
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
File: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (raw, json)
Hash identifier: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=
Subject key identifier: E5:15:A0:AB:52:8A:73:6F:EB:73:84:5A:46:21:4E:3B:11:E8:1C:2A
Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Certificate serial: 04FF
Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
Signing time: Sat 14 Dec 2024 23:22:27 +0000
ROA not before: Sat 14 Dec 2024 23:22:27 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 133154
IP address blocks: 103.252.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 09 Nov 2025 23:09:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1279 (0x4ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A
Validity
Not Before: Dec 14 23:22:27 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=675e1333-34fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:65:b3:58:17:69:a8:fc:fb:8c:fe:82:d4:
6b:1b:dd:d0:07:2e:7f:6a:56:8e:fc:65:67:90:55:
63:2b:3b:b4:b7:02:1e:c1:e6:4c:81:ea:97:82:9f:
5a:59:85:47:5f:48:73:78:86:f7:02:4e:31:b6:e0:
18:8f:c3:ac:3f:47:8d:6b:0b:ce:75:be:59:88:bc:
b4:1a:74:d6:1c:2b:c2:21:65:7a:90:66:dc:57:65:
67:64:14:b1:c9:54:f9:53:30:65:56:ab:60:e6:4d:
bf:4e:f5:7c:4b:78:4d:08:50:d6:03:05:af:cd:22:
9b:98:50:03:a0:5d:34:50:5e:1b:2f:65:f1:31:2e:
22:bd:d8:8e:26:84:e4:04:98:cf:59:de:0a:9a:ef:
c7:6f:d6:1c:2d:1d:0e:c2:a4:3d:85:67:35:b4:cc:
b9:d6:69:9c:94:5d:fd:a6:25:cc:d6:24:79:9b:76:
cb:da:5d:eb:6a:ff:a6:f1:41:11:c6:41:24:fa:df:
8e:0e:9d:5f:29:a7:da:23:61:71:03:93:c2:96:3a:
f2:ad:95:1f:e0:5d:58:43:b7:14:8c:e8:9f:f7:3c:
3d:93:56:9e:24:8a:b2:43:19:fb:80:30:72:15:ab:
34:a3:43:df:4f:6c:8d:9d:ca:ec:39:43:b4:63:4c:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:15:A0:AB:52:8A:73:6F:EB:73:84:5A:46:21:4E:3B:11:E8:1C:2A
X509v3 Authority Key Identifier:
keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.252.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c1:21:c3:4b:5d:d6:92:7d:e6:e6:63:d7:03:ac:35:09:d4:
4c:18:fb:f0:d8:11:66:a3:eb:2c:cf:2b:c7:10:8e:75:df:a2:
ce:cd:de:5a:1e:82:11:76:77:2f:4b:52:b2:51:d9:98:c2:a5:
8e:5a:ae:1c:dd:7a:36:61:ad:16:1f:dc:1e:34:02:88:ff:75:
41:7b:97:b8:6f:e4:61:69:65:4a:79:11:cf:ca:cc:fa:8f:e2:
a8:7b:21:e9:83:ec:09:6b:49:cd:a3:03:2f:80:43:4d:7d:78:
94:3f:8d:5f:09:2d:ed:d5:49:26:f0:cb:0a:4a:e2:cd:3a:c0:
6b:65:f9:da:de:87:4b:13:64:f0:dd:e9:6e:94:6e:96:56:07:
54:ac:a0:bc:8b:1d:ad:29:6d:cb:65:7c:6c:e9:be:00:69:d8:
27:1c:96:4e:71:31:63:a8:0f:b7:78:38:3c:76:7f:04:b3:6e:
5a:fe:6a:4c:10:5e:c2:5b:1c:f6:c6:ec:ed:72:c5:95:49:f5:
7c:59:2b:9b:76:24:df:1d:a7:e1:e8:41:68:3f:e3:04:51:0b:
25:c0:de:b7:f8:9a:15:81:88:44:26:03:e9:44:d2:e9:f1:37:
68:90:6f:53:43:c9:95:5d:15:20:8c:a5:5e:1a:53:1f:5b:96:
a3:64:7f:52
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3
MDlCRjY1OUEwHhcNMjQxMjE0MjMyMjI3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVlMTMzMy0zNGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA381ls1gXaaj8+4z+gtRrG93QBy5/alaO/GVnkFVjKzu0twIeweZMgeqXgp9a
WYVHX0hzeIb3Ak4xtuAYj8OsP0eNawvOdb5ZiLy0GnTWHCvCIWV6kGbcV2VnZBSx
yVT5UzBlVqtg5k2/TvV8S3hNCFDWAwWvzSKbmFADoF00UF4bL2XxMS4ivdiOJoTk
BJjPWd4Kmu/Hb9YcLR0OwqQ9hWc1tMy51mmclF39piXM1iR5m3bL2l3rav+m8UER
xkEk+t+ODp1fKafaI2FxA5PCljryrZUf4F1YQ7cUjOif9zw9k1aeJIqyQxn7gDBy
Fas0o0PfT2yNncrsOUO0Y0zz4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOUVoKtS
inNv63OEWkYhTjsR6BwqMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG
NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEUwQjIvNjcwNDJDMThFRjY0MTFFQjgzM0ZDODBEQzRGOUFFMDIvNjNFM0VCM0VF
RjY2MTFFQjlBN0VGRTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn/PcwDQYJKoZIhvcNAQELBQADggEBAK7BIcNLXdaSfebm
Y9cDrDUJ1EwY+/DYEWaj6yzPK8cQjnXfos7N3loeghF2dy9LUrJR2ZjCpY5arhzd
ejZhrRYf3B40Aoj/dUF7l7hv5GFpZUp5Ec/KzPqP4qh7IemD7AlrSc2jAy+AQ019
eJQ/jV8JLe3VSSbwywpK4s06wGtl+dreh0sTZPDd6W6UbpZWB1SsoLyLHa0pbctl
fGzpvgBp2Ccclk5xMWOoD7d4ODx2fwSzblr+akwQXsJbHPbG7O1yxZVJ9XxZK5t2
JN8dp+HoQWg/4wRRCyXA3rf4mhWBiEQmA+lE0unxN2iQb1NDyZVdFSCMpV4aUx9b
lqNkf1I=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:25:16 2025 by rpki-client