
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
File: 1F820766D66F11EAB2766134C4F9AE02.roa (raw, json)
Hash identifier: FxDMGItivgHcpDIQVI/wEfT2xKykaCPSfnkqAOljfEM=
Subject key identifier: A9:96:F8:EE:04:0D:0F:91:22:BD:CE:BC:C8:6C:A4:FB:FA:9B:CA:1E
Certificate issuer: /CN=A9186584/serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Certificate serial: 0849
Authority key identifier: 31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
Signing time: Wed 20 Aug 2025 21:01:52 +0000
ROA not before: Wed 20 Aug 2025 21:01:52 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 58456
IP address blocks: 103.5.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 20:41:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2121 (0x849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186584, serialNumber=31F50419EF19B0FDA61B66390C12EEAF6ECBE741
Validity
Not Before: Aug 20 21:01:52 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68a637c0-4983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:da:c8:40:7b:fe:6f:62:26:a6:62:0e:78:
ec:ca:7a:30:08:c8:64:0e:4c:85:a0:1f:72:a1:c6:
a8:e7:f5:c8:ae:b2:e1:61:46:42:6e:94:18:94:8b:
68:a6:f6:80:7a:8b:49:86:32:80:b2:36:9b:dd:71:
40:09:a5:36:0a:54:23:7b:83:79:39:56:4f:00:ca:
55:46:9f:9d:63:a1:b2:f8:68:2e:08:d7:8f:bd:ff:
ef:3e:73:d6:48:ca:3d:25:e8:73:73:7e:10:46:ec:
0b:52:6a:f9:29:96:de:75:de:69:ee:7f:7a:da:71:
f9:0d:88:fd:91:42:ba:cd:78:7a:e2:35:fa:31:18:
b3:0a:eb:c2:33:e3:14:34:62:f8:5d:ae:5e:99:98:
28:66:0d:d0:42:f0:0b:a0:5a:b7:3e:55:25:91:69:
ff:18:01:88:2f:57:0e:11:74:6d:73:ca:72:7b:8c:
65:46:13:f1:c1:44:6b:cc:96:de:58:35:7d:b4:07:
78:67:35:c6:0c:39:23:a1:c7:6a:eb:c4:9f:24:29:
2e:9f:05:cd:21:1f:09:a2:8d:68:12:e4:5b:dd:06:
5b:07:37:a4:f2:84:be:03:71:e1:67:96:8c:cd:00:
ef:65:2b:92:5c:64:a4:24:ec:82:22:19:8e:03:3f:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:96:F8:EE:04:0D:0F:91:22:BD:CE:BC:C8:6C:A4:FB:FA:9B:CA:1E
X509v3 Authority Key Identifier:
keyid:31:F5:04:19:EF:19:B0:FD:A6:1B:66:39:0C:12:EE:AF:6E:CB:E7:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/MfUEGe8ZsP2mG2Y5DBLur27L50E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfUEGe8ZsP2mG2Y5DBLur27L50E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186584/53F0FEE0D66E11EAB7F33534C4F9AE02/1F820766D66F11EAB2766134C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.5.150.0/24
Signature Algorithm: sha256WithRSAEncryption
85:02:e8:b3:d5:40:01:83:e3:f4:0a:2f:0b:7e:1d:02:de:88:
34:6e:d8:bf:ad:c9:98:81:8e:dd:43:31:a6:d3:12:30:cf:72:
c1:37:f0:a8:63:5b:5f:03:d5:90:1f:4f:a6:d1:4d:14:88:3a:
32:e2:5d:2d:44:1c:5f:b4:6d:9f:87:82:12:36:2a:f9:7d:32:
f0:3d:30:fc:c7:04:ef:56:c4:84:b5:e3:3f:01:fa:ab:d3:fb:
92:91:e8:cf:08:50:f3:3f:50:b3:49:a5:26:7a:74:7d:61:30:
72:a5:90:c5:41:b3:03:56:c0:f5:3c:0b:84:ce:a9:37:1a:ca:
ba:76:d9:90:cd:ef:60:06:97:76:c6:7a:db:ff:bb:98:16:aa:
cc:87:32:41:ff:74:12:d7:12:ec:40:c2:44:08:62:a5:4b:b9:
9e:fe:8c:58:b0:4b:79:4c:7c:71:a2:f9:63:45:5d:26:77:b6:
f3:9c:63:7a:f4:5a:ad:55:44:46:9a:a5:23:2e:fe:72:15:c4:
2b:fe:f5:05:fb:47:5e:84:6d:14:3f:49:e6:f6:40:76:9c:fb:
dd:77:f9:4a:01:ec:71:da:06:bd:dd:6b:57:6e:fe:5f:34:34:
1f:6b:e8:79:a7:b6:0c:e5:2b:57:2b:ee:8e:b7:9b:38:6e:47:
91:27:fc:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY1ODQxMTAvBgNVBAUTKDMxRjUwNDE5RUYxOUIwRkRBNjFCNjYzOTBDMTJFRUFG
NkVDQkU3NDEwHhcNMjUwODIwMjEwMTUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE2MzdjMC00OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5rnayEB7/m9iJqZiDnjsynowCMhkDkyFoB9yocao5/XIrrLhYUZCbpQYlIto
pvaAeotJhjKAsjab3XFACaU2ClQje4N5OVZPAMpVRp+dY6Gy+GguCNePvf/vPnPW
SMo9Jehzc34QRuwLUmr5KZbedd5p7n962nH5DYj9kUK6zXh64jX6MRizCuvCM+MU
NGL4Xa5emZgoZg3QQvALoFq3PlUlkWn/GAGIL1cOEXRtc8pye4xlRhPxwURrzJbe
WDV9tAd4ZzXGDDkjocdq68SfJCkunwXNIR8Joo1oEuRb3QZbBzek8oS+A3HhZ5aM
zQDvZSuSXGSkJOyCIhmOAz//cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKmW+O4E
DQ+RIr3OvMhspPv6m8oeMB8GA1UdIwQYMBaAFDH1BBnvGbD9phtmOQwS7q9uy+dB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjU4NC81M0YwRkVFMEQ2
NkUxMUVBQjdGMzM1MzRDNEY5QUUwMi9NZlVFR2U4WnNQMm1HMlk1REJMdXIyN0w1
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01mVUVHZThac1AybUcyWTVEQkx1cjI3TDUwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODY1ODQvNTNGMEZFRTBENjZFMTFFQUI3RjMzNTM0QzRGOUFFMDIvMUY4MjA3NjZE
NjZGMTFFQUIyNzY2MTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnBZYwDQYJKoZIhvcNAQELBQADggEBAIUC6LPVQAGD4/QK
Lwt+HQLeiDRu2L+tyZiBjt1DMabTEjDPcsE38KhjW18D1ZAfT6bRTRSIOjLiXS1E
HF+0bZ+HghI2Kvl9MvA9MPzHBO9WxIS14z8B+qvT+5KR6M8IUPM/ULNJpSZ6dH1h
MHKlkMVBswNWwPU8C4TOqTcayrp22ZDN72AGl3bGetv/u5gWqsyHMkH/dBLXEuxA
wkQIYqVLuZ7+jFiwS3lMfHGi+WNFXSZ3tvOcY3r0Wq1VREaapSMu/nIVxCv+9QX7
R16EbRQ/Seb2QHac+913+UoB7HHaBr3da1du/l80NB9r6HmntgzlK1cr7o63mzhu
R5En/OI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:17:05 2025 by rpki-client