
$ rpki-client -vvf rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/120C1E6EB98111F09CB3B01CC4F9AE02.roa
File: 120C1E6EB98111F09CB3B01CC4F9AE02.roa (raw, json)
Hash identifier: fLOwE+U4T9UDAZEuy7MHMCUn4PPCyIIciw8BuUakDVM=
Subject key identifier: DF:59:4C:20:EC:25:BA:C7:6D:0D:A8:87:69:4A:13:D3:5D:09:DC:B0
Certificate issuer: /CN=A919968F/serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Certificate serial: 04CF
Authority key identifier: 09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/120C1E6EB98111F09CB3B01CC4F9AE02.roa
Signing time: Tue 04 Nov 2025 13:20:45 +0000
ROA not before: Tue 04 Nov 2025 13:20:45 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 6939
IP address blocks: 103.176.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 13:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1231 (0x4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919968F, serialNumber=09A7D227EE36222ED9F3B9408D98ECF90DE6ADED
Validity
Not Before: Nov 4 13:20:45 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6909fdad-e244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:4b:d0:b4:ac:95:8f:17:29:db:1a:34:7d:
90:59:63:0f:b9:39:d4:33:02:58:f1:7a:53:b0:4a:
53:59:23:9f:17:d4:88:42:a4:13:ec:7f:71:45:c0:
f4:de:53:c0:43:59:9e:53:1f:e4:50:9b:94:51:3b:
25:7d:7d:73:46:ba:21:d4:34:23:68:88:80:65:68:
a2:9d:df:df:4b:92:77:6f:52:05:3b:53:62:e0:21:
b1:e5:19:0f:89:dd:93:39:c6:bf:97:63:03:71:28:
4c:6a:e0:16:55:bd:e6:05:ff:33:c2:5e:b4:c7:93:
b9:3a:19:a1:f4:17:60:2e:4b:b1:56:f2:f5:6a:17:
b0:c1:a4:c3:fb:d4:86:cc:3a:b6:26:4f:b6:e8:f1:
67:35:c5:1a:f4:5e:f8:74:6c:fa:cb:6f:02:58:52:
25:70:06:c0:94:94:8c:a3:95:c9:55:14:cc:61:aa:
eb:d8:c0:89:cf:ec:dc:d5:c0:17:a1:ce:13:41:4a:
a3:3f:ff:56:e7:80:27:41:5d:fb:bc:8c:86:46:2e:
e1:d1:45:ed:10:d9:99:ff:2f:18:e2:be:69:e2:51:
8e:11:84:66:24:22:bb:61:d4:c7:40:7e:d4:ee:d1:
25:a8:46:1d:e7:0d:91:7d:2a:c2:de:06:13:70:54:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:4C:20:EC:25:BA:C7:6D:0D:A8:87:69:4A:13:D3:5D:09:DC:B0
X509v3 Authority Key Identifier:
keyid:09:A7:D2:27:EE:36:22:2E:D9:F3:B9:40:8D:98:EC:F9:0D:E6:AD:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/CafSJ-42Ii7Z87lAjZjs-Q3mre0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CafSJ-42Ii7Z87lAjZjs-Q3mre0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919968F/9BCDA228483611ECB4202957C4F9AE02/120C1E6EB98111F09CB3B01CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c2:5a:11:2b:f9:ef:53:05:41:77:23:61:93:46:19:7d:ff:
1b:f5:8c:2c:ae:72:a3:93:d5:4c:af:0b:e5:4b:f0:98:ba:0f:
99:55:f2:2b:16:ee:bb:9a:06:b0:f1:19:d1:d6:bf:ca:de:37:
5c:46:af:9c:51:86:f9:b7:d5:ed:06:4a:52:0e:0a:75:c8:8a:
5d:e9:ed:e4:ca:f4:01:39:c4:83:2f:8f:bb:ab:e6:c0:b3:13:
0d:0d:f0:a7:bc:82:2d:21:b3:c6:44:7e:32:91:bc:d1:f1:71:
49:a7:95:b3:87:ed:30:45:b3:e3:08:a0:23:fd:97:91:34:ff:
67:18:20:57:8e:4e:cb:ec:c0:88:87:6c:2f:eb:60:45:ee:0b:
11:6e:8d:f9:2c:56:d6:1a:f6:30:cb:c9:db:3e:ce:e6:b7:84:
0b:0f:ed:23:d1:82:98:aa:9e:47:9e:33:00:00:1f:a3:5c:e3:
c3:97:bf:7f:b2:f9:b8:b0:96:96:d8:d8:29:8f:fd:25:53:32:
97:20:e4:b5:d1:37:94:47:89:22:6a:a2:73:8f:00:4e:ff:98:
c3:4a:51:a3:d6:b5:c5:21:a4:2f:aa:83:a6:3e:43:7c:b5:a1:
f3:1f:c7:48:df:ea:42:81:ec:0f:b3:f3:b3:d5:43:9d:65:23:
33:b2:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:45:48 2025 by rpki-client