
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/381AA9660EE711EC850D193BC4F9AE02.roa
File: 381AA9660EE711EC850D193BC4F9AE02.roa (raw, json)
Hash identifier: 8MfWeNhYxhDpcu3Q2id403p9h7HPr5MWk8+ke8t8UDg=
Subject key identifier: B9:78:C9:A9:0D:22:E5:BF:52:7E:D0:47:83:3E:F8:FF:C5:2F:8B:73
Certificate issuer: /CN=A9187C44/serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Certificate serial: 055C
Authority key identifier: D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/381AA9660EE711EC850D193BC4F9AE02.roa
Signing time: Tue 04 Nov 2025 23:44:03 +0000
ROA not before: Tue 04 Nov 2025 23:44:03 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 138040
IP address blocks: 103.120.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 23:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1372 (0x55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187C44, serialNumber=D76E61B99F753EFEF7987F4B34A8AD33297803AC
Validity
Not Before: Nov 4 23:44:03 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=690a8fc3-f6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:00:7f:07:66:e3:8a:d8:f2:01:ff:f4:05:
79:75:2a:4e:65:df:a1:6c:59:27:de:94:2a:f6:e3:
00:d5:f0:70:20:59:84:4b:84:de:90:27:f6:1e:a5:
c1:7d:e0:6f:fa:c5:34:10:c4:fc:5f:5d:32:68:ab:
b6:cc:ed:cc:34:2b:f6:fb:77:56:44:63:c7:30:be:
58:97:ee:d1:c4:80:f6:45:39:3d:03:51:6d:89:e5:
c6:15:d9:0e:01:a1:07:23:c9:61:ec:85:4b:ca:ae:
27:c7:a2:ce:1a:e5:e8:cd:50:6b:5c:81:63:04:77:
5f:ab:6a:b0:86:36:e1:2b:3e:85:09:74:8c:dc:89:
56:bb:74:e0:c2:68:29:0f:c3:03:f9:22:6b:a0:4d:
97:25:38:49:ca:6e:3f:9c:cb:10:98:9f:fa:e6:9f:
8b:29:b5:21:4e:37:42:14:48:f1:04:17:25:5c:dd:
8d:38:94:8c:bd:88:be:49:72:1d:fc:6c:e4:8f:c7:
87:b4:40:7d:5d:ef:99:01:fe:6f:34:7b:d0:ba:44:
d9:f9:ed:65:c6:12:3e:bb:92:08:8e:58:82:85:09:
fa:2a:78:f9:56:7a:95:66:8b:d5:ae:7b:14:07:e0:
50:ef:43:e3:32:fa:73:41:c2:bf:08:0d:94:32:c5:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:C9:A9:0D:22:E5:BF:52:7E:D0:47:83:3E:F8:FF:C5:2F:8B:73
X509v3 Authority Key Identifier:
keyid:D7:6E:61:B9:9F:75:3E:FE:F7:98:7F:4B:34:A8:AD:33:29:78:03:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/125huZ91Pv73mH9LNKitMyl4A6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/125huZ91Pv73mH9LNKitMyl4A6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187C44/8C6F08F80EE311ECA2EEDA32C4F9AE02/381AA9660EE711EC850D193BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.136.0/24
Signature Algorithm: sha256WithRSAEncryption
63:17:ef:60:b3:27:b5:8a:38:80:4c:65:26:7d:5b:9e:80:66:
51:b1:d3:8d:65:e3:02:01:1d:45:61:fd:a6:b7:d9:74:9a:ca:
b7:a5:8b:e0:d3:4d:ce:96:d8:9e:ec:6f:f7:f3:91:df:04:c3:
39:a2:a6:21:dc:e8:5c:03:91:26:13:a5:77:da:fe:be:a1:26:
24:46:df:b3:76:43:05:3a:56:84:b1:3c:b0:9c:23:06:80:37:
57:46:21:f2:06:da:83:0c:79:c6:3f:af:0e:39:33:97:33:17:
5a:aa:64:0a:e7:94:a4:6e:e9:15:82:1a:b9:51:91:e8:b8:e1:
52:f9:5b:b2:8e:45:65:0d:13:12:19:28:df:6b:e0:07:0c:89:
af:7d:4e:07:7c:3e:ef:e4:c3:ac:02:4b:b4:48:fd:b7:92:60:
54:ed:89:3f:f6:c8:f8:e4:53:22:0a:9c:8a:8e:1c:f5:2d:73:
85:dc:f9:0d:9d:68:ee:00:fd:bc:df:17:5a:9f:b9:62:ca:2b:
97:b7:4c:b6:70:9e:5c:cf:ba:85:55:9b:3b:fc:35:d1:49:b8:
6a:15:88:f0:80:92:ba:27:25:4a:87:31:26:a4:11:89:c4:74:
89:53:06:58:ed:cd:dc:19:f1:34:c1:02:56:45:31:a6:a0:67:
14:30:dc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:32:03 2025 by rpki-client