
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B285AC807CA911F09D442F15C4F9AE02.roa
File: B285AC807CA911F09D442F15C4F9AE02.roa (raw, json)
Hash identifier: UX2zMGfv+WxZ0voK+QDzKZn1ZKk782a4iAXgqqE0IQo=
Subject key identifier: 16:19:4E:91:35:3A:B7:DD:1C:A0:31:04:CF:B2:A1:13:41:FB:67:89
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0B51
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B285AC807CA911F09D442F15C4F9AE02.roa
Signing time: Tue 19 Aug 2025 03:07:54 +0000
ROA not before: Tue 19 Aug 2025 03:07:54 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 15412
IP address blocks: 103.23.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 19:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2897 (0xb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Aug 19 03:07:54 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=68a3ea89-1640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:ca:23:7f:3d:62:9f:cf:2a:d7:96:40:32:
e2:08:78:19:d1:7f:0b:e0:6b:63:1c:48:c0:42:54:
70:96:6a:87:93:11:a9:07:fc:9a:ab:37:d6:6a:b8:
81:ae:da:2e:18:7b:67:49:04:0f:ed:c6:bb:5f:8d:
0b:05:18:a4:19:83:2b:b3:fa:0b:bc:76:17:82:61:
8b:f9:ad:82:2e:da:0f:6b:52:1c:6c:97:e3:5c:2c:
79:73:8e:c3:d6:6b:3c:78:c8:50:d7:a1:55:c1:96:
5c:07:02:d7:21:7e:5a:b2:e2:d4:ea:cd:8e:ed:a0:
6a:a4:16:db:8c:15:25:56:e0:da:7b:ba:c5:48:11:
7f:d3:28:71:2e:fd:ec:b3:5b:13:62:c1:c6:4a:4b:
b2:04:87:a9:1f:bc:01:f1:c7:6e:33:84:3c:ea:ff:
67:38:3b:52:9c:60:66:3e:e9:87:51:28:b6:b2:fc:
b2:6d:ac:0d:1b:2c:eb:c6:cc:e1:01:df:66:fc:41:
42:57:d6:99:56:03:ee:42:aa:68:a7:02:e0:ac:47:
97:ec:f8:fd:a6:ac:d7:b1:cf:b8:c7:4c:08:73:32:
dc:19:b8:8f:ef:47:46:40:f0:61:e9:0a:1a:c9:fa:
b8:0c:ee:22:42:18:41:e1:ab:45:92:97:97:46:42:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:4E:91:35:3A:B7:DD:1C:A0:31:04:CF:B2:A1:13:41:FB:67:89
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/B285AC807CA911F09D442F15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.72.0/22
Signature Algorithm: sha256WithRSAEncryption
43:2a:de:1e:86:71:67:ca:ee:20:25:55:57:aa:6b:af:59:f6:
0e:27:02:b2:a9:74:84:34:ab:45:45:cb:a5:a1:96:fe:ff:02:
bf:b9:48:61:1d:6a:cf:1d:94:9e:28:4b:4b:e6:6d:d6:7e:d4:
4b:c3:82:6a:7e:68:b9:16:8c:3b:e1:bd:82:85:5c:25:20:8f:
c4:ab:68:85:ee:36:7c:cd:7e:09:66:73:70:50:38:a0:9d:23:
94:10:eb:c1:5a:fe:e5:4d:be:bf:71:e5:e9:9e:a0:8b:50:c4:
ed:62:6b:8c:62:b6:7e:56:51:72:f8:b2:a1:cc:cc:f3:56:1e:
13:61:f4:9a:9e:07:7b:65:e8:02:43:f9:e4:a1:ce:6b:31:dd:
44:2e:30:99:17:db:da:ee:6d:13:89:27:bd:ee:b4:d9:e4:9e:
22:bf:88:e0:b1:76:8a:53:77:86:69:5f:76:b7:16:5c:f2:ea:
50:48:24:61:f6:5d:3a:d8:a2:67:66:5c:75:97:db:6b:4d:39:
7c:e1:67:9c:8e:fa:ed:73:88:96:4f:74:7c:b6:3e:f0:ea:14:
4e:48:bd:82:11:6a:4f:6a:06:3f:5f:8a:44:be:03:4a:74:96:
39:5f:a2:9f:2f:21:32:a7:03:cb:91:80:6f:3a:5f:1b:50:1f:
b5:cd:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:24:09 2025 by rpki-client