
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/1BE631B0668C11F092BB0479C4F9AE02.roa
File: 1BE631B0668C11F092BB0479C4F9AE02.roa (raw, json)
Hash identifier: 889zGZBsMfgV1bTIc5AsOgt3rk6bmVAUBCLPcamrp9o=
Subject key identifier: 15:12:00:7B:07:A4:60:5C:AF:C7:B0:D6:43:B3:D4:78:96:70:41:5D
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: 61
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/1BE631B0668C11F092BB0479C4F9AE02.roa
Signing time: Mon 21 Jul 2025 23:40:40 +0000
ROA not before: Mon 21 Jul 2025 23:40:40 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 63917
IP address blocks: 103.44.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:41:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: Jul 21 23:40:40 2025 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=687ecff8-62a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:20:9f:dd:94:ff:d4:1b:8c:1c:dd:27:c1:
47:de:9b:66:62:b9:d1:3f:c2:1c:16:f7:8c:e2:1b:
ca:59:bc:af:78:41:59:53:47:12:73:dd:ae:70:03:
8a:37:9c:33:37:7d:08:65:b8:e5:30:f4:f5:04:cf:
29:cb:43:65:d2:b0:a9:b8:4a:c9:c7:e7:05:fa:92:
7c:1d:9d:8b:f0:2b:ae:89:bd:73:90:df:b0:87:37:
65:a2:9e:50:0a:3a:f6:4e:0a:4d:72:a3:ae:67:08:
be:ff:de:e6:8b:18:c3:9d:db:a3:c6:f0:e1:0d:51:
c9:c6:b7:75:d8:01:eb:36:82:e1:42:21:4e:14:87:
69:19:4c:c7:20:00:15:36:26:aa:fb:77:1f:dc:6a:
6e:49:67:81:53:ce:22:be:5f:c6:0d:a0:0d:2d:94:
83:5e:34:83:30:97:c2:5a:36:50:82:e4:1b:c9:4d:
bd:ff:30:26:f6:be:53:2a:f8:14:83:4e:90:13:1d:
c3:cc:f5:65:ee:0d:20:6c:cc:5d:70:29:0c:a8:71:
05:eb:55:f4:ed:1f:e1:5a:11:e2:65:59:bf:ca:c7:
f6:77:d9:97:5d:d7:fb:37:57:b9:45:11:b6:d7:2e:
ff:fe:3b:d1:c3:5e:e2:65:3c:22:9c:18:f6:14:e7:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:12:00:7B:07:A4:60:5C:AF:C7:B0:D6:43:B3:D4:78:96:70:41:5D
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/1BE631B0668C11F092BB0479C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.16.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9a:1b:cd:3a:c2:5e:d9:e7:2e:f9:1d:24:cf:6b:81:85:1a:
0b:a1:24:d5:5b:3f:e1:e0:a2:d1:98:e4:3b:a7:8a:0e:2d:cb:
a5:f5:cf:51:34:ad:c2:57:a1:b5:87:75:cf:e1:d0:3f:b1:dd:
29:0f:e7:e3:49:b6:5b:f4:9d:36:21:e4:0e:53:8e:75:53:82:
65:c9:e1:98:09:45:0a:81:ee:d8:d3:00:06:3f:54:a3:41:00:
e6:81:35:81:ec:14:cb:d4:df:72:fb:90:a6:38:2e:81:07:9e:
2b:ee:a9:d1:9a:92:50:9f:41:6f:62:9d:21:28:62:0f:b3:73:
a2:cf:9e:47:b5:bf:cc:d6:ec:f4:33:e9:63:9e:70:cb:6a:6a:
df:1b:65:08:15:a8:5c:e7:41:61:a2:a9:1d:f8:e9:66:20:4b:
dd:a5:b8:be:35:7f:ae:81:8d:db:36:0b:86:ab:69:74:e4:f5:
d4:a8:97:4b:85:2a:84:72:bb:c5:dc:f7:68:db:03:64:66:28:
25:62:ab:8a:01:1c:3e:91:ac:0d:c2:38:60:c1:f2:d5:3d:ea:
28:fd:8a:ed:9d:2d:5d:88:c7:31:a1:a3:51:6c:06:4d:16:2e:
dd:0f:0f:78:05:54:f5:59:e9:c9:3d:15:0c:85:3a:6a:05:89:
6a:06:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:27:41 2025 by rpki-client