
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
File: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (raw, json)
Hash identifier: CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=
Subject key identifier: 82:C5:16:77:B2:6B:BA:93:E6:A7:24:70:F6:82:70:6D:A7:63:2C:86
Certificate issuer: /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial: 0800
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
Signing time: Wed 14 May 2025 18:32:33 +0000
ROA not before: Wed 14 May 2025 18:32:33 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137823
IP address blocks: 103.115.24.0/22 maxlen: 22
103.115.24.0/23 maxlen: 23
103.115.24.0/24 maxlen: 24
103.115.25.0/24 maxlen: 24
103.115.26.0/23 maxlen: 23
103.115.26.0/24 maxlen: 24
103.115.27.0/24 maxlen: 24
2402:dbc0::/32 maxlen: 32
2402:dbc0:4000::/34 maxlen: 34
2402:dbc0:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 18:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Validity
Not Before: May 14 18:32:33 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6824e1c1-8468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:1b:5d:86:dc:12:62:23:c7:6d:15:a2:0a:
3b:b9:74:2e:eb:0e:5d:dd:e5:a3:d7:7c:4e:2a:1d:
86:13:89:55:42:90:66:8c:ca:95:b0:36:bd:8b:55:
79:2d:c5:de:c7:29:35:df:9d:94:aa:10:f1:0b:69:
7e:74:15:9a:7c:77:56:95:27:37:b1:24:55:2f:90:
e9:8c:f9:41:42:49:1e:92:85:58:5d:59:c9:4b:8e:
19:df:ac:04:27:fa:03:82:ac:8f:12:b5:8e:41:0d:
1b:d7:4d:98:16:69:f8:ae:07:f1:f2:80:d5:2c:8a:
14:e2:67:ae:1e:b6:bc:b1:d6:c4:d0:54:02:ae:f0:
b5:05:42:e7:4f:88:9b:7d:2b:20:f2:d8:b7:a1:ed:
68:1a:87:da:02:cd:9b:af:7f:86:67:bf:24:61:0a:
87:cf:09:ca:e1:55:89:60:4d:ae:10:66:78:25:3f:
ee:02:dd:35:fd:6b:da:98:a5:a9:bd:74:76:a3:ce:
ec:f5:05:bc:d8:b3:8b:4e:8d:46:bc:da:01:59:fd:
c7:de:0b:85:c0:9c:b1:c4:19:db:02:26:53:76:79:
e0:1f:ba:e9:08:68:89:cd:43:9f:2f:93:23:34:ab:
5e:50:9c:f9:02:e4:c2:2b:b4:06:a4:40:73:83:26:
a6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C5:16:77:B2:6B:BA:93:E6:A7:24:70:F6:82:70:6D:A7:63:2C:86
X509v3 Authority Key Identifier:
keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/57B4ADB0066A11ECA8CBA567C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.24.0/22
IPv6:
2402:dbc0::/32
Signature Algorithm: sha256WithRSAEncryption
40:97:6c:2a:63:be:e0:48:3d:20:a6:b4:f2:aa:a6:8d:c9:2e:
e0:25:c0:73:78:6e:08:3b:a2:d4:ba:11:08:53:19:7e:71:b3:
2d:d0:89:c0:33:e4:26:29:73:db:bd:62:ad:11:92:45:c4:6a:
cc:53:23:dd:d0:2f:f7:af:b8:4f:4d:82:18:25:0c:cf:45:4b:
ef:5e:57:92:e7:60:2a:1e:54:cb:b5:11:97:2b:a6:2c:37:eb:
a9:0c:c0:2a:1e:0d:d9:91:cc:26:3b:cd:75:46:21:f7:99:f3:
62:6d:46:e5:36:50:4f:d0:06:a3:eb:0c:6f:86:eb:a4:e5:94:
ff:aa:9c:4b:58:e3:ce:04:48:2c:cd:4c:27:c8:70:ea:df:12:
ff:18:5d:0f:c9:81:c2:b0:30:80:3b:95:4d:70:d8:26:d9:5e:
e1:50:a3:3f:ff:bd:11:e1:20:cb:9e:95:79:73:07:d5:85:03:
55:3a:b5:82:a2:78:02:81:be:a4:41:f5:d7:bb:3d:f7:bc:32:
35:b8:3c:cf:8c:99:1a:13:fe:07:d7:4a:4a:82:fe:01:b6:e0:
cf:d8:b1:35:04:6a:04:38:ea:e0:a0:6e:5a:3c:39:69:82:9e:
ad:c7:e0:35:b2:a2:ed:60:3d:ec:23:f1:1e:71:57:76:bd:b4:
c4:f3:d0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:37 2025 by rpki-client