
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
File: 62C86698F80A11EFA400AC2FC4F9AE02.roa (raw, json)
Hash identifier: iou6EnoDniALad6Yrel3h0kHQ1grK3uoWpHvIkBO8LI=
Subject key identifier: C9:DF:50:F0:36:E5:6A:A6:D2:00:04:FB:FF:D9:CB:00:84:C1:30:B8
Certificate issuer: /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial: 78
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
Signing time: Fri 17 Oct 2025 10:43:01 +0000
ROA not before: Fri 17 Oct 2025 10:43:01 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137198
IP address blocks: 103.104.179.0/24 maxlen: 24
2001:df3:5700::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 06:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Validity
Not Before: Oct 17 10:43:01 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=68f21db4-fa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:e0:a1:a1:2f:da:f7:cd:f5:6b:b2:d7:fb:
19:5f:1d:f8:53:f3:ac:16:e4:39:e9:33:b5:9b:f5:
ca:e1:17:1f:5d:af:db:a4:be:fd:f4:06:67:16:94:
19:a4:41:79:77:da:3c:a9:f9:a6:94:67:d1:a4:4d:
ea:5d:0e:6c:17:e1:65:b5:66:c0:4c:8d:66:1f:95:
46:75:92:11:d6:ab:f5:0e:45:e3:37:fc:8c:18:d6:
be:68:af:5f:af:d5:b9:af:68:ed:2e:20:82:d3:59:
a3:b0:8c:b2:fb:65:a0:cd:38:ff:fc:c5:7e:8b:3f:
ea:e9:e2:26:7e:23:2b:f0:12:9f:5e:2e:cf:80:36:
8b:14:f3:5e:bb:51:49:2f:38:da:84:cc:44:eb:a5:
ca:7a:09:26:df:24:3f:ec:76:5f:30:a9:c0:6a:cb:
5f:f4:21:5d:bb:1d:c9:63:c7:ab:1f:ca:c7:53:02:
3c:3a:20:99:59:0d:9a:85:b8:c2:64:6a:9f:ab:01:
bd:be:5a:3b:c4:22:93:9e:67:5e:c8:10:d4:48:2c:
f1:ec:da:a0:c8:16:bd:ac:90:5b:51:41:2f:60:be:
08:90:ee:a0:9a:c4:bc:66:b8:bc:ee:0f:2e:21:3d:
07:70:fe:15:6b:1a:cc:f0:d9:bd:09:90:6e:de:99:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:50:F0:36:E5:6A:A6:D2:00:04:FB:FF:D9:CB:00:84:C1:30:B8
X509v3 Authority Key Identifier:
keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/62C86698F80A11EFA400AC2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.179.0/24
IPv6:
2001:df3:5700::/48
Signature Algorithm: sha256WithRSAEncryption
51:4d:dd:b3:7b:fc:21:d9:d6:0e:57:29:91:d2:2b:2b:e9:cd:
84:d1:95:4f:1e:98:3f:5d:60:6d:9d:b6:2d:7a:a6:f8:32:15:
55:59:51:54:20:c7:fe:3b:d3:c0:69:49:11:d2:a0:a5:a7:24:
b1:f5:0e:0e:cc:34:fb:30:19:d9:be:76:e4:49:62:63:57:0c:
6e:f3:b6:85:47:aa:9f:f4:8f:87:4f:31:a1:25:30:10:4f:35:
0d:5d:60:d8:c0:c6:e2:1d:78:c6:f0:5b:b1:b8:24:ee:af:e5:
08:2d:93:da:92:cc:84:3a:4a:7a:2e:a9:c0:ad:14:0e:03:ab:
92:34:c3:b2:ad:af:2b:79:36:f5:1d:f7:f2:3c:61:16:3c:1a:
87:08:95:f1:a5:b3:0c:4d:e6:3e:21:83:4d:3d:e0:a1:f5:37:
db:b2:68:4c:73:cf:12:5d:f1:f0:8b:34:55:d8:bf:19:63:01:
b7:75:5e:63:01:55:88:f9:2c:a5:6a:8d:d2:ed:76:87:9d:de:
f5:a4:19:26:dc:d6:b8:9b:be:94:ea:fd:b8:1b:10:89:5f:3b:
e4:06:80:fd:4c:27:8c:49:44:c3:ba:44:fa:db:e0:bd:6e:98:
84:9f:66:39:ef:4b:df:54:f1:4d:02:34:06:cf:ed:db:64:2f:
a9:41:f0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:18 2025 by rpki-client