
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
File: B781FD5C8FB411EAA396FB5CC4F9AE02.roa (raw, json)
Hash identifier: Ox2JzCz1n/Zcged2uhXaHgWO3+p3E4q9pZj/D0/CtLo=
Subject key identifier: B6:8F:05:53:82:A0:C3:29:75:97:60:B1:73:69:06:C7:6A:B3:2A:68
Certificate issuer: /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial: 09D7
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
Signing time: Sun 02 Nov 2025 20:09:45 +0000
ROA not before: Sun 02 Nov 2025 20:09:45 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133936
IP address blocks: 103.144.204.0/23 maxlen: 23
103.144.204.0/24 maxlen: 24
103.144.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 20:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519 (0x9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Validity
Not Before: Nov 2 20:09:45 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6907ba89-9223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:55:f7:0a:e0:91:83:30:6f:37:43:ed:c1:
34:d3:9e:f1:cb:0b:7a:8d:09:84:c1:b4:c4:0b:b9:
c3:93:0a:fd:b6:50:17:7f:a2:c8:91:fa:c1:a7:17:
70:81:4f:f3:c4:91:63:27:dc:c5:23:f2:1d:63:b2:
4d:e5:23:2f:f5:05:42:89:06:86:5c:56:27:46:aa:
16:ff:6e:35:0c:99:eb:90:44:bc:f5:1d:e7:38:e0:
01:f6:02:6a:a9:f4:e4:05:80:68:f5:6a:c1:1e:19:
16:ff:e4:9e:50:82:1d:40:2f:91:42:4c:73:0b:b1:
db:98:d4:04:17:c5:43:9d:00:57:0a:9b:6e:3f:d5:
88:63:52:9e:e9:f6:d5:a1:6e:d3:3b:d6:a5:2f:c2:
6f:a3:7c:43:b2:8c:41:05:37:2f:6c:b2:33:4c:60:
2f:85:21:d7:6e:f5:cf:77:c9:8d:2e:d6:14:0a:e9:
7f:e5:58:0d:e3:90:7c:b2:ae:91:8c:b6:b9:0c:74:
e5:78:86:db:0e:ae:c5:03:d2:ea:6a:11:c6:14:bb:
50:5a:d3:3f:d8:50:4f:b8:da:f6:20:58:4f:bd:40:
53:11:cb:36:b7:a4:40:99:c7:06:f4:2a:d2:d8:ff:
56:7b:8f:92:19:27:67:5c:8c:6e:dd:ae:5a:6e:e6:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:05:53:82:A0:C3:29:75:97:60:B1:73:69:06:C7:6A:B3:2A:68
X509v3 Authority Key Identifier:
keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.204.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:f2:e1:3f:c3:8b:95:5d:af:36:73:f1:3a:69:90:6d:d2:f0:
b3:4f:da:2f:60:96:e6:a3:8c:bf:08:e3:f4:e3:ed:bf:2b:8d:
59:85:8d:32:b2:a2:8b:ec:1b:54:ed:b0:78:cb:4a:d6:ea:14:
5d:39:69:a0:98:d6:7d:79:59:4c:82:d6:cc:a6:96:60:35:ae:
bd:76:07:dc:a3:c8:6a:71:cb:e4:a2:6c:f9:2e:22:d4:ae:8e:
c2:76:5a:bd:fa:ac:c4:56:bb:b3:d0:b5:2f:46:1c:05:ae:a9:
fe:77:4f:dd:cb:00:c8:71:e9:bf:44:ca:cf:29:0f:c0:f7:d5:
72:7c:cf:3d:6f:9a:20:3a:99:ae:e9:9f:d5:8f:ed:c7:5b:ab:
48:22:f3:4f:a0:ba:07:02:7a:a6:c2:bb:55:b0:be:d9:12:b6:
80:3e:f6:aa:77:e2:6f:7a:5f:3e:59:af:e6:de:fb:fd:b4:a1:
48:86:d4:19:60:32:7b:0a:a4:3b:69:84:8e:c8:07:5b:63:db:
a4:2a:e7:65:a3:90:3e:a1:91:bb:bf:cd:d9:7e:d8:20:c2:92:
39:62:85:6e:e3:e6:2e:03:69:c2:1c:bf:aa:40:b2:a3:cd:04:
cb:dd:b5:1c:70:88:f1:da:fd:d5:0f:c7:e6:d5:57:89:4b:c9:
04:cd:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:48 2025 by rpki-client