:49:b4:a1:cd:59:
51:a0:68:7d:ea:17:a7:62:55:84:8f:cc:9f:73:91:
b5:a2:28:f7:cc:9e:ef:aa:87:27:92:b1:c9:7b:8e:
0c:3d:22:e9:01:e6:8a:18:a5:15:59:5b:96:4f:42:
c6:8b:ef:ba:6c:32:9c:96:5a:2f:ff:b8:79:47:74:
f5:29:c7:90:1f:45:74:94:97:3c:94:d1:29:b1:7d:
f7:30:a2:74:b1:63:23:b8:2b:79:e5:bd:7a:33:19:
f8:c2:bc:c0:3b:e3:aa:88:fa:39:6a:cc:31:57:e6:
1d:6c:69:f6:08:80:c8:bc:9f:c1:ef:7f:a1:fa:b2:
de:fe:a2:c4:f8:87:3b:b7:34:fc:6f:06:eb:c6:c5:
c7:59:b3:97:7a:cc:b7:95:97:db:d2:83:1a:63:c8:
19:7a:b6:bc:25:66:e6:86:9f:b5:54:61:22:cf:34:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7B:4F:AD:81:48:5C:6F:31:5B:B6:02:87:69:2B:C0:D6:C2:7C:2B
X509v3 Authority Key Identifier:
keyid:79:6A:44:CF:1B:70:F4:A9:F9:E6:A5:FF:B0:09:BB:78:60:F3:55:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/eWpEzxtw9Kn55qX_sAm7eGDzVYA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eWpEzxtw9Kn55qX_sAm7eGDzVYA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182B6F/F7F9476EC8B011ECA8847949C4F9AE02/681E9EECCAC111ECA0AC3E32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.16.0/22
IPv6:
2402:9340::/32
Signature Algorithm: sha256WithRSAEncryption
99:b5:1e:4a:60:07:6e:ca:19:af:1e:ad:a1:20:7d:93:6c:01:
b5:96:91:3c:4b:86:2e:ef:00:12:4d:98:ee:5f:03:05:46:01:
30:37:53:3b:93:29:c9:e2:46:49:dd:1a:c8:c7:9a:a9:e1:cc:
d8:e6:f5:b2:6e:68:cc:f1:dc:04:8e:08:1a:89:0c:d1:57:be:
65:25:4c:aa:64:94:00:6a:3e:2a:62:03:e5:f5:ac:84:0a:fe:
e6:37:04:72:38:6c:35:0e:c4:ad:40:66:b0:6f:b7:78:72:b8:
8b:eb:d2:cc:ce:45:2c:ad:29:7b:da:83:21:e8:38:f9:21:0d:
00:65:81:ad:df:78:b7:04:ae:f4:d9:20:23:9b:c5:ce:83:3e:
16:e7:e7:7e:33:2b:c2:c7:25:08:93:50:3b:66:3d:6d:3c:8b:
74:a7:d7:0e:ec:4b:40:b7:6c:7b:1c:77:c1:72:66:14:d1:4a:
35:d8:41:e9:82:4a:0e:66:e6:dd:10:d9:41:c1:f6:ec:e0:3b:
dd:c2:c9:e9:33:75:86:ba:03:ee:b3:2b:d6:b3:a1:6d:1f:19:
5c:c5:8e:80:7c:42:c0:35:48:ac:27:8d:b4:e1:54:f3:2f:64:
6c:9c:d5:84:8e:4e:29:5d:20:ca:9a:14:06:91:c0:84:56:27:
66:8b:c7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 04:44:18 2025 by rpki-client