
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
File: 71389AA6BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: uZPWXafREfhpHZiTk08TZrMeoRJ5/KZH/8N5/lnRng0=
Subject key identifier: C9:88:47:02:E1:C5:47:7E:8F:BB:62:5F:1D:A0:C9:4B:EC:05:39:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA6F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
Signing time: Thu 08 May 2025 16:32:21 +0000
ROA not before: Thu 08 May 2025 16:32:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59195
IP address blocks: 103.142.166.0/24 maxlen: 24
2001:df5:1180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47727 (0xba6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:32:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cdc94-b754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:bb:9b:dc:d8:c6:92:2e:11:f0:9f:06:85:
26:74:59:d4:17:57:96:1c:59:5b:39:f9:67:1d:37:
ce:a2:16:50:d6:dd:e1:46:e2:f5:0b:80:58:3c:bd:
49:33:a1:47:63:84:59:f7:cf:86:89:31:b1:33:3b:
a6:f8:94:29:b5:15:15:b4:f9:ff:93:35:45:bc:87:
93:b9:e7:21:7b:61:53:ba:fc:1e:4c:b5:af:7f:cf:
2e:b3:e2:5a:a3:de:3e:af:8f:57:eb:ef:ae:4d:ac:
4c:fc:85:6d:ff:b9:ba:0a:83:3a:2a:fb:45:a1:4f:
ad:80:53:d5:e1:0a:29:a6:3f:c8:bf:a7:48:2d:6c:
74:92:fe:04:29:cc:90:5c:1a:f6:60:91:27:81:71:
2c:37:c5:84:7d:f7:0e:a5:db:a6:43:30:63:33:20:
b5:98:e5:10:d5:e2:69:95:ac:97:15:d9:ce:d6:da:
d4:a9:44:f2:23:28:c9:2f:19:37:dd:5f:88:f8:98:
d7:58:79:81:9e:f1:21:54:1d:ef:dc:c5:12:64:fc:
5f:c7:d7:28:6f:72:4b:cf:53:34:ca:61:5f:5b:c3:
d3:f1:e4:ac:70:b3:26:ff:84:9a:e2:a7:fb:1b:b2:
80:22:b2:6d:2d:11:f9:64:be:5d:fa:78:c9:82:a2:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:88:47:02:E1:C5:47:7E:8F:BB:62:5F:1D:A0:C9:4B:EC:05:39:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/71389AA6BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.166.0/24
IPv6:
2001:df5:1180::/48
Signature Algorithm: sha256WithRSAEncryption
17:9f:48:99:83:cd:c6:29:0b:12:8d:7c:8f:95:46:89:f4:2b:
d5:40:6b:69:d9:30:c4:fd:86:42:59:36:99:2e:c1:6f:60:9f:
a9:54:27:80:37:da:e2:1f:85:82:55:b5:bd:e6:13:dc:22:80:
26:b4:ac:60:32:6a:aa:80:60:6f:91:ef:d6:b8:85:78:ef:14:
9f:28:b3:fd:ae:2f:19:1e:dc:1f:58:03:7c:f3:59:29:96:3d:
76:da:0a:1a:ab:23:31:3f:75:0d:0c:4d:03:98:c1:bf:cc:b0:
7f:3b:c7:cb:67:71:d6:b3:93:79:c3:65:0f:3b:83:d2:3e:37:
e0:71:ca:88:a3:b0:ba:a9:f8:94:25:1f:af:88:01:7b:af:c4:
7d:6d:c2:eb:18:85:10:36:c7:17:21:b4:92:9a:25:21:e7:f9:
43:f3:08:0f:81:50:49:b3:23:7a:99:df:4a:48:88:12:6b:13:
61:d0:6a:bf:2b:9e:dd:8a:d4:14:4e:c2:89:12:40:05:e5:0d:
42:0e:d8:fe:4d:7a:63:f5:ee:46:fb:c6:8b:2a:9e:61:8e:37:
dc:0f:6b:fc:c7:bf:d7:78:b9:b5:7c:2c:e5:cf:81:3b:3d:9a:
f8:6f:cc:ed:d3:f5:1b:9c:ce:57:d0:5c:f4:12:eb:10:0b:b8:
45:72:07:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:56 2025 by rpki-client