
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B3B00907DBF11F0B50C8B2EC4F9AE02.roa
File: 9B3B00907DBF11F0B50C8B2EC4F9AE02.roa (raw, json)
Hash identifier: N+zbsXg97MZdXy4ZrU11lQy8Yk66xQue1oNCnL+YKHE=
Subject key identifier: 7B:1C:39:76:64:CC:73:2A:CD:43:E8:61:75:78:1B:69:CC:C8:01:E2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: C2FB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B3B00907DBF11F0B50C8B2EC4F9AE02.roa
Signing time: Wed 20 Aug 2025 12:17:14 +0000
ROA not before: Wed 20 Aug 2025 12:17:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134020
IP address blocks: 103.55.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:24:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49915 (0xc2fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 20 12:17:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68a5bcca-1f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:63:a6:4c:89:37:83:23:24:ba:0f:a5:6a:
9a:51:c9:83:f1:76:1f:b9:71:ef:04:8b:a4:77:2c:
35:1a:e9:b2:5e:78:44:02:2a:de:66:69:55:3e:6f:
25:a4:ad:4e:0c:36:b0:e0:95:12:fc:5b:95:2f:73:
f7:03:0a:4f:60:38:5e:a6:dd:2c:2b:5e:d5:55:dd:
80:44:8a:ef:6e:a1:5a:32:bc:fe:74:94:6d:27:64:
96:73:1b:17:63:5f:63:4d:2a:4c:a3:06:fb:91:f7:
b7:20:0d:96:f9:60:39:db:c7:67:58:62:00:c5:bc:
44:ef:64:b9:ba:ae:ad:72:09:3d:2b:77:6e:97:09:
60:3b:25:c7:b1:b1:11:8e:1f:50:83:e9:97:88:c5:
22:f4:2d:8f:85:f0:57:d6:03:11:e9:b7:a3:06:e5:
50:bb:14:f8:a3:f1:cf:3d:fa:5d:88:6e:4a:82:58:
64:e6:be:19:c6:14:74:2e:ba:35:e0:e9:3d:a9:a6:
02:05:4f:23:cd:ae:7f:a0:da:d5:0c:35:86:e1:43:
aa:4d:ee:4b:03:e2:3b:5a:7c:75:4d:01:17:e9:ba:
37:43:33:55:4d:4d:f6:d0:c0:30:ef:82:85:f2:a0:
2d:d5:4b:33:d1:02:5e:25:67:da:79:33:fd:9b:fc:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:39:76:64:CC:73:2A:CD:43:E8:61:75:78:1B:69:CC:C8:01:E2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9B3B00907DBF11F0B50C8B2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.55.64.0/22
Signature Algorithm: sha256WithRSAEncryption
66:2c:17:10:8f:06:e2:30:7a:ee:3a:6c:34:e3:e1:69:a8:1a:
7c:18:b3:17:87:4e:ce:cd:22:7b:cf:f6:f2:ff:13:48:d0:93:
db:e2:1b:b4:ac:e0:1d:03:f7:e8:8a:2b:84:0a:d4:76:35:65:
43:98:25:49:ef:ca:0c:25:ce:a1:53:1b:c2:d1:a5:b0:45:0b:
87:c0:90:10:22:16:49:5e:b4:48:2d:f3:b1:bf:2e:3b:6e:7e:
32:b2:2b:f4:2b:07:b6:32:68:08:68:d8:ab:42:6a:9b:de:3b:
a2:04:1a:4c:70:b8:a4:b4:f2:71:05:99:5f:cb:2d:de:b1:b5:
7a:25:4b:11:cb:82:91:66:b4:a0:e6:b6:3f:f5:da:92:90:69:
d7:0f:a7:a0:01:10:ba:67:8e:84:15:36:23:7d:22:dc:98:a2:
a6:1c:7e:ba:dc:c2:30:1a:73:a7:92:44:cc:23:57:c5:2f:5c:
df:cd:f4:96:b5:64:38:de:1a:d2:9f:0e:42:2e:c1:cc:ee:f7:
bf:63:d4:1a:f0:9b:20:de:6f:02:df:67:88:c2:51:d6:9e:14:
29:c6:53:fc:56:82:44:aa:a0:df:53:9f:53:45:d3:8e:15:55:
03:0c:7a:e6:22:4b:9d:28:aa:8e:9c:bb:64:7c:00:35:ee:40:
3a:fb:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:06:14 2025 by rpki-client